$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/33c6b681-5a8b-33fe-acbe-ba12b7331888.roa File: 33c6b681-5a8b-33fe-acbe-ba12b7331888.roa (raw, json) Hash identifier: MqoYLWDC9k88cwGsaq7omsNaLuotKa84LPFGy+wA4so= Subject key identifier: FE:D9:91:C5:79:3B:90:47:A4:C7:E5:C3:E4:6E:20:4D:52:7D:B3:72 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848BE862C1E431D604B93859800 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/33c6b681-5a8b-33fe-acbe-ba12b7331888.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 137409 IP address blocks: 173.244.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2c:1e:43:1d:60:4b:93:85:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=c83e629e-cbbe-4104-a9bf-67bf3767338b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:a6:7b:e0:5c:9e:1c:da:c3:64:02:4e:ab: 88:b5:a6:54:9b:ef:da:a6:02:c0:26:82:77:dd:1a: be:70:66:c5:a9:e6:fd:b8:62:dd:8f:9c:2d:dd:61: 09:fa:68:77:a4:7a:0d:c2:3f:76:b0:e3:cc:0a:ec: 70:8d:94:9e:d0:b9:e4:05:36:17:8d:7c:69:ab:be: d5:21:5a:d9:26:66:ba:03:8b:56:d5:76:4f:6d:c2: 6d:a0:ef:38:b7:98:6e:66:10:43:97:b7:19:8e:ec: 00:5d:3c:55:ca:2b:13:ad:fc:f3:ab:37:8a:eb:66: 41:c4:d9:86:e7:80:25:78:f8:f6:b5:5a:7a:64:48: d5:79:4f:ca:00:a4:02:03:26:b8:67:62:cd:8e:ad: c4:6f:d6:5d:66:d8:5e:75:49:a2:c6:0d:84:15:6a: 02:aa:2d:ff:18:1d:41:f7:ba:1e:a6:51:b1:b5:0e: 3c:d1:57:d9:17:ee:2c:1e:ee:2f:dc:75:46:42:c7: ae:e0:7c:6a:d0:c8:7f:ab:b2:96:ff:81:40:c1:ed: 7e:31:78:1e:0c:9d:65:42:21:c7:a6:44:d8:7d:5e: 83:05:a0:5f:98:f6:ab:7d:07:67:95:a9:71:b1:66: c0:33:80:fc:3c:f8:86:3e:41:81:e6:4d:a6:ff:40: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D9:91:C5:79:3B:90:47:A4:C7:E5:C3:E4:6E:20:4D:52:7D:B3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/33c6b681-5a8b-33fe-acbe-ba12b7331888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.244.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a5:89:8f:b7:50:92:fa:04:f8:7d:3c:94:c5:47:db:87:bc: 99:df:7f:c1:dc:17:55:11:c5:f9:b5:4e:7f:f9:b6:b5:78:ea: 2f:f0:ab:ca:48:c3:af:86:b9:f1:9b:cb:2e:be:a8:4b:04:1c: 5e:d9:5a:11:a0:2b:a7:b7:73:d1:c4:18:37:f5:ff:e9:1c:b1: 2d:64:2e:e0:fc:1f:9b:6c:54:6c:35:38:63:21:e9:2c:eb:b5: 52:2b:44:36:27:60:0e:04:e9:c0:02:33:5d:b9:84:13:b8:9e: 19:cf:d4:fd:82:7a:d6:93:e6:7a:41:e1:4b:82:7f:64:d2:a1: e3:32:46:5d:a6:5e:2d:69:97:82:dc:2e:aa:c3:d3:ca:42:d9: c5:ab:ee:f9:2a:e3:67:ac:64:c1:1c:af:15:49:df:cc:9a:bd: f9:fc:07:57:b1:16:49:64:dc:6b:32:54:f3:27:67:73:2d:bb: c7:be:8e:21:12:c8:e3:ee:6a:f4:88:51:04:a7:b4:79:af:7d: 22:06:a7:91:83:f3:93:d7:8f:08:7c:9c:8c:0f:f2:5c:2b:63: 6f:02:4f:32:e2:c3:76:82:a0:3a:db:a4:4d:14:fe:e5:60:96: d0:6a:e2:75:ad:cb:46:fd:b4:a4:b6:f7:b9:ad:a7:39:48:0d: dd:03:68:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiweQx1gS5OFmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk YzgzZTYyOWUtY2JiZS00MTA0LWE5YmYtNjdiZjM3NjczMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M+me+Bcnhzaw2QCTquItaZUm+/apgLAJoJ3 3Rq+cGbFqeb9uGLdj5wt3WEJ+mh3pHoNwj92sOPMCuxwjZSe0LnkBTYXjXxpq77V IVrZJma6A4tW1XZPbcJtoO84t5huZhBDl7cZjuwAXTxVyisTrfzzqzeK62ZBxNmG 54AlePj2tVp6ZEjVeU/KAKQCAya4Z2LNjq3Eb9ZdZthedUmixg2EFWoCqi3/GB1B 97oeplGxtQ480VfZF+4sHu4v3HVGQseu4Hxq0Mh/q7KW/4FAwe1+MXgeDJ1lQiHH pkTYfV6DBaBfmParfQdnlalxsWbAM4D8PPiGPkGB5k2m/0ASQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7ZkcV5O5BHpMflw+RuIE1SfbNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMzNjNmI2ODEtNWE4Yi0z M2ZlLWFjYmUtYmExMmI3MzMxODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImliY+3UJL6BPh9PJTFR9uHvJnff8HcF1URxfm1Tn/5trV46i/wq8pI w6+GufGbyy6+qEsEHF7ZWhGgK6e3c9HEGDf1/+kcsS1kLuD8H5tsVGw1OGMh6Szr tVIrRDYnYA4E6cACM125hBO4nhnP1P2CetaT5npB4UuCf2TSoeMyRl2mXi1pl4Lc LqrD08pC2cWr7vkq42esZMEcrxVJ38yavfn8B1exFklk3GsyVPMnZ3Mtu8e+jiES yOPuavSIUQSntHmvfSIGp5GD85PXjwh8nIwP8lwrY28CTzLiw3aCoDrbpE0U/uVg ltBq4nWty0b9tKS297mtpzlIDd0DaCQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:42 2025 by rpki-client