$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa File: 2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json) Hash identifier: CoAI4T8pNJcMarBLJr7vQG1Di0RI3Lc1g8R8Vg+gNCE= Subject key identifier: C9:8F:F7:49:83:39:D0:7E:D5:2D:14:16:CB:9B:28:0A:AB:90:86:47 Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Certificate serial: 010D0C9F4328584A3CE02A017E36D7591F466D00 Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 2055 IP address blocks: 173.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2a:01:7e:36:d7:59:1f:46:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=7739f32f-6c88-4ac1-bb86-82c27ea6706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:d8:a9:3d:e1:1c:6c:97:19:46:a1:cc:8c: 0c:42:48:f4:a6:a4:63:30:22:29:a7:a3:e7:c4:91: 8b:a7:5d:b2:34:80:76:52:40:06:92:91:18:a5:7b: 2d:f3:65:c8:b2:65:42:16:7d:d2:47:0b:0e:9d:3c: 69:de:cf:cc:f1:ac:ab:87:82:21:65:47:c1:81:5e: 4c:f9:de:af:f4:f8:dc:bc:81:ef:48:c3:84:e5:fc: ce:27:6c:de:31:ed:f7:94:7a:cd:b8:32:c9:4b:cd: 06:c2:c8:7b:b4:dc:b1:d6:2f:93:a0:00:9d:5d:0c: 4f:a5:48:75:2b:11:ad:8e:ae:4c:3f:d5:67:28:23: d7:1b:6e:e3:f1:13:66:cf:53:7b:f8:0d:67:ce:47: 77:81:c4:25:ec:bd:2a:b8:3d:c1:56:e4:ad:92:7b: 3c:1f:8e:5c:a9:d5:2e:0c:d4:fe:4c:11:9d:7b:64: a7:c2:85:db:fb:3b:33:c0:06:8f:d4:d9:3d:5f:e3: 10:5f:9c:e5:c4:8a:44:d1:89:b5:48:cf:64:b2:22: af:96:65:ab:88:a2:c3:c8:64:d8:5e:71:7e:08:80: 88:5d:b0:25:15:9a:cc:ab:fe:79:08:e5:73:19:ae: 06:5b:a1:24:fd:95:bc:c2:06:97:76:4a:9b:54:ad: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:F7:49:83:39:D0:7E:D5:2D:14:16:CB:9B:28:0A:AB:90:86:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl X509v3 Authority Key Identifier: keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer sbgp-ipAddrBlock: critical IPv4: 173.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:92:e8:69:3c:ce:28:fb:56:13:2c:55:55:35:9d:04:95:16: fb:78:7f:ef:12:fb:00:26:58:72:89:fe:54:c2:6f:00:b8:24: 9f:aa:a9:0d:d5:a4:c3:25:87:db:27:ac:79:28:25:36:16:18: 59:e8:9f:aa:84:9e:f5:30:65:9b:4f:07:0b:0e:77:36:73:5b: 6f:3e:33:22:05:af:df:b0:ab:42:b2:81:67:95:1d:30:2c:3a: 5d:a7:92:55:6b:c8:b4:af:1b:4b:b5:64:63:73:78:d3:27:76: a9:6f:09:b9:54:63:d7:d4:97:81:9b:de:32:51:4c:b0:57:f8: 4e:00:db:ac:d5:c2:c7:72:78:e0:18:a8:13:b3:e3:ff:6d:8b: ef:71:85:3e:9a:5d:0e:c2:13:34:d2:6c:e9:34:33:e1:44:3d: 4c:41:a4:7e:52:28:4d:34:90:a5:ed:42:d9:8b:26:6e:56:1e: 19:53:b0:af:36:f1:35:fe:d4:70:c2:a3:8b:59:52:a6:cd:4d: 3e:92:88:13:93:ab:82:c9:35:ec:3d:7b:de:1e:ef:a1:09:30: f6:20:8d:1f:c2:a3:4b:13:17:9a:22:cc:f1:b3:83:93:f1:53: 15:fc:58:53:c8:1d:95:90:54:ef:c0:6e:98:5c:01:34:95:58: 24:ec:09:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CoBfjbXWR9GbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5 MjMxMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NzczOWYzMmYtNmM4OC00YWMxLWJiODYtODJjMjdlYTY3MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rbYqT3hHGyXGUahzIwMQkj0pqRjMCIpp6Pn xJGLp12yNIB2UkAGkpEYpXst82XIsmVCFn3SRwsOnTxp3s/M8ayrh4IhZUfBgV5M +d6v9PjcvIHvSMOE5fzOJ2zeMe33lHrNuDLJS80Gwsh7tNyx1i+ToACdXQxPpUh1 KxGtjq5MP9VnKCPXG27j8RNmz1N7+A1nzkd3gcQl7L0quD3BVuStkns8H45cqdUu DNT+TBGde2SnwoXb+zszwAaP1Nk9X+MQX5zlxIpE0Ym1SM9ksiKvlmWriKLDyGTY XnF+CICIXbAlFZrMq/55COVzGa4GW6Ek/ZW8wgaXdkqbVK037QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmP90mDOdB+1S0UFsubKAqrkIZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5 NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvMmVmNDA4YWQtMzVmOC0z M2U0LWIyOWQtNjQwMzdmMWFlMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3 ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi ODY5YTkyMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrf2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCS6Gk8zij7VhMsVVU1nQSVFvt4f+8S+wAmWHKJ/lTCbwC4JJ+qqQ3V pMMlh9snrHkoJTYWGFnon6qEnvUwZZtPBwsOdzZzW28+MyIFr9+wq0KygWeVHTAs Ol2nklVryLSvG0u1ZGNzeNMndqlvCblUY9fUl4Gb3jJRTLBX+E4A26zVwsdyeOAY qBOz4/9ti+9xhT6aXQ7CEzTSbOk0M+FEPUxBpH5SKE00kKXtQtmLJm5WHhlTsK82 8TX+1HDCo4tZUqbNTT6SiBOTq4LJNew9e94e76EJMPYgjR/Co0sTF5oizPGzg5Px UxX8WFPIHZWQVO/AbphcATSVWCTsCTQ= -----END CERTIFICATE-----Generated at Tue Jul 1 02:43:25 2025 by rpki-client