$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa File: afaed4c9-2c63-3911-91f1-a89e1481c69a.roa (raw, json) Hash identifier: FKuv+VSMqAKZogLTO4qFfc1WBZcXXpiurrjYaesF/+k= Subject key identifier: E6:4F:30:DC:6E:6C:6B:84:32:9D:38:F8:53:F9:3D:84:4D:5F:D3:DD Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849B9AA03E2A5005EA4E8F71B00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 64286 IP address blocks: 173.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:03:e2:a5:00:5e:a4:e8:f7:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=0fd04620-7d74-41dd-9fdd-c18b4797d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:b1:78:27:d5:b3:81:9c:ae:fe:f5:f1:c7: 98:04:50:56:e4:7d:10:46:37:55:d9:0b:0f:9f:d3: 8e:2a:d5:1b:95:28:2d:56:77:30:55:9e:a2:86:e3: 20:7b:f3:f9:78:99:b0:10:76:1c:4a:28:27:d7:00: 82:fc:aa:48:66:0b:22:62:23:62:c4:1c:e5:fd:41: 32:33:35:57:fc:67:53:57:9f:1a:f0:c6:fd:b8:60: 08:1a:a8:8d:4d:ce:89:ea:53:05:87:73:39:ac:2e: 0e:36:e4:69:c4:e2:4b:c4:b7:83:c7:c4:c1:49:4d: 79:f5:34:b9:eb:a5:14:ef:00:b5:b1:72:43:d9:e6: 6b:e4:23:be:c5:c7:3b:78:e3:dc:90:d2:d2:2c:cc: 99:4b:2b:bd:98:2c:0e:8a:b2:f5:3e:81:5b:7d:8d: f0:f5:34:0d:c5:05:74:e3:1b:a5:5d:9a:92:96:1f: d9:6f:56:7d:47:fb:01:5a:c4:16:e5:9a:61:0f:3e: f1:ed:a3:7e:1f:15:be:1c:fa:85:5b:2d:aa:35:ec: af:7a:41:16:af:03:1b:68:2d:9b:4e:52:66:52:ba: ed:61:23:46:08:97:5e:3c:0d:53:9b:42:b7:1f:80: 80:4e:3a:b1:9c:52:6c:a3:c1:a2:35:76:8e:21:3d: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4F:30:DC:6E:6C:6B:84:32:9D:38:F8:53:F9:3D:84:4D:5F:D3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e1:a5:e8:99:f4:4f:95:03:ab:46:a4:7c:60:54:76:2b:f2: 9d:62:0b:2b:d8:da:97:c6:91:63:4b:fb:71:cc:0e:8e:a4:b0: 07:6a:ca:9f:c0:54:5a:b8:20:f9:70:d9:a8:7f:95:ca:bc:d4: 28:7b:61:9e:8d:b5:07:91:d5:b8:06:23:0a:d6:b2:4c:59:9c: 97:13:9a:b6:5d:47:cf:6b:5d:d2:c6:bd:21:05:cc:43:c8:05: 95:f4:99:8b:10:8f:cd:69:85:97:1f:7a:35:bc:5b:a6:53:62: fe:35:72:fd:94:00:b5:6d:03:a3:6c:8d:b5:70:bf:81:62:67: 1c:24:11:a4:02:6e:cc:c3:1a:d7:57:1e:d9:5a:6c:cd:21:16: 8b:18:d4:92:8d:4f:81:03:67:dd:89:ed:f6:a8:d6:6f:b5:78: d8:32:67:ed:63:34:a8:fb:bf:fc:46:96:b9:68:c4:3a:f6:1a: af:ca:31:65:f6:cc:bf:b2:70:8c:71:51:c1:1a:65:24:15:a4: d5:2d:e9:4e:82:00:d9:e4:10:45:8e:6a:d0:94:98:d0:ba:c3: db:fc:cf:24:5d:70:80:3f:27:ca:f1:85:ab:4b:17:03:15:16: 75:2d:93:35:f0:3b:7d:e9:c4:e5:9e:38:cc:0f:23:f3:12:e4: b0:da:d7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgPipQBepOj3GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MGZkMDQ2MjAtN2Q3NC00MWRkLTlmZGQtYzE4YjQ3OTdkMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5CxeCfVs4Gcrv718ceYBFBW5H0QRjdV2QsP n9OOKtUblSgtVncwVZ6ihuMge/P5eJmwEHYcSign1wCC/KpIZgsiYiNixBzl/UEy MzVX/GdTV58a8Mb9uGAIGqiNTc6J6lMFh3M5rC4ONuRpxOJLxLeDx8TBSU159TS5 66UU7wC1sXJD2eZr5CO+xcc7eOPckNLSLMyZSyu9mCwOirL1PoFbfY3w9TQNxQV0 4xulXZqSlh/Zb1Z9R/sBWsQW5ZphDz7x7aN+HxW+HPqFWy2qNeyvekEWrwMbaC2b TlJmUrrtYSNGCJdePA1Tm0K3H4CATjqxnFJso8GiNXaOIT2dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZPMNxubGuEMp04+FP5PYRNX9PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWZhZWQ0YzktMmM2My0z OTExLTkxZjEtYTg5ZTE0ODFjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/hpeiZ9E+VA6tGpHxgVHYr8p1iCyvY2pfGkWNL+3HMDo6ksAdqyp/A VFq4IPlw2ah/lcq81Ch7YZ6NtQeR1bgGIwrWskxZnJcTmrZdR89rXdLGvSEFzEPI BZX0mYsQj81phZcfejW8W6ZTYv41cv2UALVtA6NsjbVwv4FiZxwkEaQCbszDGtdX HtlabM0hFosY1JKNT4EDZ92J7fao1m+1eNgyZ+1jNKj7v/xGlrloxDr2Gq/KMWX2 zL+ycIxxUcEaZSQVpNUt6U6CANnkEEWOatCUmNC6w9v8zyRdcIA/J8rxhatLFwMV FnUtkzXwO33pxOWeOMwPI/MS5LDa11M= -----END CERTIFICATE-----Generated at Wed May 14 00:04:24 2025 by rpki-client