$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa File: 889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa (raw, json) Hash identifier: qXC57sdE38fcKgH+O4BQLbek/R7w0lHLage2c7mwFU0= Subject key identifier: 1B:5A:84:62:E2:A2:EB:F5:83:E6:8E:47:01:8A:6F:0D:D2:D4:BD:D3 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A25256FD2CA8025F038AD4400 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa Signing time: Tue 10 Jun 2025 13:01:03 +0000 ROA not before: Tue 10 Jun 2025 13:01:03 +0000 ROA not after: Mon 08 Sep 2025 13:01:03 +0000 asID: 6939 IP address blocks: 173.239.210.0/24 maxlen: 24 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:25:6f:d2:ca:80:25:f0:38:ad:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 10 13:01:03 2025 GMT Not After : Sep 8 13:01:03 2025 GMT Subject: CN=ddcf95e3-0cf7-4918-b41b-64892c1c7a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:c4:97:1e:1d:88:c3:ad:c1:d7:fc:72:0d: 83:39:ef:75:86:14:a8:52:74:27:49:22:de:bb:0f: 98:8f:32:72:a7:37:f6:5b:a7:38:b5:c6:80:59:9a: 00:75:78:ed:6b:ed:d1:03:7d:2b:cc:7f:ea:36:4c: 15:c1:8f:d7:9d:c0:f7:31:ba:8f:b4:cf:13:f1:9e: 2c:d6:66:9b:24:a9:c1:6b:66:e2:e0:e9:90:d0:6b: af:12:d4:f9:6f:f6:27:b3:ba:fc:83:75:3f:5b:71: a6:9f:1d:e6:88:87:c9:09:d6:34:67:89:3a:2d:be: 69:e4:6c:a1:a3:83:06:a6:79:bf:e1:9c:31:d6:93: fe:ec:ce:94:68:64:56:f8:81:30:2f:be:2e:69:48: 30:37:6b:08:7f:fd:0b:61:ca:71:d8:13:f7:2c:a2: e1:42:b9:80:5f:cf:09:e1:56:68:35:6e:2a:a0:99: 14:65:d6:be:d8:37:82:8a:6f:1d:5e:3d:ea:9d:7c: e2:1d:86:84:0c:10:6f:2b:39:91:4b:f5:1a:3e:cf: 7a:1f:a9:67:ad:87:c9:8c:4b:d0:61:e7:11:44:bd: c7:e3:c7:54:2d:61:04:ee:83:c5:b8:6a:d0:9b:8e: 77:92:2f:4a:3a:a8:ac:92:66:c5:d3:b0:9b:81:4f: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:84:62:E2:A2:EB:F5:83:E6:8E:47:01:8A:6F:0D:D2:D4:BD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.210.0/24 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:85:6c:08:ea:8f:08:fc:10:2f:39:f6:7d:28:7f:a0:81:74: 50:bd:46:d0:60:27:c6:8c:68:eb:ea:fd:08:bd:ed:79:e4:c9: 03:0b:56:f7:94:ef:da:0d:d6:b0:aa:11:16:29:9a:65:5a:ef: 05:cd:ff:db:ea:60:c7:ce:8f:e6:2a:29:3b:df:31:df:a4:72: 99:9f:45:0a:da:5a:f8:80:4a:a6:23:a2:73:96:dc:64:8a:84: fa:b2:01:3a:a0:15:3d:da:dd:64:5b:98:d8:e8:04:12:34:8d: 4b:af:30:26:63:56:1a:75:6b:2f:e3:8c:e6:2d:50:5a:dd:1c: 06:bc:97:dc:4a:db:0f:77:93:cf:35:74:10:cc:47:b5:56:4a: aa:d9:33:33:64:3e:a6:7e:99:2d:5b:4b:71:ac:12:f4:af:f5: 48:97:3d:b2:64:c9:3c:2e:4c:35:7f:40:53:1e:15:4b:19:12: ae:76:f7:15:b9:17:73:8d:16:a6:44:c5:8f:db:9e:0b:92:80: f7:89:78:a2:bf:cc:05:e9:85:a4:0c:77:d5:e2:1f:0a:98:ca: d6:48:39:59:a6:a2:24:ea:8d:07:34:29:78:d4:51:af:ec:78: 6c:2c:12:22:68:7c:2a:4f:a2:d2:2f:6f:52:b2:a7:aa:14:45: 15:75:dc:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEolJW/SyoAl8DitRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYxMDEzMDEwM1oXDTI1MDkwODEzMDEwM1owLzEtMCsGA1UEAxMk ZGRjZjk1ZTMtMGNmNy00OTE4LWI0MWItNjQ4OTJjMWM3YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl7Elx4diMOtwdf8cg2DOe91hhSoUnQnSSLe uw+YjzJypzf2W6c4tcaAWZoAdXjta+3RA30rzH/qNkwVwY/XncD3MbqPtM8T8Z4s 1mabJKnBa2bi4OmQ0GuvEtT5b/Yns7r8g3U/W3Gmnx3miIfJCdY0Z4k6Lb5p5Gyh o4MGpnm/4Zwx1pP+7M6UaGRW+IEwL74uaUgwN2sIf/0LYcpx2BP3LKLhQrmAX88J 4VZoNW4qoJkUZda+2DeCim8dXj3qnXziHYaEDBBvKzmRS/UaPs96H6lnrYfJjEvQ YecRRL3H48dULWEE7oPFuGrQm453ki9KOqiskmbF07CbgU+KQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBtahGLiouv1g+aORwGKbw3S1L3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODg5YTQ4YTMtM2U3Ny0z ZDRkLTg4OTQtMTBkYWVkNGIxZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/SAwQA re/6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKGFbAjqjwj8EC859n0of6CBdFC9RtBgJ8aMaOvq/Qi97Xnk yQMLVveU79oN1rCqERYpmmVa7wXN/9vqYMfOj+YqKTvfMd+kcpmfRQraWviASqYj onOW3GSKhPqyATqgFT3a3WRbmNjoBBI0jUuvMCZjVhp1ay/jjOYtUFrdHAa8l9xK 2w93k881dBDMR7VWSqrZMzNkPqZ+mS1bS3GsEvSv9UiXPbJkyTwuTDV/QFMeFUsZ Eq529xW5F3ONFqZExY/bnguSgPeJeKK/zAXphaQMd9XiHwqYytZIOVmmoiTqjQc0 KXjUUa/seGwsEiJofCpPotIvb1Kyp6oURRV13Ow= -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:09 2025 by rpki-client