$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa File: fce58568-be92-36c0-aa87-50db3fac7681.roa (raw, json) Hash identifier: uIkFvvvCXWpXv8Oard+s4bo6UKF7B7rfLxPqUjCovcU= Subject key identifier: A4:10:9C:1D:DF:F9:EB:9D:3D:25:D4:B7:A7:38:8B:F5:79:3B:B5:66 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A63F5B9F7EE34816E7E6BFCC0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 211585 IP address blocks: 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b9:f7:ee:34:81:6e:7e:6b:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=f5d7a28e-27e3-4a76-804d-6a3ac410bd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:ef:6a:1f:23:e8:a6:f0:48:b6:83:54:8d: ad:4d:ea:f8:cb:30:96:bf:0d:fb:84:eb:9b:78:df: f0:bc:14:cc:5c:f3:d7:97:6d:91:f0:0d:a1:c8:c9: 5e:ba:fc:db:f5:4a:66:db:29:81:b2:7f:19:96:a5: d7:a4:6d:44:a2:1b:9b:ac:0e:14:89:1d:1f:8e:a3: d5:f6:ca:69:e6:06:b6:8e:2c:90:52:29:ea:cb:ba: 2c:34:19:f2:bd:0f:64:59:a1:81:f3:85:e5:85:c8: 71:6a:0b:0b:49:7e:fe:1e:ef:10:3b:55:1d:c5:2e: ce:22:95:d0:6b:e7:a0:c8:37:b3:62:f7:1d:9d:92: 8a:27:cf:8c:ae:5a:5c:1d:62:75:cf:79:51:96:82: f2:bd:b7:d0:1a:6f:9c:7a:98:92:82:f6:b9:4a:12: 31:a2:f9:7b:ae:2b:46:59:4b:6c:ac:1f:77:d9:d5: 65:90:4b:3c:f8:bf:99:6b:f8:77:d4:bc:23:15:56: b1:00:03:b3:9c:1a:78:5b:3b:10:f5:62:3e:e0:f1: b5:f9:66:15:42:7f:59:b5:29:b9:e2:5d:fa:7f:1a: 48:46:53:ab:ea:26:8d:40:8d:41:4d:91:4f:dd:29: ef:60:d3:47:22:a2:b2:83:bb:e8:02:81:44:04:17: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:9C:1D:DF:F9:EB:9D:3D:25:D4:B7:A7:38:8B:F5:79:3B:B5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:14:0d:00:4f:95:4c:5a:f2:3b:24:c6:de:06:28:a7:e6:63: dc:bf:e8:98:28:a7:bf:d5:03:ba:07:78:42:2c:93:1e:c0:a7: dc:4c:43:7e:79:37:2a:0d:e4:36:4a:31:1f:cd:13:e6:6b:c1: 06:bb:d9:20:36:b5:f0:a7:9f:19:2d:70:c3:41:a3:61:73:9d: e1:5b:2c:83:8a:22:4b:07:49:67:66:3b:d8:f4:d1:ea:1d:ca: d0:bc:4f:91:dc:da:55:99:95:e6:58:e7:79:b7:5c:51:99:07: 32:89:b2:b7:8c:3c:05:02:0b:65:c9:39:3a:95:2a:32:76:08: 9e:31:29:e2:9d:62:57:37:d6:7b:28:71:a6:97:da:c4:45:4f: 4e:c5:cf:c2:9c:3c:4d:12:bc:6b:78:9b:eb:6e:e3:29:3f:c9: a7:a0:fd:fa:79:5b:ae:36:93:55:e2:3a:e5:dd:cf:6c:29:36: 7f:49:28:d5:d4:5e:a2:af:2d:78:af:b9:5c:1f:93:ee:84:3d: 37:01:1d:fc:d1:42:e9:db:36:f9:86:49:db:5b:f1:82:6d:2a: 85:e6:a0:d0:2f:4c:8e:57:90:5a:8c:23:e9:91:97:40:24:17: 27:19:15:49:74:8a:aa:cf:c1:b8:41:b2:84:29:ee:c7:53:77: cc:37:7c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bn37jSBbn5r/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk ZjVkN2EyOGUtMjdlMy00YTc2LTgwNGQtNmEzYWM0MTBiZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUbvah8j6KbwSLaDVI2tTer4yzCWvw37hOub eN/wvBTMXPPXl22R8A2hyMleuvzb9Upm2ymBsn8ZlqXXpG1EohubrA4UiR0fjqPV 9spp5ga2jiyQUinqy7osNBnyvQ9kWaGB84XlhchxagsLSX7+Hu8QO1UdxS7OIpXQ a+egyDezYvcdnZKKJ8+MrlpcHWJ1z3lRloLyvbfQGm+cepiSgva5ShIxovl7ritG WUtsrB932dVlkEs8+L+Za/h31LwjFVaxAAOznBp4WzsQ9WI+4PG1+WYVQn9ZtSm5 4l36fxpIRlOr6iaNQI1BTZFP3SnvYNNHIqKyg7voAoFEBBdTpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQQnB3f+eudPSXUt6c4i/V5O7VmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmNlNTg1NjgtYmU5Mi0z NmMwLWFhODctNTBkYjNmYWM3NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0UDQBPlUxa8jskxt4GKKfmY9y/6Jgop7/VA7oHeEIskx7Ap9xMQ355 NyoN5DZKMR/NE+ZrwQa72SA2tfCnnxktcMNBo2FzneFbLIOKIksHSWdmO9j00eod ytC8T5Hc2lWZleZY53m3XFGZBzKJsreMPAUCC2XJOTqVKjJ2CJ4xKeKdYlc31nso caaX2sRFT07Fz8KcPE0SvGt4m+tu4yk/yaeg/fp5W642k1XiOuXdz2wpNn9JKNXU XqKvLXivuVwfk+6EPTcBHfzRQunbNvmGSdtb8YJtKoXmoNAvTI5XkFqMI+mRl0Ak FycZFUl0iqrPwbhBsoQp7sdTd8w3fDs= -----END CERTIFICATE-----Generated at Thu Jul 10 15:43:31 2025 by rpki-client