$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa File: fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa (raw, json) Hash identifier: jv1XQp4WNU7J8J8zK3hMePaYJWW7gJLImgUV8RM55fw= Subject key identifier: 1B:71:65:71:75:84:DF:03:19:77:18:77:57:C1:7D:BA:37:E9:76:06 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849C20A1E8181CAC30AD55EA900 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 62240 IP address blocks: 173.239.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1e:81:81:ca:c3:0a:d5:5e:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=c6f89cc9-cf62-4f1a-b74c-a6270030943e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:4b:e3:57:bd:40:6c:ae:8c:91:ee:60:da: fa:25:ac:02:f1:33:6d:cc:66:28:67:32:8f:a3:bd: 9d:3a:6f:1d:a3:c4:44:7d:34:56:11:da:03:36:5e: 94:f4:00:d4:cf:cf:8a:62:5f:34:14:d9:58:5a:88: bd:97:cc:ee:bf:f7:2c:c4:35:fc:02:bb:7a:67:1f: 24:d0:f6:1b:ea:8f:ff:ce:02:32:c3:e4:ad:97:3d: 99:7c:9a:44:3f:eb:df:3b:92:a2:a0:b0:c9:ec:3e: 31:dc:3b:f4:ac:15:d8:f1:48:17:fe:04:b8:d9:35: b2:1b:ae:e3:65:33:ae:08:23:51:2d:55:83:b8:51: 9a:73:fa:76:55:bc:3d:7d:a8:02:14:07:ec:20:6b: 48:a7:2c:35:4f:17:af:92:af:ef:3b:e3:cf:02:6a: 02:1d:fa:66:6b:d5:18:96:4d:dd:a9:05:51:7c:9e: 0d:95:7c:f0:33:90:84:7e:cf:f5:e3:88:24:ff:a7: d3:2c:34:34:81:bf:28:5a:6c:19:6a:85:6d:c6:fe: 45:10:5d:18:a9:51:01:fd:48:14:c6:0d:65:2c:da: 3a:70:4d:f9:5c:f8:d9:3e:5a:95:ba:3f:cd:48:b8: 8c:4e:ba:83:30:1f:fb:19:85:3d:d3:28:03:57:9d: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:65:71:75:84:DF:03:19:77:18:77:57:C1:7D:BA:37:E9:76:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a0:ff:ad:2b:eb:a6:2a:d5:bf:ed:bc:d0:47:20:47:dd:00: 06:40:95:b1:68:d1:e9:1e:55:6f:70:93:ce:a1:8c:a0:39:c1: ff:7b:89:4a:1f:71:98:dc:d9:11:43:01:d5:ca:65:30:a0:52: 09:e9:27:76:b9:3a:1f:3d:f6:c2:16:e3:19:af:a6:d0:d5:57: 44:9e:6a:71:e9:bd:86:5d:ea:25:a1:32:43:77:f3:7e:40:5b: 28:e2:89:1e:87:00:ed:0b:2a:ea:b7:8d:1a:d2:92:be:41:c7: 56:23:c3:0e:af:9b:07:56:27:fa:92:33:3b:df:9c:7b:28:ea: 51:d7:16:67:d7:7f:51:61:a8:9b:d6:26:4f:95:a9:17:5e:17: dd:45:a0:88:c8:f3:a9:ba:0c:24:0c:38:a0:97:74:cd:4e:4b: 32:4b:9a:f6:72:8c:62:d1:1e:2f:82:34:81:cf:c3:11:53:e4: 7c:78:93:dc:d6:91:5b:95:de:20:e5:49:e5:99:bb:8b:e1:41: c8:12:ff:28:2c:5c:bb:21:dd:a7:db:25:69:de:c9:25:42:0a: f7:5c:87:cb:2f:72:23:cf:2d:0b:d8:a7:a3:cc:a8:59:84:69: cb:4e:a5:11:96:49:be:f8:61:22:b9:c7:6d:2b:43:a5:9e:f2: fd:b7:6a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh6BgcrDCtVeqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YzZmODljYzktY2Y2Mi00ZjFhLWI3NGMtYTYyNzAwMzA5NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7VL41e9QGyujJHuYNr6JawC8TNtzGYoZzKP o72dOm8do8REfTRWEdoDNl6U9ADUz8+KYl80FNlYWoi9l8zuv/csxDX8Art6Zx8k 0PYb6o//zgIyw+Stlz2ZfJpEP+vfO5KioLDJ7D4x3Dv0rBXY8UgX/gS42TWyG67j ZTOuCCNRLVWDuFGac/p2Vbw9fagCFAfsIGtIpyw1Txevkq/vO+PPAmoCHfpma9UY lk3dqQVRfJ4NlXzwM5CEfs/144gk/6fTLDQ0gb8oWmwZaoVtxv5FEF0YqVEB/UgU xg1lLNo6cE35XPjZPlqVuj/NSLiMTrqDMB/7GYU90ygDV52ZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtxZXF1hN8DGXcYd1fBfbo36XYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmRlYTk0MGEtOGNmYy0z YjFlLWI4ZTQtZjI0NjI0ZTI5NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGg/60r66Yq1b/tvNBHIEfdAAZAlbFo0ekeVW9wk86hjKA5wf97iUof cZjc2RFDAdXKZTCgUgnpJ3a5Oh899sIW4xmvptDVV0SeanHpvYZd6iWhMkN3835A WyjiiR6HAO0LKuq3jRrSkr5Bx1Yjww6vmwdWJ/qSMzvfnHso6lHXFmfXf1FhqJvW Jk+VqRdeF91FoIjI86m6DCQMOKCXdM1OSzJLmvZyjGLRHi+CNIHPwxFT5Hx4k9zW kVuV3iDlSeWZu4vhQcgS/ygsXLsh3afbJWneySVCCvdch8svciPPLQvYp6PMqFmE actOpRGWSb74YSK5x20rQ6We8v23atk= -----END CERTIFICATE-----Generated at Fri May 9 10:51:09 2025 by rpki-client