$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa File: 0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa (raw, json) Hash identifier: sAAYFmET+qwi+exRgmgYI/8TWoFz0ooJwvIIQHILDaA= Subject key identifier: B1:49:41:D9:E9:95:52:78:CB:DE:72:5C:7F:CF:51:2E:66:25:05:50 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A3FAADA9707CC84C4858D6400 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 212238 IP address blocks: 173.239.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:da:97:07:cc:84:c4:85:8d:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=40c52195-7a9c-4ba1-b694-3f41e2712f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:c2:64:8a:4f:30:84:56:ba:4e:45:b3:72: cc:9d:6d:01:00:3d:fa:01:da:50:c1:a1:63:68:77: 4d:0e:6b:5d:ae:c8:cb:16:81:ab:84:b4:cd:c7:ba: c6:bd:91:ef:21:dc:3f:eb:d9:22:70:1a:cd:dc:68: e4:b5:40:bd:aa:1a:df:f0:d9:8e:44:a0:84:e9:97: e5:71:c2:08:c9:9c:1c:b7:34:a4:98:71:9e:7b:1c: 03:50:a4:ee:5d:89:22:21:b6:6e:80:9d:ed:27:4c: 48:f1:64:52:4e:82:8f:9d:7f:6c:a6:cc:82:52:51: 7d:28:cd:e4:da:f1:9b:da:df:9a:02:17:8b:76:78: 21:23:05:da:58:9b:43:2e:ed:8c:70:85:93:86:b5: 4a:1f:97:89:96:e9:7e:34:71:0a:51:dc:f5:69:75: b1:53:45:f1:57:3e:0e:2b:9a:36:25:a9:51:83:67: ba:b0:07:38:ba:a1:77:82:6e:56:11:1a:00:08:3d: d7:b1:27:10:59:46:cd:7c:b1:4d:03:9e:9b:81:34: a6:66:38:b7:47:72:eb:c8:1d:0b:2d:1b:f9:32:ff: 93:91:40:ae:04:70:cc:f0:25:b4:b8:7b:06:a5:1f: d7:c5:67:cc:c4:c8:45:ee:6b:db:b9:34:82:df:c6: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:49:41:D9:E9:95:52:78:CB:DE:72:5C:7F:CF:51:2E:66:25:05:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:20:fa:52:ec:7b:74:6c:a8:01:cd:b0:36:7b:be:e5:84:a3: 9c:23:39:bd:58:b6:c3:3c:12:a5:e4:b4:3e:8b:fd:7a:d9:3e: cc:84:7f:6e:52:50:4a:a1:9f:53:64:15:5a:90:21:82:44:ed: 56:a7:ef:16:7b:64:6f:59:e9:53:c0:1b:7f:0d:3a:f7:f1:56: 6e:f2:bf:df:72:50:55:45:3e:1e:9f:81:4c:68:c5:b8:60:08: ed:0b:52:3b:c1:1f:c9:6e:41:60:4a:b9:e1:d6:ac:9e:f2:dd: e4:43:71:bb:8d:95:ee:64:79:d1:30:18:d5:c3:85:02:f6:09: c7:c0:35:03:8c:53:4a:18:8c:6b:b2:49:74:39:d1:00:80:80: c9:e7:a7:c8:47:60:76:7f:6d:51:26:99:2e:d3:bb:80:7a:99: 38:23:90:9e:b2:5e:80:07:6f:cf:a5:c8:1c:17:0e:14:88:cb: 7b:59:70:28:56:9c:a9:6e:25:0c:1e:62:7a:16:7a:f6:56:6d: 67:b2:31:c9:d8:ff:bf:e7:bd:3b:ca:e1:09:e1:a3:e5:ae:70: f1:17:f6:b8:22:f2:f6:16:a4:78:4b:fc:54:f9:0a:63:ee:f6: f0:88:eb:87:06:94:2a:3c:5e:dd:cb:1e:cb:8f:92:16:c3:00: 63:9a:17:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo/qtqXB8yExIWNZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk NDBjNTIxOTUtN2E5Yy00YmExLWI2OTQtM2Y0MWUyNzEyZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9DCZIpPMIRWuk5Fs3LMnW0BAD36AdpQwaFj aHdNDmtdrsjLFoGrhLTNx7rGvZHvIdw/69kicBrN3GjktUC9qhrf8NmORKCE6Zfl ccIIyZwctzSkmHGeexwDUKTuXYkiIbZugJ3tJ0xI8WRSToKPnX9spsyCUlF9KM3k 2vGb2t+aAheLdnghIwXaWJtDLu2McIWThrVKH5eJlul+NHEKUdz1aXWxU0XxVz4O K5o2JalRg2e6sAc4uqF3gm5WERoACD3XsScQWUbNfLFNA56bgTSmZji3R3LryB0L LRv5Mv+TkUCuBHDM8CW0uHsGpR/XxWfMxMhF7mvbuTSC38bU8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFJQdnplVJ4y95yXH/PUS5mJQVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMDk2MzkwNGItOWZjNS0z ZWZmLTg3NDMtM2MyYmQxYjFjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3IPpS7Ht0bKgBzbA2e77lhKOcIzm9WLbDPBKl5LQ+i/162T7MhH9u UlBKoZ9TZBVakCGCRO1Wp+8We2RvWelTwBt/DTr38VZu8r/fclBVRT4en4FMaMW4 YAjtC1I7wR/JbkFgSrnh1qye8t3kQ3G7jZXuZHnRMBjVw4UC9gnHwDUDjFNKGIxr skl0OdEAgIDJ56fIR2B2f21RJpku07uAepk4I5Cesl6AB2/PpcgcFw4UiMt7WXAo VpypbiUMHmJ6Fnr2Vm1nsjHJ2P+/5707yuEJ4aPlrnDxF/a4IvL2FqR4S/xU+Qpj 7vbwiOuHBpQqPF7dyx7Lj5IWwwBjmhdD -----END CERTIFICATE-----Generated at Thu Jul 10 07:51:59 2025 by rpki-client