$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa File: cb3521ee-876b-31da-af7d-3913e552e9f6.roa (raw, json) Hash identifier: 5eH4U+U1k+KOleSgU/OaLfJf9TOo4KJsHivkspUSl+E= Subject key identifier: E7:1F:25:EF:95:AA:A5:27:97:AB:35:0A:0A:33:05:A9:34:E4:D3:35 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849797436E5FB86F81C78B44480 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 62240 IP address blocks: 173.239.213.0/24 maxlen: 24 173.239.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:36:e5:fb:86:f8:1c:78:b4:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=85c4e722-ac5b-4ac4-a64b-bc7b09fa2161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:d0:23:7a:d2:69:55:db:11:e4:65:8c:0e: 23:e3:2d:7d:2b:ab:8a:29:24:df:b7:46:53:3d:40: 0e:83:ce:47:a5:82:e7:48:34:f8:d3:e9:8b:9b:5b: 4d:12:53:c1:e7:74:36:80:6e:3a:ad:2a:11:4d:65: 53:ba:42:b2:2e:0b:fa:7d:04:f1:47:fe:6b:1e:5a: b1:47:a2:d0:00:14:91:2e:c0:91:9c:04:83:10:5c: 10:5d:f2:ff:5a:4a:90:f4:92:13:01:d1:c3:61:2e: ba:f4:1e:b0:cb:fd:59:25:8b:80:f7:90:00:70:13: 60:96:f4:5d:d2:43:22:4b:11:4d:54:c8:01:69:14: 3f:a4:b5:74:9b:eb:a0:78:65:ca:fa:2e:1d:eb:12: 1b:22:37:25:d0:46:27:26:74:9c:62:1f:bb:b5:36: 54:ab:e8:5d:9b:a4:df:25:ac:5f:4a:cf:7d:72:f6: de:b6:41:2b:64:ca:fa:ad:a1:2b:70:41:ba:84:01: aa:b1:a8:58:8a:3a:76:be:a5:0f:90:f3:de:62:32: 3a:e2:e6:20:68:c8:68:27:31:67:b5:6d:f3:20:12: b5:c8:b8:84:cc:5a:dc:b4:3b:76:12:0f:18:57:f5: 28:44:07:60:25:40:0c:b7:27:0a:55:fa:dc:83:ce: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1F:25:EF:95:AA:A5:27:97:AB:35:0A:0A:33:05:A9:34:E4:D3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.213.0-173.239.214.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b1:98:d0:1c:25:d2:8a:3a:d0:ee:1d:49:ca:72:0b:f8:9c: e4:3b:3e:96:c1:0f:39:95:8f:03:e1:d7:b0:52:21:54:e1:2d: b3:73:a3:3d:e8:d6:6e:3c:4d:f7:fa:25:27:fb:4e:b4:4c:81: 87:54:f6:97:08:36:1b:ff:3a:28:63:3f:1f:c4:88:e1:6b:ae: 87:4a:bc:58:14:a2:ce:b1:b5:00:75:00:89:f6:2f:d5:7e:6f: 95:ea:4c:30:71:a6:5f:ef:b0:a2:ad:02:0d:28:7a:1f:42:bb: 41:46:bc:80:17:5d:c6:47:df:6f:03:0d:2a:db:97:cb:a2:23: a6:5a:ca:94:a9:8b:55:34:61:fd:28:20:04:2e:a7:43:f0:10: 50:55:bd:b1:de:ea:fc:d3:1a:c6:63:8a:9c:bc:31:22:03:b6: 06:1a:45:63:ec:77:4f:e5:65:f8:f4:3a:98:5f:1a:d2:2e:19: 03:68:1b:ef:61:d0:cc:b0:ad:8c:08:05:88:36:df:45:32:c2: bd:e5:25:7a:0e:d7:30:c9:68:d9:01:fc:dc:47:4a:d0:37:84: 7e:2c:10:ac:fd:1f:e3:05:3d:fc:5d:dd:72:c3:f5:5a:f4:91: a6:1f:f2:e8:f9:f4:1e:cd:c0:05:2e:7b:e8:f6:45:fd:3c:cf: ba:a3:33:01 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEl5dDbl+4b4HHi0RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ODVjNGU3MjItYWM1Yi00YWM0LWE2NGItYmM3YjA5ZmEyMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvebQI3rSaVXbEeRljA4j4y19K6uKKSTft0ZT PUAOg85HpYLnSDT40+mLm1tNElPB53Q2gG46rSoRTWVTukKyLgv6fQTxR/5rHlqx R6LQABSRLsCRnASDEFwQXfL/WkqQ9JITAdHDYS669B6wy/1ZJYuA95AAcBNglvRd 0kMiSxFNVMgBaRQ/pLV0m+ugeGXK+i4d6xIbIjcl0EYnJnScYh+7tTZUq+hdm6Tf JaxfSs99cvbetkErZMr6raErcEG6hAGqsahYijp2vqUPkPPeYjI64uYgaMhoJzFn tW3zIBK1yLiEzFrctDt2Eg8YV/UoRAdgJUAMtycKVfrcg86SoQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOcfJe+VqqUnl6s1CgozBak05NM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2IzNTIxZWUtODc2Yi0z MWRhLWFmN2QtMzkxM2U1NTJlOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACt79UD BACt79YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcrGY0Bwl0oo60O4dScpyC/ic5Ds+lsEPOZWPA+HXsFIh VOEts3OjPejWbjxN9/olJ/tOtEyBh1T2lwg2G/86KGM/H8SI4Wuuh0q8WBSizrG1 AHUAifYv1X5vlepMMHGmX++woq0CDSh6H0K7QUa8gBddxkffbwMNKtuXy6IjplrK lKmLVTRh/SggBC6nQ/AQUFW9sd7q/NMaxmOKnLwxIgO2BhpFY+x3T+Vl+PQ6mF8a 0i4ZA2gb72HQzLCtjAgFiDbfRTLCveUleg7XMMlo2QH83EdK0DeEfiwQrP0f4wU9 /F3dcsP1WvSRph/y6Pn0Hs3ABS576PZF/TzPuqMzAQ== -----END CERTIFICATE-----Generated at Fri May 9 10:44:08 2025 by rpki-client