$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa File: 0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa (raw, json) Hash identifier: Vm0V09NKfdegAPaEliOIFSdms2GjyrP+7X+8hHZqpBU= Subject key identifier: 05:AF:DD:B3:83:71:25:0F:51:62:77:6B:52:DF:83:28:99:13:79:11 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848811B0C15729D02B5BD78A800 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa Signing time: Sat 11 Jan 2025 02:00:39 +0000 ROA not before: Sat 11 Jan 2025 02:00:39 +0000 ROA not after: Fri 11 Apr 2025 01:00:39 +0000 asID: 212238 IP address blocks: 173.239.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:1b:0c:15:72:9d:02:b5:bd:78:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 11 02:00:39 2025 GMT Not After : Apr 11 01:00:39 2025 GMT Subject: CN=214b1887-1c29-4084-b5e6-da7b305d92e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:f1:ec:8a:51:7c:2b:cb:14:c6:4c:e9:3b: a1:e0:e0:ee:2d:ce:de:b2:22:33:55:4e:ca:fa:b5: 9d:15:78:43:4f:d6:a2:81:dd:73:3e:46:09:a4:c0: 41:75:13:3d:f4:44:76:26:eb:18:7e:c2:19:cb:65: d7:d6:18:61:39:96:9e:58:1a:f7:d7:42:78:71:2b: 3c:52:26:3c:ce:20:b1:8f:ec:1d:0a:ba:2b:63:05: d1:5d:b6:57:f1:96:c3:00:58:b3:bf:61:f7:dc:8b: 87:04:17:5a:37:b9:79:ab:87:09:34:26:65:0d:36: 86:30:63:e2:69:4c:ef:9a:9c:7e:b2:1f:bf:9f:62: 3c:9d:5d:89:a8:23:d0:4b:b9:1c:0a:59:07:3c:c3: fc:81:d8:1f:e6:f1:92:f8:a5:c8:29:0c:ac:81:62: c8:e6:ef:b0:f8:cf:85:0e:aa:4f:2b:40:f2:d1:af: 94:d6:f5:5e:51:c1:ad:a6:de:e9:d4:54:d6:7b:6d: 1d:25:26:f2:3c:80:db:9b:c2:08:17:4a:4d:18:a1: 4b:88:47:37:93:5e:7a:84:a8:ae:96:0c:f5:80:36: a9:e3:71:25:91:be:88:5f:80:b8:2d:d4:f7:77:bd: fb:51:5d:fd:8f:70:db:a8:bd:f6:3b:01:22:c4:85: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AF:DD:B3:83:71:25:0F:51:62:77:6B:52:DF:83:28:99:13:79:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:28:7d:6f:47:1d:b3:73:eb:ba:51:c9:25:f0:cd:47:56:f0: 6f:0a:e2:f1:0c:3e:d6:e9:37:5e:f5:e0:3a:3e:d1:b3:a8:95: 79:f3:06:17:08:4d:13:71:a3:9e:35:25:58:10:fc:22:0f:8b: 33:ca:90:8b:6b:7f:f7:d9:fa:aa:6f:e6:d0:ed:df:e8:64:ef: fa:2e:ab:5a:7d:68:cf:ad:cc:0e:4b:17:b2:a2:30:a5:70:a3: 8a:8b:c5:95:0a:56:e2:a3:47:fb:96:11:eb:b0:0e:d5:06:ec: 66:68:e0:37:b3:4b:68:d0:66:c3:ad:f4:b9:1a:41:4d:b0:98: 64:63:24:f0:31:b0:3c:e6:70:bb:ab:3e:b4:a0:28:58:d2:df: c8:cd:f4:26:51:5d:e3:8a:c2:69:08:2c:5c:04:60:fe:e9:8a: 34:2d:bb:1e:22:d5:e3:94:42:96:dd:da:c9:d3:ee:ee:ae:b4: df:6e:27:43:ae:c8:33:e1:70:e9:83:8c:72:0f:98:0b:19:95: 5a:c4:a9:cd:d2:23:de:e3:3b:7d:9e:da:d9:0a:fb:ed:1a:b1: 96:f3:a5:e2:4d:02:ee:9f:9e:23:11:12:38:8d:f1:ca:a3:2a: ae:29:6b:45:8a:00:0e:41:81:01:a8:e0:fc:5c:82:03:7a:53: ea:9b:16:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiBGwwVcp0Ctb14qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk MjE0YjE4ODctMWMyOS00MDg0LWI1ZTYtZGE3YjMwNWQ5MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP7x7IpRfCvLFMZM6Tuh4ODuLc7esiIzVU7K +rWdFXhDT9aigd1zPkYJpMBBdRM99ER2JusYfsIZy2XX1hhhOZaeWBr310J4cSs8 UiY8ziCxj+wdCrorYwXRXbZX8ZbDAFizv2H33IuHBBdaN7l5q4cJNCZlDTaGMGPi aUzvmpx+sh+/n2I8nV2JqCPQS7kcClkHPMP8gdgf5vGS+KXIKQysgWLI5u+w+M+F DqpPK0Dy0a+U1vVeUcGtpt7p1FTWe20dJSbyPIDbm8IIF0pNGKFLiEc3k156hKiu lgz1gDap43Elkb6IX4C4LdT3d737UV39j3DbqL32OwEixIXYPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAWv3bODcSUPUWJ3a1LfgyiZE3kRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMDk2MzkwNGItOWZjNS0z ZWZmLTg3NDMtM2MyYmQxYjFjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASKH1vRx2zc+u6Uckl8M1HVvBvCuLxDD7W6Tde9eA6PtGzqJV58wYX CE0TcaOeNSVYEPwiD4szypCLa3/32fqqb+bQ7d/oZO/6LqtafWjPrcwOSxeyojCl cKOKi8WVClbio0f7lhHrsA7VBuxmaOA3s0to0GbDrfS5GkFNsJhkYyTwMbA85nC7 qz60oChY0t/IzfQmUV3jisJpCCxcBGD+6Yo0LbseItXjlEKW3drJ0+7urrTfbidD rsgz4XDpg4xyD5gLGZVaxKnN0iPe4zt9ntrZCvvtGrGW86XiTQLun54jERI4jfHK oyquKWtFigAOQYEBqOD8XIIDelPqmxZp -----END CERTIFICATE-----Generated at Fri Mar 14 14:04:28 2025 by rpki-client