$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa File: effebbf7-ee2d-3137-8b68-780d284e81c1.roa (raw, json) Hash identifier: mt4VKeWQGeabsi0+p/q/KoHj77hSbgfOUXyHtvTsByk= Subject key identifier: CE:5A:85:2D:E8:78:F4:D0:5A:CB:79:BF:8C:6C:BC:39:FA:FA:7D:F4 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849FE0FF861528560E3215A4900 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 10430 IP address blocks: 173.229.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f8:61:52:85:60:e3:21:5a:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=37a74971-f902-4777-b545-682b11be01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:dc:ad:f5:4c:65:eb:06:83:3f:e5:2a:25: 29:65:cb:0f:c7:d7:5a:40:73:6d:0a:87:c7:91:47: af:25:68:37:d4:4d:60:36:80:b5:b4:48:fa:ad:94: c7:40:1f:ab:c2:c7:50:f9:cf:df:38:3e:cb:7f:b1: 1e:5a:e7:c8:5a:fd:5b:ec:4d:af:98:0f:29:d0:2a: 88:ad:1e:87:5c:b4:d4:e7:be:c1:f2:f9:6b:1b:94: 77:b3:2f:7f:c1:93:a3:69:34:56:cc:28:ce:da:8d: 65:a7:0f:fc:34:71:ba:b1:29:20:5d:0a:33:f2:0d: fe:b2:8d:ed:19:62:4d:7f:35:d1:6f:e9:52:83:ec: 7e:4f:9a:31:84:55:90:44:72:a4:02:0f:20:22:38: 2f:5b:da:fc:fc:7c:d5:25:eb:16:63:b8:44:f3:6c: db:37:5a:1d:8f:5f:b5:b7:11:fb:dd:94:2b:d7:df: 18:dd:1a:c8:59:d9:3e:ec:65:a6:18:c3:b5:d3:b0: d0:85:c8:73:bd:87:60:5a:29:08:af:b4:fc:2b:d8: 1c:4d:fa:34:5f:49:18:dc:91:44:79:74:4f:1a:61: a8:41:3a:67:7c:0a:30:34:74:b8:80:0e:31:da:00: 35:a6:f2:a0:17:51:d4:c4:da:7e:bb:80:80:6e:d5: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5A:85:2D:E8:78:F4:D0:5A:CB:79:BF:8C:6C:BC:39:FA:FA:7D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 173.229.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c7:93:f2:9f:1f:bc:23:54:56:87:d7:df:31:8b:b9:e9:b0: ef:2c:6d:ca:de:8f:44:37:ea:35:5e:8c:6b:b2:45:69:02:53: a4:09:c2:ce:c1:80:af:8f:bc:b5:fb:08:08:5f:03:c0:a8:2e: 01:34:9d:79:4b:b0:7c:b3:50:c7:1e:22:84:c4:ab:f5:89:82: c6:c0:c2:c5:2b:2d:7c:87:9f:33:ad:14:79:10:24:dd:e2:42: 0e:9f:8e:bf:66:bd:b8:8d:43:13:81:a1:de:a8:c8:1f:fc:e2: e5:69:b0:d7:3e:50:68:73:da:52:8e:eb:ef:2f:24:2c:e9:c6: a8:a0:a1:14:05:ff:69:79:7a:ca:50:87:07:23:c3:d3:1d:a2: d9:1f:bb:54:bb:8d:77:f7:44:03:51:47:14:69:24:db:c6:2b: eb:0e:1a:fd:6d:a6:28:bf:54:de:fb:e7:41:8e:74:63:03:89: 77:a9:70:1b:d7:22:c7:a6:50:5f:d8:a4:d9:dc:87:12:b9:9f: ed:70:85:71:4b:65:d1:41:99:de:81:51:2f:e4:57:3d:4c:21: 80:00:56:52:41:73:03:a1:08:31:8b:e4:d1:69:1c:b2:f7:b6: 94:9a:0a:52:12:1c:1a:9c:08:ec:a0:20:36:9e:3f:d1:b8:ee: f1:79:88:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/hhUoVg4yFaSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzdhNzQ5NzEtZjkwMi00Nzc3LWI1NDUtNjgyYjExYmUwMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4jcrfVMZesGgz/lKiUpZcsPx9daQHNtCofH kUevJWg31E1gNoC1tEj6rZTHQB+rwsdQ+c/fOD7Lf7EeWufIWv1b7E2vmA8p0CqI rR6HXLTU577B8vlrG5R3sy9/wZOjaTRWzCjO2o1lpw/8NHG6sSkgXQoz8g3+so3t GWJNfzXRb+lSg+x+T5oxhFWQRHKkAg8gIjgvW9r8/HzVJesWY7hE82zbN1odj1+1 txH73ZQr198Y3RrIWdk+7GWmGMO107DQhchzvYdgWikIr7T8K9gcTfo0X0kY3JFE eXRPGmGoQTpnfAowNHS4gA4x2gA1pvKgF1HUxNp+u4CAbtXQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5ahS3oePTQWst5v4xsvDn6+n30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZWZmZWJiZjctZWUyZC0z MTM3LThiNjgtNzgwZDI4NGU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFreUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbHk/KfH7wjVFaH198xi7npsO8sbcrej0Q36jVejGuyRWkCU6QJws7B gK+PvLX7CAhfA8CoLgE0nXlLsHyzUMceIoTEq/WJgsbAwsUrLXyHnzOtFHkQJN3i Qg6fjr9mvbiNQxOBod6oyB/84uVpsNc+UGhz2lKO6+8vJCzpxqigoRQF/2l5espQ hwcjw9Mdotkfu1S7jXf3RANRRxRpJNvGK+sOGv1tpii/VN7750GOdGMDiXepcBvX IsemUF/YpNnchxK5n+1whXFLZdFBmd6BUS/kVz1MIYAAVlJBcwOhCDGL5NFpHLL3 tpSaClISHBqcCOygIDaeP9G47vF5iNA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:47:19 2025 by rpki-client