$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa File: 7171b1a1-b47a-3900-865e-4cfb068b19be.roa (raw, json) Hash identifier: IcJBTzRUs92gGzO1HUS1DcG2qqAkmlv5D1Xs60h1Fng= Subject key identifier: B9:3C:1B:94:62:29:33:E6:07:59:D7:D2:F6:46:DD:13:32:C5:72:6D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858489BA0B44299DC9C8EE370A100 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 137409 IP address blocks: 173.244.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:b4:42:99:dc:9c:8e:e3:70:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=b94ebd22-dd84-4c3f-85ce-261a0f1904be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:71:c1:6a:09:a8:87:f5:fb:28:18:3f:c1: 1a:9b:a3:f8:d3:8e:51:67:96:b6:c2:9f:9c:6c:ff: 50:aa:18:b5:94:d2:ea:e1:8e:7e:0f:69:0e:03:ee: e9:89:d5:51:c5:d5:75:d9:83:af:18:b7:c3:ce:65: ef:14:1e:c0:43:f5:86:73:1b:c7:a8:f6:bb:a4:2d: 34:f4:26:4c:a1:fd:17:f2:0d:08:d7:e6:7b:63:52: 9d:b1:26:b4:68:e1:da:8f:40:10:44:ee:71:e7:5c: 9a:b0:dc:ba:58:26:ac:d7:69:e4:10:44:c4:7a:bc: 20:54:54:78:00:d8:4e:d9:3d:6e:29:8f:dc:f3:b1: 30:f5:47:d0:30:c2:b6:12:70:ec:fd:f9:78:e6:3b: 74:e6:97:65:17:54:47:ce:f7:05:ba:d6:28:b1:c2: 3d:3e:ce:07:05:3c:a0:57:61:e3:53:6e:8a:f0:6c: 2e:de:5c:70:93:94:51:cb:bf:26:0c:97:97:07:c2: 9b:e3:4a:98:ed:b3:ec:1d:a5:3a:65:c8:46:d4:9e: 0d:77:88:bb:78:ce:da:fb:25:db:26:50:e6:62:0f: 61:00:e3:7f:7e:e4:b7:8f:af:cf:a2:45:f0:30:b5: 98:84:1b:34:fd:fc:60:d5:89:ad:30:49:93:9c:6e: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:1B:94:62:29:33:E6:07:59:D7:D2:F6:46:DD:13:32:C5:72:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.244.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2f:74:ea:2b:95:72:1d:82:86:cc:2e:84:d3:dd:99:da:f6: 9e:fb:2d:b7:4a:cb:b6:4e:32:d6:d3:7f:1b:6f:2d:b1:f0:9b: ae:1d:1b:52:44:2b:54:cf:26:ad:4a:32:65:52:7c:54:9f:52: 99:5c:7d:bd:6f:42:f6:3e:d1:c9:a7:1c:5c:f7:2a:0d:44:17: 7e:13:33:48:be:27:86:db:6a:90:cb:d4:e9:40:74:7e:96:87: 0c:da:b2:51:46:e7:29:d9:91:58:43:a4:a5:5f:43:33:e4:d2: 07:fe:19:fc:f3:5d:bc:d7:9a:58:d0:85:3a:dc:ce:3d:0f:7c: 2f:af:99:d5:88:28:f9:5a:17:47:7f:9e:79:f6:6f:c3:c2:8a: a3:d9:cf:8e:da:6a:ec:b2:f5:f1:c2:c7:c3:f1:af:21:98:9d: 67:83:50:b7:4e:02:aa:8d:37:b2:1e:fb:28:a2:78:e6:68:83: 4f:42:74:a3:18:82:1f:30:6b:51:0e:05:8f:30:fe:b1:09:e9: b0:93:ef:a7:70:fc:c4:6d:b6:aa:e0:bd:9e:84:0e:f6:96:37: 95:dc:81:66:77:2e:25:3b:bf:ed:a2:d6:88:f2:88:14:2c:8d: aa:43:77:69:11:7e:1a:29:23:f4:28:5e:46:16:d0:d2:00:89: 93:f1:94:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLRCmdycjuNwoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk Yjk0ZWJkMjItZGQ4NC00YzNmLTg1Y2UtMjYxYTBmMTkwNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl31xwWoJqIf1+ygYP8Eam6P4045RZ5a2wp+c bP9Qqhi1lNLq4Y5+D2kOA+7pidVRxdV12YOvGLfDzmXvFB7AQ/WGcxvHqPa7pC00 9CZMof0X8g0I1+Z7Y1KdsSa0aOHaj0AQRO5x51yasNy6WCas12nkEETEerwgVFR4 ANhO2T1uKY/c87Ew9UfQMMK2EnDs/fl45jt05pdlF1RHzvcFutYoscI9Ps4HBTyg V2HjU26K8Gwu3lxwk5RRy78mDJeXB8Kb40qY7bPsHaU6ZchG1J4Nd4i7eM7a+yXb JlDmYg9hAON/fuS3j6/PokXwMLWYhBs0/fxg1YmtMEmTnG5LlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk8G5RiKTPmB1nX0vZG3RMyxXJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNzE3MWIxYTEtYjQ3YS0z OTAwLTg2NWUtNGNmYjA2OGIxOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkvdOorlXIdgobMLoTT3Zna9p77LbdKy7ZOMtbTfxtvLbHwm64dG1JE K1TPJq1KMmVSfFSfUplcfb1vQvY+0cmnHFz3Kg1EF34TM0i+J4bbapDL1OlAdH6W hwzaslFG5ynZkVhDpKVfQzPk0gf+GfzzXbzXmljQhTrczj0PfC+vmdWIKPlaF0d/ nnn2b8PCiqPZz47aauyy9fHCx8PxryGYnWeDULdOAqqNN7Ie+yiieOZog09CdKMY gh8wa1EOBY8w/rEJ6bCT76dw/MRttqrgvZ6EDvaWN5XcgWZ3LiU7v+2i1ojyiBQs japDd2kRfhopI/QoXkYW0NIAiZPxlO8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:43:15 2025 by rpki-client