$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa File: 848bc911-8d84-34e0-adf4-211d260c3143.roa (raw, json) Hash identifier: DyJvTV557uP8s/J98FJjzZh65FtfQRXH/C9IRNWgERc= Subject key identifier: D9:A5:A7:A9:84:E8:9D:DE:0B:16:DD:81:54:8E:96:3F:D5:9B:D3:6C Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A5765C9328285E6ADEB089800 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 206092 IP address blocks: 173.239.211.0/24 maxlen: 24 173.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c9:32:82:85:e6:ad:eb:08:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=168b0216-cd70-4bdd-a1c0-a42c563bb6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:c9:a5:61:21:1a:4c:32:40:05:8f:bf:ca: 0a:a1:1a:0c:7a:b1:29:ee:e6:88:12:39:d5:09:49: db:ad:e6:2e:95:2f:05:fb:25:c8:07:94:fe:94:f4: 56:e4:96:3f:4c:1b:6a:60:b8:30:6a:a3:d3:71:8c: d4:4c:ef:39:53:fb:33:4e:95:f6:32:93:a9:fe:32: cf:08:32:5c:d5:65:47:70:52:ae:5f:30:48:22:eb: bf:63:ea:28:9d:6c:29:8b:90:c1:5e:8a:78:a4:fd: af:49:a3:0f:cb:0f:01:42:fa:ac:7a:8e:b3:60:28: 02:18:33:08:73:27:a5:a9:6f:5e:aa:73:74:e4:9f: 34:88:73:2d:6c:cf:a6:46:46:cd:e9:cc:2c:f9:b0: cf:b1:c2:fb:1c:17:d3:d2:e8:0a:e9:5c:32:6b:b3: b4:3f:7d:44:22:11:9a:c3:97:e4:c7:87:1e:01:9a: ad:9a:7b:9b:ab:16:b9:df:18:2f:41:13:2f:9b:a3: d1:79:7a:5e:e0:80:55:38:f2:2a:29:23:a2:33:eb: 2d:f4:1f:84:37:d6:0d:5b:93:12:33:54:16:6d:c2: 3d:af:38:1b:4c:a1:88:6c:a3:ae:c5:85:af:b1:67: aa:9b:b0:74:c6:64:36:9d:25:d3:96:a7:6e:86:af: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:A7:A9:84:E8:9D:DE:0B:16:DD:81:54:8E:96:3F:D5:9B:D3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.211.0/24 173.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:fd:e8:99:b7:e5:8f:94:73:2e:35:31:65:38:97:8d:4b:4d: 25:3e:23:74:70:f1:b1:26:92:ae:3e:2d:69:8d:67:f4:24:e5: 69:5b:46:01:a7:ff:19:a1:fb:39:4b:e5:53:76:f8:0f:a2:4a: 46:01:83:b2:0f:91:36:7b:fe:8e:fd:b7:e1:77:9e:9e:7e:cc: 61:54:68:ee:d7:62:e6:6a:7c:f9:a5:f2:11:7f:12:3f:95:60: da:01:4a:ce:f4:3e:0f:2c:6a:f2:11:df:bd:bd:00:3b:f1:32: e0:8b:8e:e1:8b:77:45:fb:a5:62:cf:f3:da:a2:4e:7a:87:95: 95:8b:33:c9:d6:cd:a8:e4:0a:54:41:69:d7:66:7b:ec:f7:55: 1f:b4:2f:4a:ff:aa:94:88:73:3d:03:d1:45:b2:f1:c6:6f:c2: 16:e3:39:6f:b8:8b:76:7b:5d:60:ff:06:8a:00:d4:68:77:0e: 9d:40:7b:42:77:28:ef:1d:4e:30:9f:d1:c5:97:dd:c2:b5:df: cf:40:b5:70:98:53:7f:78:35:87:3b:94:24:7c:01:ad:aa:0a: b1:60:30:9e:95:fb:f2:ba:fa:f3:7b:ea:fd:33:f0:b4:20:5e: e2:02:0c:38:42:bf:fb:b1:57:9f:c2:b3:07:ca:74:2f:aa:ae: 51:00:b1:9d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpXZckygoXmresImAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MTY4YjAyMTYtY2Q3MC00YmRkLWExYzAtYTQyYzU2M2JiNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5vJpWEhGkwyQAWPv8oKoRoMerEp7uaIEjnV CUnbreYulS8F+yXIB5T+lPRW5JY/TBtqYLgwaqPTcYzUTO85U/szTpX2MpOp/jLP CDJc1WVHcFKuXzBIIuu/Y+oonWwpi5DBXop4pP2vSaMPyw8BQvqseo6zYCgCGDMI cyelqW9eqnN05J80iHMtbM+mRkbN6cws+bDPscL7HBfT0ugK6Vwya7O0P31EIhGa w5fkx4ceAZqtmnubqxa53xgvQRMvm6PReXpe4IBVOPIqKSOiM+st9B+EN9YNW5MS M1QWbcI9rzgbTKGIbKOuxYWvsWeqm7B0xmQ2nSXTlqduhq99VQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNmlp6mE6J3eCxbdgVSOlj/Vm9NsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODQ4YmM5MTEtOGQ4NC0z NGUwLWFkZjQtMjExZDI2MGMzMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/TAwQA re/+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMv96Jm35Y+Ucy41MWU4l41LTSU+I3Rw8bEmkq4+LWmNZ/Qk 5WlbRgGn/xmh+zlL5VN2+A+iSkYBg7IPkTZ7/o79t+F3np5+zGFUaO7XYuZqfPml 8hF/Ej+VYNoBSs70Pg8savIR3729ADvxMuCLjuGLd0X7pWLP89qiTnqHlZWLM8nW zajkClRBaddme+z3VR+0L0r/qpSIcz0D0UWy8cZvwhbjOW+4i3Z7XWD/BooA1Gh3 Dp1Ae0J3KO8dTjCf0cWX3cK1389AtXCYU394NYc7lCR8Aa2qCrFgMJ6V+/K6+vN7 6v0z8LQgXuICDDhCv/uxV5/CswfKdC+qrlEAsZ0= -----END CERTIFICATE-----Generated at Thu Jul 10 07:47:45 2025 by rpki-client