$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa File: fce58568-be92-36c0-aa87-50db3fac7681.roa (raw, json) Hash identifier: OMZFOEQlS7yslFOi6T7nVQTVpZZsyf164xIVb1kvXFo= Subject key identifier: BC:9D:2B:C9:91:22:4B:46:02:15:74:B8:A7:27:64:AF:2C:CB:08:74 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848A565F672CEFFBA3D21CECF00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 211585 IP address blocks: 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f6:72:ce:ff:ba:3d:21:ce:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=0279b699-1441-43cd-b42c-64087d9419d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:16:97:88:63:6d:03:8d:9b:b3:7e:aa:a0: d1:42:0d:a4:ee:ce:f2:19:61:dd:c0:5b:f2:37:84: c1:3c:17:6f:5a:07:d5:4f:42:dc:af:a3:b8:d3:e2: 1e:00:ec:e2:a5:f1:15:bf:5c:8f:10:9a:fc:4c:d7: 15:e6:7a:24:ae:9b:8c:16:0f:91:b5:d5:5b:86:64: e2:eb:b3:6f:c9:16:79:c9:7e:39:c5:05:03:3f:9f: 86:f1:c9:6e:42:2d:0c:79:d1:fb:7e:a7:c1:06:55: da:1b:7b:17:f3:fe:7e:c5:16:e0:48:78:0b:fa:5f: 92:b7:e5:1e:8b:51:93:13:81:b6:46:ee:0f:59:42: c5:42:08:a2:d8:57:4e:61:3f:f1:a2:1e:0e:97:0b: e3:a5:68:0b:6f:a1:5f:4d:22:ac:31:69:7e:2a:c3: 00:84:b1:50:d7:21:39:cc:da:d7:72:47:08:ed:e1: d6:0f:38:b7:bc:db:f4:70:20:1f:04:a9:12:f3:ae: 0a:36:a1:e8:d8:a5:42:d2:11:97:96:92:cb:0b:b6: 2f:b9:87:81:f1:87:18:4e:75:8b:ea:c1:36:a3:40: 4a:d9:85:b9:48:7b:24:83:1b:b7:23:f8:d9:01:88: e3:e6:46:5e:5d:a1:a1:98:87:1e:f4:3a:61:e4:cd: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9D:2B:C9:91:22:4B:46:02:15:74:B8:A7:27:64:AF:2C:CB:08:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f2:f9:c5:17:bb:f9:76:ac:14:63:7b:f7:82:08:d0:e4:cd: 56:38:ce:72:f1:24:4e:d6:a5:3e:18:ec:93:2d:bd:21:1f:79: a9:39:93:1b:f3:ff:73:00:25:16:4c:f1:d1:2e:ca:d8:6b:a5: 6c:f7:a8:5a:ce:a2:07:7e:bf:a9:26:9b:6e:69:cc:5c:f8:79: 31:f8:32:76:db:19:3c:30:05:1e:16:a1:b2:2c:07:38:21:ed: 9a:26:c1:ab:73:53:6b:3b:ed:20:98:75:70:23:f3:47:e8:64: 60:34:50:53:e4:83:3b:2f:d1:dc:61:4a:80:c1:41:c4:98:bb: c5:28:c2:ac:1f:f6:a6:d2:e9:4b:e9:f8:4c:44:e0:bd:75:94: 16:f8:ec:5f:98:f4:b3:0b:48:b2:97:c3:b5:b7:60:7e:e9:97: 3a:8f:8c:b2:dd:87:6b:10:78:ea:c4:37:b0:68:27:10:43:05: 9e:94:77:17:24:5d:0a:04:0d:82:e1:f7:9b:36:3b:b3:4b:65: 91:e9:06:8a:17:25:ad:90:fa:e7:0c:1b:47:4c:ff:fa:e2:48: fc:fd:4d:97:08:07:49:98:d3:0c:e5:53:51:20:e9:04:5a:16: fc:4f:e3:56:57:10:6e:52:a9:1d:d0:5c:96:c7:f3:7d:b0:e2: c9:a9:cb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfZyzv+6PSHOzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDI3OWI2OTktMTQ0MS00M2NkLWI0MmMtNjQwODdkOTQxOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobwWl4hjbQONm7N+qqDRQg2k7s7yGWHdwFvy N4TBPBdvWgfVT0Lcr6O40+IeAOzipfEVv1yPEJr8TNcV5nokrpuMFg+RtdVbhmTi 67NvyRZ5yX45xQUDP5+G8cluQi0MedH7fqfBBlXaG3sX8/5+xRbgSHgL+l+St+Ue i1GTE4G2Ru4PWULFQgii2FdOYT/xoh4OlwvjpWgLb6FfTSKsMWl+KsMAhLFQ1yE5 zNrXckcI7eHWDzi3vNv0cCAfBKkS864KNqHo2KVC0hGXlpLLC7YvuYeB8YcYTnWL 6sE2o0BK2YW5SHskgxu3I/jZAYjj5kZeXaGhmIce9Dph5M3s3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLydK8mRIktGAhV0uKcnZK8sywh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmNlNTg1NjgtYmU5Mi0z NmMwLWFhODctNTBkYjNmYWM3NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7y+cUXu/l2rBRje/eCCNDkzVY4znLxJE7WpT4Y7JMtvSEfeak5kxvz /3MAJRZM8dEuythrpWz3qFrOogd+v6kmm25pzFz4eTH4MnbbGTwwBR4WobIsBzgh 7ZomwatzU2s77SCYdXAj80foZGA0UFPkgzsv0dxhSoDBQcSYu8Uowqwf9qbS6Uvp +ExE4L11lBb47F+Y9LMLSLKXw7W3YH7plzqPjLLdh2sQeOrEN7BoJxBDBZ6Udxck XQoEDYLh95s2O7NLZZHpBooXJa2Q+ucMG0dM//riSPz9TZcIB0mY0wzlU1Eg6QRa FvxP41ZXEG5SqR3QXJbH832w4smpy/M= -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:41 2025 by rpki-client