$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa File: afaed4c9-2c63-3911-91f1-a89e1481c69a.roa (raw, json) Hash identifier: Xbynk8WTqYIzqhHSzY9IzN0DMoF9ETr2/iBbDMYxNuU= Subject key identifier: 54:F1:92:39:58:E4:89:71:9E:A2:88:FC:20:0F:D4:D7:6E:CC:AB:5D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848DA70FA8C084DBFFA3879CD88 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 64286 IP address blocks: 173.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fa:8c:08:4d:bf:fa:38:79:cd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=f361b2bf-b8bd-4f1f-9197-ca086ec04206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f6:1b:a1:8c:42:b6:92:5b:ac:ca:dc:cd:4a: 3e:ac:aa:32:7b:3a:f0:64:1a:1a:13:5b:02:7a:20: 24:c9:4a:08:fb:8b:89:91:45:d9:97:ae:e3:2b:f6: 94:1f:0a:3b:5f:96:68:bd:66:81:c5:dc:b4:07:af: aa:db:a3:34:39:51:88:36:87:52:6f:f9:cd:9b:77: f8:42:bf:ec:0e:8c:e7:29:d8:e2:f8:f3:ca:a5:c2: e1:13:14:7b:9a:69:4d:44:58:bb:d0:fc:56:2c:10: 39:65:80:c6:e2:15:ea:76:29:98:d4:09:da:3c:04: 01:14:e7:cb:36:ee:96:60:5b:3d:1a:ac:75:7c:c7: 66:91:55:73:fb:9f:82:6f:8f:8a:b1:94:5c:7c:bb: 30:7c:9a:b3:0d:01:80:af:94:42:8c:8e:e5:6c:4a: a9:7e:d3:07:13:e8:d0:a1:db:b9:62:a6:19:49:d2: a8:71:dd:96:44:11:4c:2f:03:a3:0a:0f:f9:e7:ca: 3a:31:0c:01:fb:38:5b:2d:70:bd:21:40:19:fb:29: 3a:3f:3c:47:ed:0a:f4:4c:2b:f6:7e:de:b2:57:86: a2:0f:11:ec:84:7e:94:b0:65:a7:5e:b6:cb:d1:7d: a0:32:dd:90:e4:66:08:bf:8c:4f:70:8b:75:6d:e0: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F1:92:39:58:E4:89:71:9E:A2:88:FC:20:0F:D4:D7:6E:CC:AB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8d:01:dc:fd:e3:a3:65:da:68:30:97:cf:86:ef:8d:57:f0: fb:3f:94:99:04:9e:b0:bb:e6:af:97:03:54:59:27:62:a2:54: e8:b2:13:f0:68:79:14:20:82:48:2b:4e:d6:75:16:d8:e8:20: f8:15:23:f2:fb:1c:7a:44:8d:82:0d:c0:44:a5:f7:14:40:bf: 73:d8:8d:79:25:03:03:85:ea:54:03:84:83:60:7e:d7:0b:e3: 55:e0:cd:da:75:00:96:04:41:d1:a5:86:b8:af:db:52:5f:73: ef:40:3c:1c:78:eb:cf:e9:d2:40:2a:99:7e:82:26:61:08:92: 30:08:84:12:df:02:9a:16:f5:29:6d:c9:2c:91:c6:34:b2:5f: be:42:c3:9c:e6:99:df:f4:46:5c:f8:ed:6a:33:85:d1:95:ea: cb:0c:65:0c:a8:a2:6d:74:6c:80:b1:97:ab:9e:1c:ec:73:7f: 0e:6b:1a:d5:d0:98:3c:06:7d:21:3b:fe:a2:02:23:ee:11:33: 5b:fa:85:75:62:bf:b5:2f:3a:60:b6:59:08:bd:a6:f2:79:89: fc:e6:ce:23:1a:5a:f5:bc:6d:7d:01:97:a5:ad:81:8b:0e:51: cc:01:4d:35:5a:32:08:50:09:fa:bb:4b:44:9c:77:90:7f:de: fe:dc:ed:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPqMCE2/+jh5zYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjM2MWIyYmYtYjhiZC00ZjFmLTkxOTctY2EwODZlYzA0MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPYboYxCtpJbrMrczUo+rKoyezrwZBoaE1sC eiAkyUoI+4uJkUXZl67jK/aUHwo7X5ZovWaBxdy0B6+q26M0OVGINodSb/nNm3f4 Qr/sDoznKdji+PPKpcLhExR7mmlNRFi70PxWLBA5ZYDG4hXqdimY1AnaPAQBFOfL Nu6WYFs9Gqx1fMdmkVVz+5+Cb4+KsZRcfLswfJqzDQGAr5RCjI7lbEqpftMHE+jQ odu5YqYZSdKocd2WRBFMLwOjCg/558o6MQwB+zhbLXC9IUAZ+yk6PzxH7Qr0TCv2 ft6yV4aiDxHshH6UsGWnXrbL0X2gMt2Q5GYIv4xPcIt1beAM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTxkjlY5IlxnqKI/CAP1NduzKtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWZhZWQ0YzktMmM2My0z OTExLTkxZjEtYTg5ZTE0ODFjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKNAdz946Nl2mgwl8+G741X8Ps/lJkEnrC75q+XA1RZJ2KiVOiyE/Bo eRQggkgrTtZ1FtjoIPgVI/L7HHpEjYINwESl9xRAv3PYjXklAwOF6lQDhINgftcL 41Xgzdp1AJYEQdGlhriv21Jfc+9APBx468/p0kAqmX6CJmEIkjAIhBLfApoW9Slt ySyRxjSyX75Cw5zmmd/0Rlz47WozhdGV6ssMZQyoom10bICxl6ueHOxzfw5rGtXQ mDwGfSE7/qICI+4RM1v6hXViv7UvOmC2WQi9pvJ5ifzmziMaWvW8bX0Bl6WtgYsO UcwBTTVaMghQCfq7S0Scd5B/3v7c7aE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:40 2025 by rpki-client