$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa File: ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa (raw, json) Hash identifier: Sxf47H86RU0H7d9zLpr/MjmjxDqPZhr9enZoGdR5ABI= Subject key identifier: 10:FE:1E:F2:B3:31:A1:8C:03:CA:62:E9:1C:23:00:2C:0A:06:7A:35 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849F2E5446023E5343223ACF380 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 137409 IP address blocks: 98.159.39.0/24 maxlen: 24 173.244.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:44:60:23:e5:34:32:23:ac:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3d9c9c47-0c48-4aa1-a6d6-98d4d7ffb844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:bc:8d:63:d9:5b:57:30:f8:8c:24:a3:54: 0c:47:09:8a:2f:6c:05:b8:d8:fd:d3:69:5d:d9:f6: 28:8e:02:04:62:5a:c9:7d:dc:73:26:4e:66:e4:26: 22:af:f3:34:66:c2:7a:86:5f:2e:fa:fd:49:6d:fc: c3:96:f7:79:89:13:b6:11:22:11:bf:89:60:57:a4: 4e:b4:e3:63:5c:2e:99:78:8d:98:6c:fc:92:73:95: f9:f2:88:9e:2d:b2:87:68:65:e9:4f:1f:4d:d5:4d: 29:cc:1c:32:be:72:69:f7:c3:c9:fa:31:a8:e0:b2: d4:9a:54:a9:8e:c0:e0:a2:81:8f:db:36:0d:b0:b4: 96:a2:9f:b1:55:79:45:7a:0c:b5:a8:6d:5e:34:e0: 63:8f:b9:f3:ee:a7:29:f9:fb:44:07:60:0a:1c:33: 64:9f:69:e3:30:bb:c4:54:e3:a5:b1:64:09:2f:17: b7:24:60:72:07:3d:5e:8a:2b:38:62:a6:91:ad:a0: 3b:33:42:12:fd:c1:70:d5:e7:6c:69:06:c1:bf:26: e7:36:87:e8:e0:6f:de:a4:c0:f9:7a:83:3c:98:d2: 59:4b:57:39:f6:8a:f3:60:c3:ef:fc:dc:1c:e6:df: 3f:83:9e:f8:8c:fe:5d:c7:2d:a7:db:d7:7f:92:df: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FE:1E:F2:B3:31:A1:8C:03:CA:62:E9:1C:23:00:2C:0A:06:7A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.39.0/24 173.244.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:22:37:d6:b4:b8:26:38:fa:99:8b:26:68:25:b8:e0:85:a5: 6b:8a:44:95:a3:2e:47:56:38:27:fd:a3:86:94:d3:10:d8:bc: fa:ff:e3:df:77:92:95:37:8b:74:7d:8c:fd:ec:0e:65:93:39: 65:98:4b:93:26:f9:21:ed:0b:ff:f2:8a:bf:74:5d:f6:ca:8a: fd:6f:8d:91:6a:46:6d:d5:ee:af:7d:25:d5:8a:f0:34:70:e7: bc:47:84:ba:7c:13:35:da:8e:49:f8:9e:96:70:4d:cd:01:0a: 73:71:f0:5e:ac:0c:9a:a1:e4:b6:12:19:21:f2:12:d9:63:24: 9d:6e:57:17:d2:5c:77:f3:9f:4a:10:41:48:8c:34:07:f8:32: c5:c6:ed:89:7e:29:29:f5:c3:b0:b4:38:df:52:95:6d:17:19: b8:bc:65:49:70:ce:4e:45:3c:ec:3a:db:85:c9:e1:72:fd:a3: ba:94:7d:1e:53:9d:64:ec:4c:52:a2:f6:23:98:4f:4c:50:7f: 92:e6:85:c8:f9:c3:22:ed:e9:fd:da:51:ef:e2:cd:38:65:e4: 4d:64:65:4c:8d:ba:5d:4b:6c:cc:19:1c:e3:25:10:9f:36:23: 5c:1f:6b:98:85:59:9d:f5:c6:d6:f1:d1:52:bf:84:11:69:bc: 84:c2:d4:68 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEny5URgI+U0MiOs84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2Q5YzljNDctMGM0OC00YWExLWE2ZDYtOThkNGQ3ZmZiODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/m8jWPZW1cw+Iwko1QMRwmKL2wFuNj902ld 2fYojgIEYlrJfdxzJk5m5CYir/M0ZsJ6hl8u+v1JbfzDlvd5iRO2ESIRv4lgV6RO tONjXC6ZeI2YbPySc5X58oieLbKHaGXpTx9N1U0pzBwyvnJp98PJ+jGo4LLUmlSp jsDgooGP2zYNsLSWop+xVXlFegy1qG1eNOBjj7nz7qcp+ftEB2AKHDNkn2njMLvE VOOlsWQJLxe3JGByBz1eiis4YqaRraA7M0IS/cFw1edsaQbBvybnNofo4G/epMD5 eoM8mNJZS1c59orzYMPv/Nwc5t8/g574jP5dxy2n29d/kt90YwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBD+HvKzMaGMA8pi6RwjACwKBno1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZWFkMDRlZjMtYTcxMi0z OWU2LWFlYjUtY2NkNmU1MGE3ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYp8nAwQA rfQrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKMiN9a0uCY4+pmLJmgluOCFpWuKRJWjLkdWOCf9o4aU0xDY vPr/4993kpU3i3R9jP3sDmWTOWWYS5Mm+SHtC//yir90XfbKiv1vjZFqRm3V7q99 JdWK8DRw57xHhLp8EzXajkn4npZwTc0BCnNx8F6sDJqh5LYSGSHyEtljJJ1uVxfS XHfzn0oQQUiMNAf4MsXG7Yl+KSn1w7C0ON9SlW0XGbi8ZUlwzk5FPOw624XJ4XL9 o7qUfR5TnWTsTFKi9iOYT0xQf5Lmhcj5wyLt6f3aUe/izThl5E1kZUyNul1LbMwZ HOMlEJ82I1wfa5iFWZ31xtbx0VK/hBFpvITC1Gg= -----END CERTIFICATE-----Generated at Mon Jun 30 19:50:32 2025 by rpki-client