$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa File: ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa (raw, json) Hash identifier: ak2EIT8Bw2jtrqodsmjMovVr8V1nelpzOFZ/4FiaYDc= Subject key identifier: 78:71:D1:02:F2:BE:1B:7A:D4:01:9F:F9:24:96:B9:E9:90:F0:7C:A9 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A5CFB27ADA7E14791EE6E5300 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13213 IP address blocks: 173.239.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:27:ad:a7:e1:47:91:ee:6e:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=10f52a5c-2659-4f8e-87bd-68465ee36d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:23:38:c8:04:83:47:82:49:15:3d:47:07: bc:a5:33:7e:c8:fa:12:f7:5c:06:ce:b8:a5:11:40: 97:1b:99:f4:f0:77:b5:15:ed:be:30:7a:b8:e4:77: 60:fe:e5:88:fd:32:ec:9b:e9:a2:fb:dd:b0:79:24: 7f:05:0e:02:4f:f2:b8:79:c7:de:4a:e5:86:77:42: 9d:b5:2b:e6:d3:1b:7e:14:b5:c2:44:3f:3a:5f:ae: 87:87:e8:d0:bf:58:cf:c2:06:00:5a:bb:18:04:57: 8c:b7:21:4e:8a:af:5b:10:54:13:65:d4:f9:2f:7b: fe:53:f0:d0:3c:56:2f:2e:27:55:cc:22:4a:98:c5: 65:da:04:76:ee:b5:78:4d:0d:80:3c:43:23:a4:bc: a9:76:41:2b:81:80:48:2e:5a:92:f7:2a:ab:4b:b8: 99:e2:ec:6a:2f:fd:3b:de:da:cd:09:02:73:6a:75: d1:81:9a:5c:f9:89:4a:5f:e2:01:8d:ac:da:de:cd: ef:35:c3:5c:eb:a9:4e:50:c9:62:a1:65:ab:23:46: cf:5f:27:a9:cf:0c:cb:98:13:e6:bf:33:68:e4:4c: fa:79:f0:ab:57:02:ca:db:00:a8:ef:54:82:71:c4: c4:9a:7b:da:f4:b8:c1:7d:76:16:23:db:14:3f:1c: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:D1:02:F2:BE:1B:7A:D4:01:9F:F9:24:96:B9:E9:90:F0:7C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ef:11:6f:87:45:78:1b:ee:73:8f:e1:ad:99:85:75:1b:c1: 5f:11:a0:fa:72:25:eb:c1:2f:60:ee:11:5d:d7:5f:1f:25:e5: a8:67:ad:94:18:ce:8b:62:75:31:ac:2d:fa:63:36:a8:3c:65: de:b0:fa:c6:28:ed:bb:9a:bf:09:fe:af:14:7e:ce:eb:35:f7: 0f:93:f1:b6:74:2f:da:14:f5:38:29:60:1a:18:93:1e:11:53: 84:09:a9:a6:77:56:a7:fb:c0:e3:81:22:69:39:be:f9:63:6f: d1:38:35:9e:9d:8a:ad:fe:90:10:63:74:05:30:4a:d9:b4:0a: f3:b8:a0:52:90:63:64:e8:51:65:c9:76:39:3d:76:41:bb:9c: 16:2b:ff:5c:e6:08:33:fc:2c:f1:b7:82:32:e4:ea:56:00:9f: f2:70:28:f6:cb:a9:6c:c9:33:b9:3f:f7:49:97:e5:fe:29:c4: cf:6f:78:a2:2f:51:5b:5b:05:86:a1:73:38:29:53:51:24:06: a1:1d:20:17:da:06:ce:c7:7d:65:6a:e8:87:4f:81:ce:49:e2: 81:58:a0:b0:17:41:fc:d6:6b:0d:b0:76:5e:ce:6c:43:5f:06: 93:55:fc:0f:05:c6:a4:a4:eb:e5:d0:2a:2d:d8:3f:76:5a:03: fc:f3:3a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yetp+FHke5uUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTBmNTJhNWMtMjY1OS00ZjhlLTg3YmQtNjg0NjVlZTM2ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqkjOMgEg0eCSRU9Rwe8pTN+yPoS91wGzril EUCXG5n08He1Fe2+MHq45Hdg/uWI/TLsm+mi+92weSR/BQ4CT/K4ecfeSuWGd0Kd tSvm0xt+FLXCRD86X66Hh+jQv1jPwgYAWrsYBFeMtyFOiq9bEFQTZdT5L3v+U/DQ PFYvLidVzCJKmMVl2gR27rV4TQ2APEMjpLypdkErgYBILlqS9yqrS7iZ4uxqL/07 3trNCQJzanXRgZpc+YlKX+IBjaza3s3vNcNc66lOUMlioWWrI0bPXyepzwzLmBPm vzNo5Ez6efCrVwLK2wCo71SCccTEmnva9LjBfXYWI9sUPxyjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhx0QLyvht61AGf+SSWuemQ8HypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2U0ZTMwMDMtOWVkMC0z MDVmLTkxMmUtMmJkOTM5YTZhMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7vEW+HRXgb7nOP4a2ZhXUbwV8RoPpyJevBL2DuEV3XXx8l5ahnrZQY zotidTGsLfpjNqg8Zd6w+sYo7buavwn+rxR+zus19w+T8bZ0L9oU9TgpYBoYkx4R U4QJqaZ3Vqf7wOOBImk5vvljb9E4NZ6diq3+kBBjdAUwStm0CvO4oFKQY2ToUWXJ djk9dkG7nBYr/1zmCDP8LPG3gjLk6lYAn/JwKPbLqWzJM7k/90mX5f4pxM9veKIv UVtbBYahczgpU1EkBqEdIBfaBs7HfWVq6IdPgc5J4oFYoLAXQfzWaw2wdl7ObENf BpNV/A8FxqSk6+XQKi3YP3ZaA/zzOoA= -----END CERTIFICATE-----Generated at Thu Jul 10 12:30:05 2025 by rpki-client