$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa File: b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa (raw, json) Hash identifier: in1/c4ksxjayhani7Yu5TQ+mmhWyQR7nmkczqcQTrZ4= Subject key identifier: 8E:E2:41:AC:E3:AF:C3:32:16:C6:E6:B5:E9:A0:39:9A:2E:FB:E2:91 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858489075F8A49630B29EB6985D80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 197555 IP address blocks: 173.239.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f8:a4:96:30:b2:9e:b6:98:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=e5767e17-be00-4f2b-976e-ecf8391e74c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:95:12:95:b2:30:3c:41:39:a0:94:2e:4c: 31:88:5f:f4:b5:75:68:23:33:45:af:96:ba:96:32: d8:19:f3:1c:33:6a:83:72:5b:2c:58:3d:62:ec:d7: 77:bf:02:99:8a:0b:48:56:30:33:8b:21:76:09:ca: 2d:e3:fb:ae:29:e0:c0:16:99:18:81:10:05:31:a6: 1a:12:ff:0d:6f:83:d2:d7:ae:72:2d:5e:b4:08:07: 38:5c:9a:4d:35:81:cd:6e:c6:f8:f4:2d:1e:66:99: b2:de:c3:7e:b4:45:90:c1:f9:1d:85:4c:b1:6e:82: 2e:92:82:34:d5:1e:dd:fb:1c:80:5c:c1:e3:8b:89: f0:e8:8a:95:fc:e0:66:ab:be:78:fb:71:b2:15:1b: 5c:96:33:ff:de:92:21:9d:39:df:fe:34:0c:4d:2c: 1d:3e:89:ca:93:65:7d:94:96:45:91:50:16:2e:94: df:48:92:c6:7b:f9:02:44:e3:5a:ac:95:e9:06:97: 3d:51:80:4a:26:79:4a:c6:4e:33:d3:e7:e0:9f:4a: 03:7e:cb:81:ee:b9:77:98:4c:f8:9d:b2:5c:81:a9: 21:ee:4e:0d:1d:33:55:41:07:c6:ce:9a:8e:9f:f5: ec:a8:ba:4d:61:8e:f6:6d:8e:bf:f2:cf:91:02:2e: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E2:41:AC:E3:AF:C3:32:16:C6:E6:B5:E9:A0:39:9A:2E:FB:E2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:13:35:70:6b:12:06:e9:39:fb:c5:ea:7c:71:cc:37:ff:01: 4b:36:68:2a:85:3b:78:3f:60:64:50:23:c2:4e:55:cd:d4:c2: 97:c8:a4:3f:9e:78:a0:d8:f2:b0:fe:61:e8:79:b9:84:c5:13: 67:17:c9:85:3a:cb:9b:c3:c6:b0:7b:d1:60:96:7c:46:5a:f5: ea:3b:4f:e8:78:c2:6d:ea:47:57:af:e7:aa:5d:4d:32:38:ab: ab:32:9e:c7:c4:66:e7:2f:77:e6:26:25:4c:22:ee:73:59:c1: 8b:82:11:c4:15:e5:72:ea:62:66:47:0c:d3:ba:aa:9c:04:e6: 19:27:86:dc:04:a6:4e:70:38:0d:5e:fc:a9:18:c1:13:04:d0: d5:5e:53:30:41:e1:59:54:a1:0b:e0:b3:79:8e:51:e6:11:00: 48:c8:65:76:a5:3d:f6:94:3f:d2:54:1b:cd:db:44:b5:63:71: 11:10:0f:2c:3a:ce:66:2c:38:62:e1:43:28:1f:53:2a:91:ba: 30:2a:7a:2d:01:60:67:17:23:d7:f8:88:15:ef:ee:8d:f2:25: 1b:f6:da:12:a8:85:a5:d0:f0:ef:af:77:18:4b:6e:e8:1b:92: b8:01:2e:cb:c3:41:93:50:6f:c1:d0:b7:40:05:4a:d1:e7:5e: 2d:9e:5b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfikljCynraYXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZTU3NjdlMTctYmUwMC00ZjJiLTk3NmUtZWNmODM5MWU3NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCmVEpWyMDxBOaCULkwxiF/0tXVoIzNFr5a6 ljLYGfMcM2qDclssWD1i7Nd3vwKZigtIVjAziyF2Ccot4/uuKeDAFpkYgRAFMaYa Ev8Nb4PS165yLV60CAc4XJpNNYHNbsb49C0eZpmy3sN+tEWQwfkdhUyxboIukoI0 1R7d+xyAXMHji4nw6IqV/OBmq754+3GyFRtcljP/3pIhnTnf/jQMTSwdPonKk2V9 lJZFkVAWLpTfSJLGe/kCRONarJXpBpc9UYBKJnlKxk4z0+fgn0oDfsuB7rl3mEz4 nbJcgakh7k4NHTNVQQfGzpqOn/XsqLpNYY72bY6/8s+RAi6TdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7iQazjr8MyFsbmtemgOZou++KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYjVmMGQxYTAtNGY5Yy0z YTM5LTlkNzEtZGI1MDQyNDRhNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYTNXBrEgbpOfvF6nxxzDf/AUs2aCqFO3g/YGRQI8JOVc3UwpfIpD+e eKDY8rD+Yeh5uYTFE2cXyYU6y5vDxrB70WCWfEZa9eo7T+h4wm3qR1ev56pdTTI4 q6synsfEZucvd+YmJUwi7nNZwYuCEcQV5XLqYmZHDNO6qpwE5hknhtwEpk5wOA1e /KkYwRME0NVeUzBB4VlUoQvgs3mOUeYRAEjIZXalPfaUP9JUG83bRLVjcREQDyw6 zmYsOGLhQygfUyqRujAqei0BYGcXI9f4iBXv7o3yJRv22hKohaXQ8O+vdxhLbugb krgBLsvDQZNQb8HQt0AFStHnXi2eW4o= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:56 2025 by rpki-client