$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa File: 9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa (raw, json) Hash identifier: /wNB70tUCr4oCQJE2Wu8ujUN37uBXSl/PnDOq3llQlE= Subject key identifier: 5A:73:D8:73:2A:86:F7:3B:6A:D0:37:FA:A2:AA:82:E2:D7:60:7C:B9 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584960541B10B39C39AE91BA8100 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 212238 IP address blocks: 173.239.200.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1b:10:b3:9c:39:ae:91:ba:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=b1ba4583-0a4d-4a3f-acd0-aa7fd4ac7a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:0f:58:3b:cf:b8:58:7f:c3:bc:f4:8f:43: af:86:63:25:6c:e3:80:4d:a3:bd:03:e3:92:d2:b7: 76:4a:80:01:21:09:e9:a5:53:f9:fa:50:94:af:20: 54:07:cd:65:f6:79:84:3b:16:41:5a:04:04:96:ea: b7:3e:62:ed:9a:0e:17:5b:54:57:ea:2c:59:e6:a4: b9:c2:2e:89:2b:1e:ed:c4:8e:d3:8f:9e:41:cd:8d: b5:0f:5a:cf:03:71:8e:44:71:4b:61:8a:74:7a:a3: c6:59:0e:96:65:f6:29:8d:4c:52:bb:36:75:04:15: 76:2d:03:ab:8c:fb:58:76:3e:bd:02:fc:43:1b:5a: 21:20:88:6f:be:0f:af:49:5d:ce:40:21:61:ea:40: bd:73:cd:de:ba:30:1b:42:87:a9:86:23:90:78:45: 30:ee:2a:e7:6b:bc:ab:da:32:cd:59:f2:7d:51:4d: 08:79:2f:cb:31:99:32:f8:ec:66:ce:c7:70:3c:83: 48:01:9e:6c:b5:76:ca:0b:0f:2a:a4:d6:77:03:a2: 56:07:06:c8:71:e4:1a:89:e2:d8:58:6e:6b:ec:e9: ed:5c:65:78:24:36:7e:97:13:65:80:06:8b:ae:ee: bd:70:df:a7:5d:2c:ad:eb:c0:5f:36:7b:9b:94:6e: 56:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:73:D8:73:2A:86:F7:3B:6A:D0:37:FA:A2:AA:82:E2:D7:60:7C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:05:bb:d9:f5:7b:ca:6d:cd:dc:be:d3:a2:f0:fe:5a:8f:da: 01:30:f6:f4:6c:ab:87:72:b8:09:ea:fa:52:2b:e7:84:c7:34: c3:9c:4e:24:83:62:f0:03:8e:51:41:de:be:6f:c0:66:72:8b: 0b:6c:1e:ba:31:23:9f:32:89:7f:61:8e:28:1c:64:e4:bf:b3: ec:23:3d:78:fc:15:a0:72:b4:b1:c2:6e:2d:f7:9d:58:0b:76: cc:ef:c6:0f:5a:b9:b5:58:4f:fd:75:14:0e:d9:00:9e:ac:59: 59:ee:1f:1f:aa:df:06:ce:4c:a3:63:3c:3a:9d:3b:df:c9:34: 1a:79:74:64:82:6e:5a:0f:95:50:2a:72:0e:f4:6d:8d:9f:72: cd:2c:fe:eb:ff:41:17:07:1b:19:48:40:b7:1e:5a:bc:51:9f: 7c:8d:00:b1:4e:af:c8:7f:2f:8e:da:da:09:b5:04:a2:de:62: c6:c3:68:0b:8d:87:23:8a:f4:7b:48:de:af:cb:ba:dd:88:a9: 19:e2:ba:43:d8:7f:a7:31:d9:57:85:9e:45:3f:ab:f6:04:0b: a0:41:08:f8:a4:a4:8b:08:23:93:03:98:c6:85:d5:0f:bb:e4: 66:ef:94:f0:ac:3a:ba:c7:d3:96:90:97:7c:6e:48:fd:29:45: 64:c4:4b:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElgVBsQs5w5rpG6gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk YjFiYTQ1ODMtMGE0ZC00YTNmLWFjZDAtYWE3ZmQ0YWM3YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZEPWDvPuFh/w7z0j0OvhmMlbOOATaO9A+OS 0rd2SoABIQnppVP5+lCUryBUB81l9nmEOxZBWgQEluq3PmLtmg4XW1RX6ixZ5qS5 wi6JKx7txI7Tj55BzY21D1rPA3GORHFLYYp0eqPGWQ6WZfYpjUxSuzZ1BBV2LQOr jPtYdj69AvxDG1ohIIhvvg+vSV3OQCFh6kC9c83eujAbQoephiOQeEUw7irna7yr 2jLNWfJ9UU0IeS/LMZky+OxmzsdwPINIAZ5stXbKCw8qpNZ3A6JWBwbIceQaieLY WG5r7OntXGV4JDZ+lxNlgAaLru69cN+nXSyt68BfNnublG5W1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFpz2HMqhvc7atA3+qKqguLXYHy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTE3MGRlN2MtZTQxMy0z MmE1LWEyYzctYzNkMGY3Y2JkMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8BbvZ9XvKbc3cvtOi8P5aj9oBMPb0bKuHcrgJ6vpSK+eExzTDnE4k g2LwA45RQd6+b8BmcosLbB66MSOfMol/YY4oHGTkv7PsIz14/BWgcrSxwm4t951Y C3bM78YPWrm1WE/9dRQO2QCerFlZ7h8fqt8GzkyjYzw6nTvfyTQaeXRkgm5aD5VQ KnIO9G2Nn3LNLP7r/0EXBxsZSEC3Hlq8UZ98jQCxTq/Ify+O2toJtQSi3mLGw2gL jYcjivR7SN6vy7rdiKkZ4rpD2H+nMdlXhZ5FP6v2BAugQQj4pKSLCCOTA5jGhdUP u+Rm75TwrDq6x9OWkJd8bkj9KUVkxEs9 -----END CERTIFICATE-----Generated at Sat Apr 5 12:31:42 2025 by rpki-client