$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa File: 88d13f0c-ccc2-38b5-b670-66ee16223370.roa (raw, json) Hash identifier: tY5hdUnuPIkMyo9ExJPqJ6DWIKoG6YAYDAkwZqwnxDY= Subject key identifier: 96:E2:07:89:96:24:8E:C2:14:D0:75:7A:4F:81:CD:C1:DB:1A:31:47 Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F432858494B641A44877C9E25FE72BE00 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 15257 IP address blocks: 173.195.233.0/24 maxlen: 24 173.195.234.0/24 maxlen: 24 173.195.235.0/24 maxlen: 24 173.195.236.0/24 maxlen: 24 173.195.237.0/24 maxlen: 24 173.195.238.0/24 maxlen: 24 173.195.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1a:44:87:7c:9e:25:fe:72:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=97d72ae1-e7ec-4b08-8a38-d7a27f900fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:16:d4:1b:6b:e2:81:32:08:70:14:39:df: 41:ee:1e:1f:a5:b4:b3:db:04:9e:cc:48:49:16:d0: 14:47:e1:9f:d9:5a:ad:88:c1:1b:1a:f5:66:1f:ad: 7c:45:37:e7:72:c6:cc:1b:c6:1a:51:25:1c:c5:e9: e8:b1:e2:5a:ad:d5:26:20:4c:15:13:3b:cc:44:46: ab:e8:a0:1f:5e:ee:62:41:58:62:d1:c2:df:b7:c9: f8:be:45:36:a9:6f:4f:3a:1a:75:f7:76:79:bb:2b: 76:7c:18:53:34:2c:58:fe:69:64:63:8d:d3:33:56: f5:26:73:1c:70:6d:6d:39:7e:2a:1d:46:d6:7e:50: bd:84:66:d7:e0:30:d9:67:e2:98:7f:d9:cf:9c:c8: d1:de:d8:4f:4a:6d:65:d3:1a:11:b1:2a:dd:78:02: 53:47:43:ee:46:61:36:23:72:d5:c0:fd:23:ec:10: 55:cc:74:43:b0:62:c3:e3:5f:e3:a8:f2:3d:33:e9: 9c:00:30:2c:7f:ec:90:ab:c8:ad:67:fe:3f:f1:bf: 2b:5e:8d:7a:fd:0e:5e:3c:d5:6e:55:f7:cd:4c:6a: f2:35:57:c0:7b:6a:15:45:33:53:04:1b:38:bf:6c: a3:db:ce:eb:fa:e5:59:62:ca:72:a4:6e:47:b1:32: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:07:89:96:24:8E:C2:14:D0:75:7A:4F:81:CD:C1:DB:1A:31:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.233.0-173.195.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:34:01:d9:65:70:37:40:ce:b1:47:4c:d0:e7:be:c2:ed:7b: 60:f7:5f:8b:fb:29:fd:19:8e:92:c3:92:7e:fe:96:16:d4:09: 79:92:e2:c9:1c:98:59:17:80:cc:fd:0c:29:73:c2:d8:88:dc: 7d:7f:0e:01:fe:8c:f5:69:f6:75:cb:6a:dc:c8:b3:56:90:26: b9:29:6a:92:cf:94:92:cf:a5:48:76:86:b1:0f:1a:88:2f:0e: 12:74:b9:6c:88:39:32:49:15:19:2d:46:c0:7c:b4:19:b0:74: a1:67:d4:82:80:d7:b8:e3:9a:29:04:a0:cb:b8:3f:8a:9f:36: 15:ef:78:9f:e4:48:b4:ce:a7:fd:71:d3:f5:d8:b3:4c:2b:58: 82:40:26:83:1c:cb:dc:31:fb:ae:08:3b:54:1b:1d:d7:81:fa: 49:03:d3:c5:75:6f:60:c8:56:1f:f2:28:3c:32:20:22:dc:73: 13:f4:69:cf:e7:42:b0:a8:d9:b8:71:b0:28:21:59:97:93:5d: 6d:39:7a:66:ee:02:55:d4:ca:ba:e9:d2:75:2f:5f:4e:5d:df: 28:2e:42:ff:45:e1:52:3d:91:17:07:d3:98:c0:b4:9e:88:90: 4f:49:e6:8d:0a:54:63:0c:a6:75:d1:b2:ae:17:fc:64:8e:50: 07:4e:bd:af -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElLZBpEh3yeJf5yvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTdkNzJhZTEtZTdlYy00YjA4LThhMzgtZDdhMjdmOTAwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDgW1Btr4oEyCHAUOd9B7h4fpbSz2wSezEhJ FtAUR+Gf2VqtiMEbGvVmH618RTfncsbMG8YaUSUcxenoseJardUmIEwVEzvMREar 6KAfXu5iQVhi0cLft8n4vkU2qW9POhp193Z5uyt2fBhTNCxY/mlkY43TM1b1JnMc cG1tOX4qHUbWflC9hGbX4DDZZ+KYf9nPnMjR3thPSm1l0xoRsSrdeAJTR0PuRmE2 I3LVwP0j7BBVzHRDsGLD41/jqPI9M+mcADAsf+yQq8itZ/4/8b8rXo16/Q5ePNVu VffNTGryNVfAe2oVRTNTBBs4v2yj287r+uVZYspypG5HsTJRdwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJbiB4mWJI7CFNB1ek+BzcHbGjFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvODhkMTNmMGMtY2NjMi0z OGI1LWI2NzAtNjZlZTE2MjIzMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACtw+kD BAStw+AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVzQB2WVwN0DOsUdM0Oe+wu17YPdfi/sp/RmOksOSfv6W FtQJeZLiyRyYWReAzP0MKXPC2IjcfX8OAf6M9Wn2dctq3MizVpAmuSlqks+Uks+l SHaGsQ8aiC8OEnS5bIg5MkkVGS1GwHy0GbB0oWfUgoDXuOOaKQSgy7g/ip82Fe94 n+RItM6n/XHT9dizTCtYgkAmgxzL3DH7rgg7VBsd14H6SQPTxXVvYMhWH/IoPDIg ItxzE/Rpz+dCsKjZuHGwKCFZl5NdbTl6Zu4CVdTKuunSdS9fTl3fKC5C/0XhUj2R FwfTmMC0noiQT0nmjQpUYwymddGyrhf8ZI5QB069rw== -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:01 2025 by rpki-client