$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: HkW43ASxbkeRqWDJNE7l0KJq9y0TDvJBEErKqJgPzYg= Subject key identifier: AC:AF:1B:02:FC:28:F8:28:88:E0:52:7A:EC:83:7F:14:56:AD:D7:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB731890A07719CD94DB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:73:18:90:a0:77:19:cd:94:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bffb025d-faad-4172-894e-a9d9e80f2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:ef:0d:8f:5c:1c:db:40:42:be:ae:aa:fd: 22:1d:be:39:8b:0e:bc:52:68:88:40:72:19:59:06: 32:86:cf:1e:1d:17:44:10:27:65:f9:f3:5e:d8:b5: 5a:77:f2:f9:31:95:1e:6a:2e:25:0f:88:f5:08:d7: 9d:5e:32:e6:77:c4:9f:03:68:ef:c9:2d:c4:8a:6a: 11:11:ac:45:df:96:84:1d:01:59:2d:c7:d9:4b:d2: 6a:a5:74:4a:a0:f4:9d:70:31:d2:9f:f7:0c:0c:36: 6e:23:99:fb:3d:80:34:d9:bf:f9:ff:b4:dc:77:c6: 11:ca:e8:46:1b:af:c1:61:14:65:ce:55:c2:fe:b8: 40:0e:6a:7f:ad:e4:46:f8:cb:f9:cb:ca:b5:0e:7a: c4:a1:a2:f8:5a:44:b5:3b:d2:ee:58:ff:13:6c:99: 3d:4a:00:be:9c:c9:93:a9:fb:8e:ac:35:77:3e:c8: d9:65:d1:20:48:ae:30:ae:d4:32:ab:ac:38:31:d1: 1b:3c:22:82:7c:a4:a0:7e:14:d2:f2:99:5c:c7:84: 14:85:8a:18:75:92:77:55:ee:1b:3a:8c:8f:c6:af: c9:b2:d9:bc:2f:a7:fe:c0:12:62:a6:70:44:f6:85: 34:f2:fa:dc:29:8c:f2:28:a7:35:fb:75:86:f3:68: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:1B:02:FC:28:F8:28:88:E0:52:7A:EC:83:7F:14:56:AD:D7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:16:ba:1f:3a:ee:1a:89:43:32:22:b4:cf:d5:3d:36:df:d2: 4d:38:41:71:82:51:7d:ff:59:d6:8b:94:75:71:5e:07:ea:3d: 08:7a:6d:bc:5b:34:4c:08:cf:ce:2e:47:77:7e:d5:5d:31:d6: 8c:e7:0f:ec:7e:e5:9a:7d:5f:94:d1:76:ac:44:5d:0d:f8:e0: 12:94:b6:23:33:4a:0f:8e:a8:1b:a5:a5:76:ca:3e:ec:e1:03: 2e:7e:3a:69:9d:90:14:a7:dc:99:14:20:07:25:f9:e8:12:1d: 2b:26:14:88:64:b1:ef:31:3b:6a:66:90:fb:43:d3:2b:28:48: 29:99:53:8d:0d:f6:ad:a8:49:6f:6a:9b:c7:f4:5f:9e:23:69: 77:7b:ec:ab:a1:72:59:5c:ac:ad:3d:6b:33:62:8d:d5:0d:d5: 8a:6e:62:d7:81:3e:1c:b2:b7:95:86:e3:94:a4:30:86:b0:5a: e3:5a:27:8b:e1:64:2c:75:2a:04:59:a4:66:dd:0a:ec:32:ca: a6:44:88:23:de:d7:2c:79:41:30:85:04:40:ad:dd:c3:7e:bc: ef:d1:7e:a5:81:0a:e2:9f:f6:29:b7:87:8f:b3:0b:6d:ac:21: e4:67:c4:2b:63:1a:d0:7f:d6:ca:78:fa:4e:45:42:7e:38:46: 24:37:58:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3MYkKB3Gc2U24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmZmYjAyNWQtZmFhZC00MTcyLTg5NGUtYTlkOWU4MGYyZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODvDY9cHNtAQr6uqv0iHb45iw68UmiIQHIZ WQYyhs8eHRdEECdl+fNe2LVad/L5MZUeai4lD4j1CNedXjLmd8SfA2jvyS3EimoR EaxF35aEHQFZLcfZS9JqpXRKoPSdcDHSn/cMDDZuI5n7PYA02b/5/7Tcd8YRyuhG G6/BYRRlzlXC/rhADmp/reRG+Mv5y8q1DnrEoaL4WkS1O9LuWP8TbJk9SgC+nMmT qfuOrDV3PsjZZdEgSK4wrtQyq6w4MdEbPCKCfKSgfhTS8plcx4QUhYoYdZJ3Ve4b OoyPxq/Jstm8L6f+wBJipnBE9oU08vrcKYzyKKc1+3WG82gPlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyvGwL8KPgoiOBSeuyDfxRWrdcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEWuh867hqJQzIitM/VPTbf0k04QXGCUX3/WdaLlHVxXgfqPQh6bbxb NEwIz84uR3d+1V0x1oznD+x+5Zp9X5TRdqxEXQ344BKUtiMzSg+OqBulpXbKPuzh Ay5+OmmdkBSn3JkUIAcl+egSHSsmFIhkse8xO2pmkPtD0ysoSCmZU40N9q2oSW9q m8f0X54jaXd77KuhcllcrK09azNijdUN1YpuYteBPhyyt5WG45SkMIawWuNaJ4vh ZCx1KgRZpGbdCuwyyqZEiCPe1yx5QTCFBECt3cN+vO/RfqWBCuKf9im3h4+zC22s IeRnxCtjGtB/1sp4+k5FQn44RiQ3WCI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:57 2025 by rpki-client