$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa File: 2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa (raw, json) Hash identifier: DyTKk/IVemhg814iPDbfy7OSP4cUwGMnNBZC5j3OLlE= Subject key identifier: 0B:EB:30:C4:46:65:85:2C:3E:52:C5:25:78:AD:C2:35:1F:19:E2:3C Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848A565F686DB179FF7BBEBE980 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 43260 IP address blocks: 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f6:86:db:17:9f:f7:bb:eb:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=a4e6068c-aeb7-4c1c-a2ff-372391dc9b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:38:5a:53:c2:92:d1:81:5f:e7:3f:6d:cf: 31:fa:e5:47:ed:a1:5c:ce:e4:ea:d0:09:c5:9e:5f: b6:b6:7d:6c:ea:a9:0f:1c:90:6b:ee:54:48:72:2d: 03:22:ff:df:f6:4d:7a:67:92:c0:ef:86:e8:79:3a: 0e:9e:cd:c7:4c:32:22:f7:09:4b:55:ce:2c:43:de: 79:7f:9a:86:c2:bd:a6:c5:32:1a:64:b3:8f:9a:98: 60:be:3c:14:fa:e7:33:38:d4:7e:cf:cf:05:85:60: f8:6c:51:4a:67:8d:67:64:a1:fa:cd:ff:ba:08:6d: 1c:da:55:b1:e2:c1:db:88:2e:d5:f6:69:25:75:7e: c0:a2:f0:60:44:ad:94:7b:af:91:01:47:79:94:d5: de:3b:b4:22:78:4e:42:3d:6e:59:98:17:11:4e:7a: 96:ac:33:ba:8d:2b:bd:a1:ec:d1:21:46:b7:3d:8d: a0:75:c0:2e:0f:a9:f3:92:ea:33:ec:8b:6e:30:8e: 89:57:4a:7f:16:e4:97:a7:18:30:8b:86:23:18:09: 1f:48:17:ce:92:a0:60:1e:60:61:95:1b:59:89:74: 64:e0:79:bf:f1:88:6b:76:67:c9:1a:f0:70:3c:11: fa:3e:b7:a2:76:7e:d6:70:a4:3e:5e:1b:13:dd:e5: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:30:C4:46:65:85:2C:3E:52:C5:25:78:AD:C2:35:1F:19:E2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:e2:e4:3d:df:19:76:b0:4d:65:6b:3c:44:87:4f:f5:f0:e9: 95:11:7a:51:ca:89:23:b2:33:81:ff:39:9e:58:b4:0d:b7:ba: 5e:e0:28:de:2f:01:45:08:25:39:4f:79:60:60:92:4a:06:53: 28:ce:b1:76:72:62:bd:27:46:63:fe:d2:05:98:81:04:3f:89: 52:6c:fb:94:b3:62:90:16:71:68:03:ae:5c:80:ee:9e:bd:4d: 6f:aa:35:24:a5:d2:07:f3:be:f5:33:21:65:1c:a9:72:cc:d1: 39:f1:fc:7e:49:b6:d0:01:d0:9a:de:fb:90:6f:5a:cf:f9:5d: 24:68:33:eb:0f:66:f3:a6:57:6c:bf:11:39:ef:ed:93:ab:83: 2b:bd:0a:75:64:ca:46:53:7f:78:02:66:62:2d:88:4f:aa:a7: 07:57:e0:99:e8:b9:ad:3e:5e:19:1b:55:50:d5:8e:0e:90:ed: 1f:14:08:8c:1b:b6:a0:cb:e3:0a:95:59:0c:2d:34:2f:aa:b1: 3c:3c:83:26:11:ff:56:23:e5:1d:cd:11:62:30:6c:af:64:82: ff:b6:ed:b6:37:11:8d:e3:59:d7:3b:8b:fc:62:5e:20:0b:be: 3a:39:fd:51:84:3b:0e:ba:49:f4:d7:ac:dd:3f:1a:59:e4:d9: b5:7a:46:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfaG2xef97vr6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTRlNjA2OGMtYWViNy00YzFjLWEyZmYtMzcyMzkxZGM5YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43M4WlPCktGBX+c/bc8x+uVH7aFczuTq0AnF nl+2tn1s6qkPHJBr7lRIci0DIv/f9k16Z5LA74boeToOns3HTDIi9wlLVc4sQ955 f5qGwr2mxTIaZLOPmphgvjwU+uczONR+z88FhWD4bFFKZ41nZKH6zf+6CG0c2lWx 4sHbiC7V9mkldX7AovBgRK2Ue6+RAUd5lNXeO7QieE5CPW5ZmBcRTnqWrDO6jSu9 oezRIUa3PY2gdcAuD6nzkuoz7ItuMI6JV0p/FuSXpxgwi4YjGAkfSBfOkqBgHmBh lRtZiXRk4Hm/8YhrdmfJGvBwPBH6Preidn7WcKQ+XhsT3eWi/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvrMMRGZYUsPlLFJXitwjUfGeI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMmJiODhlMzEtNDU2ZS0z MmYyLWI5NmQtZjVhYTYxNDg4Y2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALri5D3fGXawTWVrPESHT/Xw6ZURelHKiSOyM4H/OZ5YtA23ul7gKN4v AUUIJTlPeWBgkkoGUyjOsXZyYr0nRmP+0gWYgQQ/iVJs+5SzYpAWcWgDrlyA7p69 TW+qNSSl0gfzvvUzIWUcqXLM0Tnx/H5JttAB0Jre+5BvWs/5XSRoM+sPZvOmV2y/ ETnv7ZOrgyu9CnVkykZTf3gCZmItiE+qpwdX4Jnoua0+XhkbVVDVjg6Q7R8UCIwb tqDL4wqVWQwtNC+qsTw8gyYR/1Yj5R3NEWIwbK9kgv+27bY3EY3jWdc7i/xiXiAL vjo5/VGEOw66SfTXrN0/Glnk2bV6RpA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:40 2025 by rpki-client