$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa File: 7796b63e-a3f6-32f5-8eef-d866f8e76131.roa (raw, json) Hash identifier: 71DqZAgzoBhNjF84lB0FYUn/J1WDIh1Y6WJZm2t+HN0= Subject key identifier: A3:CB:9C:13:B9:7A:D4:56:49:33:32:C2:C9:74:2E:BC:7F:95:F7:24 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849B57A0867F5741F8DE65E3000 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 173.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:08:67:f5:74:1f:8d:e6:5e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=332b3058-9b86-4370-80e2-bf3d0b0556db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:33:86:3a:40:b5:83:cb:04:06:eb:36:a8: 8b:1e:aa:b9:75:1c:05:76:a8:85:73:f0:48:11:4e: ac:5e:83:a5:14:e6:6f:e8:9a:f0:95:e7:f4:02:b1: 3e:0f:49:a2:2e:28:55:5c:a0:1c:dc:5a:16:df:01: 59:5a:90:98:95:e1:5f:5f:5a:9d:a1:a3:3c:33:6c: 9f:5a:54:32:5f:b3:29:80:9f:5e:c5:8a:51:a8:e0: 29:87:50:92:9b:4f:72:bb:d6:da:5e:27:c4:ef:8f: 87:b6:a2:f8:c8:88:8b:5c:74:03:5d:06:80:70:5f: 59:e8:ad:02:dc:b0:37:24:54:25:6b:cc:e9:38:22: 92:71:f5:b2:89:2c:7f:28:46:a3:0c:18:38:d4:5e: 12:1c:ff:e1:21:eb:da:11:fe:a5:3f:91:45:b4:ca: 24:f8:0b:22:97:94:2f:07:aa:d3:7a:23:c6:7b:ec: e0:59:84:65:59:cf:e7:94:74:64:8d:a3:86:a7:cd: e5:76:fe:e6:a6:99:da:80:45:31:47:2d:82:64:18: 36:e4:03:cc:14:0b:21:f5:58:63:81:0b:af:af:4c: 0b:ea:71:cd:a3:e7:1c:1a:3e:1e:63:9c:4a:e6:8d: df:fd:21:9f:f3:a0:9a:91:47:c0:e7:27:a4:3c:3f: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:9C:13:B9:7A:D4:56:49:33:32:C2:C9:74:2E:BC:7F:95:F7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:13:d8:f8:1f:64:b0:5e:7e:17:ef:06:f3:d0:65:5e:8a:27: 82:9f:74:3a:30:ec:e2:c7:04:e8:24:89:e6:e1:09:4b:cd:6e: a0:5e:73:c3:d2:32:3e:1c:17:e9:10:0b:6f:9c:60:7e:28:de: 08:7e:9b:c5:97:e7:e4:24:39:3f:96:48:b6:36:c3:20:35:d2: 6b:58:c1:fb:48:b5:fc:88:6a:28:1e:aa:d8:a8:24:62:9a:38: e5:01:4f:99:0b:23:e1:d1:0c:95:64:91:38:39:31:13:0b:8e: 4f:38:77:bb:a2:c6:1e:ff:11:a2:8f:88:48:11:ab:43:ec:33: 11:f7:26:36:8c:77:67:e2:a9:39:da:5a:0a:21:f8:cb:ce:42: f0:fb:cd:84:a3:58:6b:29:01:c4:2d:b2:c4:a9:ef:0c:37:e6: 96:21:34:1e:ad:21:37:46:1f:fd:4c:5f:da:e1:d9:2b:63:4d: 1e:67:96:55:5e:73:be:11:e1:c0:8c:5e:94:21:1e:ec:a8:71: 75:42:8f:d8:3b:ee:a1:aa:64:1a:c6:4d:bd:ce:71:8c:a8:8f: d1:61:1c:57:61:4a:58:01:74:f0:3a:56:b7:a8:1f:4a:9f:5e: a1:0e:3b:58:f1:db:59:9c:fc:15:a8:e3:26:1d:ed:61:b5:6d: 4a:c5:c5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eghn9XQfjeZeMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MzMyYjMwNTgtOWI4Ni00MzcwLTgwZTItYmYzZDBiMDU1NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcQzhjpAtYPLBAbrNqiLHqq5dRwFdqiFc/BI EU6sXoOlFOZv6Jrwlef0ArE+D0miLihVXKAc3FoW3wFZWpCYleFfX1qdoaM8M2yf WlQyX7MpgJ9exYpRqOAph1CSm09yu9baXifE74+HtqL4yIiLXHQDXQaAcF9Z6K0C 3LA3JFQla8zpOCKScfWyiSx/KEajDBg41F4SHP/hIevaEf6lP5FFtMok+Asil5Qv B6rTeiPGe+zgWYRlWc/nlHRkjaOGp83ldv7mppnagEUxRy2CZBg25APMFAsh9Vhj gQuvr0wL6nHNo+ccGj4eY5xK5o3f/SGf86CakUfA5yekPD95gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPLnBO5etRWSTMywsl0Lrx/lfckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNzc5NmI2M2UtYTNmNi0z MmY1LThlZWYtZDg2NmY4ZTc2MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcT2PgfZLBefhfvBvPQZV6KJ4KfdDow7OLHBOgkiebhCUvNbqBec8PS Mj4cF+kQC2+cYH4o3gh+m8WX5+QkOT+WSLY2wyA10mtYwftItfyIaigeqtioJGKa OOUBT5kLI+HRDJVkkTg5MRMLjk84d7uixh7/EaKPiEgRq0PsMxH3JjaMd2fiqTna Wgoh+MvOQvD7zYSjWGspAcQtssSp7ww35pYhNB6tITdGH/1MX9rh2StjTR5nllVe c74R4cCMXpQhHuyocXVCj9g77qGqZBrGTb3OcYyoj9FhHFdhSlgBdPA6VreoH0qf XqEOO1jx21mc/BWo4yYd7WG1bUrFxS8= -----END CERTIFICATE-----Generated at Sat May 10 21:48:51 2025 by rpki-client