$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa File: 9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa (raw, json) Hash identifier: yTE9F+5yJTCiV4DcOAVY6wgbyTBjx5DcMuzOztISB/M= Subject key identifier: 87:89:2C:1B:8C:66:6A:D7:E8:82:E1:2D:EA:9B:E3:79:82:A6:66:F9 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A3FAADAA974E1529D97396380 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 212238 IP address blocks: 173.239.200.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:da:a9:74:e1:52:9d:97:39:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=1bd6e572-87fe-4353-86ef-b19589bf6424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:07:bf:89:ca:90:16:30:a3:f9:28:ed:e5:a0: b9:5d:d4:ce:80:cd:e9:d2:48:80:2e:02:10:b6:f5: 25:9a:57:13:0d:fd:c2:b0:d1:e0:d1:73:35:45:83: dd:af:bf:c1:d7:1e:3f:b6:e1:d3:97:e2:57:3b:b3: 04:62:3d:47:90:c7:1f:7b:d3:ab:03:13:49:2f:aa: 2f:05:41:93:d2:f9:f7:75:62:3d:c4:8b:ae:e2:b1: 30:03:18:1e:15:b2:0d:2b:36:aa:f7:e2:fa:8a:41: 5d:e6:1f:cd:0f:51:35:5c:00:91:e3:4e:b9:fc:b3: 4e:73:b2:f8:91:8b:2f:7d:79:b2:66:c7:92:a7:36: 7e:1e:71:f9:70:b0:ec:e9:3e:e3:04:43:78:f6:5b: b2:95:e5:bf:8d:f2:18:b0:05:3c:ee:2f:f0:1e:eb: b3:5f:91:3d:60:5c:bd:51:d2:0c:62:3e:f3:fe:b9: e5:2a:15:ec:44:b9:a7:de:2c:e1:84:c3:66:ab:de: 57:54:7f:a0:9a:c8:85:bb:58:52:3e:26:aa:e9:50: 31:f5:14:38:9a:30:07:f7:31:dc:49:f1:d1:02:37: 2e:29:ae:16:b9:14:5e:71:49:e4:5a:e2:ab:6e:0e: fa:22:37:6a:04:b6:4a:32:26:a8:d8:15:6a:1d:97: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:2C:1B:8C:66:6A:D7:E8:82:E1:2D:EA:9B:E3:79:82:A6:66:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:02:5e:50:de:15:6d:b1:5b:5f:ac:32:b6:88:99:cd:57:04: 0c:b0:ae:1e:2e:ba:55:2d:1d:cd:96:70:ac:6b:70:7f:f2:bc: f8:50:98:6e:4a:87:91:31:e5:89:7e:d1:fc:e2:6e:c4:ed:1d: ac:54:7c:5c:3c:32:f5:88:75:f0:26:7b:66:88:c4:1b:59:41: 5e:1f:4c:ca:7c:86:9e:80:d7:cd:b9:a0:aa:7d:61:54:3c:1c: 08:1f:bb:ab:16:63:fa:8f:2c:f1:50:c9:bf:c0:ff:db:1d:8a: f1:01:c0:16:c8:8d:2c:0c:67:09:fc:30:98:1c:44:8e:10:9f: 70:63:3c:2d:ee:a7:86:49:f8:90:c0:bf:8d:2a:1e:65:20:ee: 22:4c:ea:3f:ec:b1:0e:05:8f:20:09:b4:19:38:ca:49:c7:d0: 55:ba:62:3c:37:6f:a3:2b:40:26:c9:6b:7d:59:16:0a:d1:dc: 21:5a:b6:6e:16:96:3d:51:0d:82:e3:b2:84:71:6b:69:f3:47: 3c:08:a1:14:d4:3e:5f:ce:24:ed:7f:71:c1:29:a1:37:cc:a8: 5f:e0:3b:cd:5c:e4:1b:6a:f5:87:08:12:fc:bd:a3:c1:3e:4f: 26:93:23:2b:6f:2e:5e:f7:94:cf:24:30:24:38:92:6b:56:a3: 25:d7:16:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo/qtqpdOFSnZc5Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk MWJkNmU1NzItODdmZS00MzUzLTg2ZWYtYjE5NTg5YmY2NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8we/icqQFjCj+Sjt5aC5XdTOgM3p0kiALgIQ tvUlmlcTDf3CsNHg0XM1RYPdr7/B1x4/tuHTl+JXO7MEYj1HkMcfe9OrAxNJL6ov BUGT0vn3dWI9xIuu4rEwAxgeFbINKzaq9+L6ikFd5h/ND1E1XACR4065/LNOc7L4 kYsvfXmyZseSpzZ+HnH5cLDs6T7jBEN49luyleW/jfIYsAU87i/wHuuzX5E9YFy9 UdIMYj7z/rnlKhXsRLmn3izhhMNmq95XVH+gmsiFu1hSPiaq6VAx9RQ4mjAH9zHc SfHRAjcuKa4WuRRecUnkWuKrbg76IjdqBLZKMiao2BVqHZfxXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIeJLBuMZmrX6ILhLeqb43mCpmb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTE3MGRlN2MtZTQxMy0z MmE1LWEyYzctYzNkMGY3Y2JkMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCAl5Q3hVtsVtfrDK2iJnNVwQMsK4eLrpVLR3NlnCsa3B/8rz4UJhu SoeRMeWJftH84m7E7R2sVHxcPDL1iHXwJntmiMQbWUFeH0zKfIaegNfNuaCqfWFU PBwIH7urFmP6jyzxUMm/wP/bHYrxAcAWyI0sDGcJ/DCYHESOEJ9wYzwt7qeGSfiQ wL+NKh5lIO4iTOo/7LEOBY8gCbQZOMpJx9BVumI8N2+jK0AmyWt9WRYK0dwhWrZu FpY9UQ2C47KEcWtp80c8CKEU1D5fziTtf3HBKaE3zKhf4DvNXOQbavWHCBL8vaPB Pk8mkyMrby5e95TPJDAkOJJrVqMl1xb+ -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:31 2025 by rpki-client