$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa File: a140d151-5e59-30bd-81ec-045425e2fb5b.roa (raw, json) Hash identifier: P8n8E3NJ6OuECkC+v91OjkESUUbxe1Mettgqkl0PBqE= Subject key identifier: EE:52:A2:5C:3C:BE:D7:18:07:30:2F:D5:EC:D9:03:72:17:E9:BA:B1 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A43DAF5ED154BDE495E66A680 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 206092 IP address blocks: 173.239.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f5:ed:15:4b:de:49:5e:66:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=90d95d1d-b952-4058-be00-478b9b673b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:12:0b:d9:11:c9:42:02:c6:d9:c7:2a:e5: ee:de:43:cd:42:38:a5:92:02:57:81:0d:0b:a7:66: 52:f0:0f:70:59:b9:e9:dc:1d:a8:09:fb:d0:45:30: d7:94:70:1a:4b:df:b3:1c:f7:ef:78:9d:68:d3:13: e0:88:66:9e:53:07:38:14:9e:47:49:6b:ac:80:6e: 37:b1:13:c6:3c:da:9b:e9:b2:cb:b9:81:1b:44:18: 15:b7:8c:c2:2e:a1:a0:20:e4:eb:a1:07:16:9d:7f: f2:b2:aa:42:31:3a:76:7d:52:3b:1f:79:cf:05:f5: e3:2b:11:34:c8:bf:e0:04:3b:00:a3:d9:73:92:d8: 9c:2f:1a:4e:3a:58:37:76:ef:eb:56:ba:0f:3f:26: 63:8a:9f:4a:2d:5b:c1:a0:4c:98:34:49:70:36:9c: b9:d8:f7:73:66:a6:e5:df:5b:ab:e0:6c:ec:16:ed: 85:c8:b7:82:29:b1:a2:e7:cb:34:8c:37:3d:b3:30: 8a:bf:22:74:d4:b8:30:ca:88:e7:76:54:41:42:15: c9:a1:09:0a:ec:b0:82:0a:61:26:e6:43:bc:7d:7e: 28:0a:ac:28:0a:d6:cc:36:8c:00:1a:f7:23:f8:77: e4:af:46:90:72:b6:a5:4d:69:c7:31:f0:c7:65:33: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:52:A2:5C:3C:BE:D7:18:07:30:2F:D5:EC:D9:03:72:17:E9:BA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c7:97:8f:c2:19:80:83:9a:26:a8:27:42:7d:93:b2:e0:fb: 4d:0a:0e:7e:1d:41:54:93:2b:63:e4:d7:55:24:94:fe:1c:35: 84:0f:81:e2:c5:08:38:85:3d:6c:c9:63:41:90:be:5e:01:56: 3e:31:a7:d5:61:60:45:d0:6c:01:51:ae:fd:3e:7a:dc:43:c0: 94:ce:21:a4:10:95:9d:45:12:6e:e2:e6:ef:c1:83:07:22:ca: 09:17:85:c9:fc:18:38:cd:dc:e2:f3:28:9c:d1:dd:c2:f1:12: 5b:1d:fe:27:03:6d:d7:72:07:83:9d:2c:29:70:b2:67:c4:8a: d0:a5:7e:ee:c2:d5:a8:ae:c9:ef:30:55:96:16:33:3e:cb:4e: 59:6c:ef:10:96:31:16:c6:dc:99:01:a4:d1:fd:09:dc:a2:1d: 86:54:3f:9c:44:97:76:0a:39:d8:b4:db:2e:3d:07:4b:9e:b3: 06:3c:fd:69:b5:0d:f1:e3:06:cb:cc:c1:36:56:1d:0b:b5:f3: 56:2c:cc:29:f4:ca:b8:16:7f:3a:c2:79:9f:0d:05:a4:24:d9: ec:23:20:0f:c4:0a:2d:db:12:93:d9:3d:1b:53:eb:3a:45:aa: ce:b8:f5:9b:fc:0e:91:db:00:75:1f:7c:51:86:40:d3:99:5f: 16:a6:a5:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vXtFUveSV5mpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OTBkOTVkMWQtYjk1Mi00MDU4LWJlMDAtNDc4YjliNjczYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0oSC9kRyUICxtnHKuXu3kPNQjilkgJXgQ0L p2ZS8A9wWbnp3B2oCfvQRTDXlHAaS9+zHPfveJ1o0xPgiGaeUwc4FJ5HSWusgG43 sRPGPNqb6bLLuYEbRBgVt4zCLqGgIOTroQcWnX/ysqpCMTp2fVI7H3nPBfXjKxE0 yL/gBDsAo9lzkticLxpOOlg3du/rVroPPyZjip9KLVvBoEyYNElwNpy52PdzZqbl 31ur4GzsFu2FyLeCKbGi58s0jDc9szCKvyJ01LgwyojndlRBQhXJoQkK7LCCCmEm 5kO8fX4oCqwoCtbMNowAGvcj+Hfkr0aQcralTWnHMfDHZTNPVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5Solw8vtcYBzAv1ezZA3IX6bqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYTE0MGQxNTEtNWU1OS0z MGJkLTgxZWMtMDQ1NDI1ZTJmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrHl4/CGYCDmiaoJ0J9k7Lg+00KDn4dQVSTK2Pk11UklP4cNYQPgeLF CDiFPWzJY0GQvl4BVj4xp9VhYEXQbAFRrv0+etxDwJTOIaQQlZ1FEm7i5u/Bgwci ygkXhcn8GDjN3OLzKJzR3cLxElsd/icDbddyB4OdLClwsmfEitClfu7C1aiuye8w VZYWMz7LTlls7xCWMRbG3JkBpNH9CdyiHYZUP5xEl3YKOdi02y49B0ueswY8/Wm1 DfHjBsvMwTZWHQu181YszCn0yrgWfzrCeZ8NBaQk2ewjIA/ECi3bEpPZPRtT6zpF qs649Zv8DpHbAHUffFGGQNOZXxampUA= -----END CERTIFICATE-----Generated at Tue Jul 1 12:59:01 2025 by rpki-client