$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: lPtPY0W/xQxOZfXKrdeePbG/g9A4KJHdZKluXXWkdLI= Subject key identifier: 75:C1:D7:C2:10:A8:61:89:9C:16:AE:54:FF:D5:00:76:6C:E9:90:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABF795E50CFD6E574E680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bf:79:5e:50:cf:d6:e5:74:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=76d6737f-ddf3-4fd9-976a-5caaee3c9e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:12:35:3d:2b:eb:28:ae:f7:28:32:cd:bb: 85:fe:a8:a1:f2:7b:77:63:ad:a4:3d:6a:34:85:7c: a7:13:a7:92:20:bc:d7:29:e0:90:a7:e2:9e:7b:71: 2e:0f:e1:29:4f:cb:7a:4a:b6:80:fa:fc:dd:d8:93: 3c:89:f1:c1:96:13:b9:dc:8d:80:bc:3d:d0:3d:3c: 01:be:de:ff:7d:2b:bb:a9:7f:d8:76:71:b7:ec:3a: f5:41:d6:e7:7f:90:57:a5:41:9f:ac:19:14:22:24: a9:e6:62:4f:92:35:21:67:65:b3:3e:da:10:e6:2b: bf:5c:84:33:92:65:d8:3f:07:0b:6c:ac:6a:ec:0b: 43:15:2d:fc:b9:d8:9f:bb:6a:2b:b7:41:c5:b6:cb: 46:db:62:5b:e8:49:fa:85:04:cc:c3:bc:fd:2f:1d: 1f:73:e4:7f:a0:0e:c0:bd:60:ed:43:df:bf:f8:e8: 6f:6f:8e:d3:df:a1:8c:19:ab:e2:f3:0e:fd:27:99: 37:a7:c7:d9:86:52:76:5e:a1:ba:aa:65:1a:82:77: ba:bb:4b:35:c9:89:ea:c1:0d:5a:1b:28:6c:ce:e8: 97:b1:2f:c0:10:92:cf:5b:66:ac:01:4f:55:b1:0f: 07:13:5a:56:cc:03:b4:84:77:eb:8f:77:33:d4:19: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:D7:C2:10:A8:61:89:9C:16:AE:54:FF:D5:00:76:6C:E9:90:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7a:31:88:9e:18:0f:d3:c5:ad:58:19:eb:4f:fe:60:61:c9: 71:68:0a:41:11:79:23:50:ec:f0:50:a6:d7:f3:8d:9f:b3:d2: c5:72:8c:7d:f0:90:25:58:9f:13:fa:41:44:88:0d:0d:87:1f: ff:e1:95:a8:42:19:4b:f7:a8:bd:72:47:66:25:62:ab:20:23: c3:f9:bc:44:4a:4a:eb:97:85:a8:88:ee:52:7d:d0:67:ad:f5: 9e:82:81:a1:79:94:68:c5:cb:ad:b2:18:e2:fe:61:aa:75:3f: 03:41:d4:6d:3f:ea:a3:1b:7c:00:6b:d6:fe:5e:c7:04:e6:23: 19:ca:69:10:83:d8:29:07:97:0a:66:f0:07:80:12:c8:09:fc: 10:76:0e:67:c9:4c:ee:3a:8d:ed:62:fa:50:c4:d8:20:d0:6b: 8e:0b:79:09:e5:1d:c0:82:8f:95:89:b7:d9:0f:b8:9f:31:f8: 73:86:8a:71:55:d9:26:b2:43:5f:20:6c:2c:9c:67:68:ba:51: 56:c4:10:19:ae:ca:02:e1:2b:9e:4d:0b:65:ef:cc:f0:d8:87: b6:69:9b:01:fa:6d:41:15:e4:95:7b:93:a1:ee:01:89:d8:2f: 9b:cb:b2:32:a3:4d:02:91:d2:f2:63:bf:6b:8f:f7:18:b0:22: d8:ba:f7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur95XlDP1uV05oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzZkNjczN2YtZGRmMy00ZmQ5LTk3NmEtNWNhYWVlM2M5ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYSNT0r6yiu9ygyzbuF/qih8nt3Y62kPWo0 hXynE6eSILzXKeCQp+Kee3EuD+EpT8t6SraA+vzd2JM8ifHBlhO53I2AvD3QPTwB vt7/fSu7qX/YdnG37Dr1Qdbnf5BXpUGfrBkUIiSp5mJPkjUhZ2WzPtoQ5iu/XIQz kmXYPwcLbKxq7AtDFS38udifu2ort0HFtstG22Jb6En6hQTMw7z9Lx0fc+R/oA7A vWDtQ9+/+Ohvb47T36GMGavi8w79J5k3p8fZhlJ2XqG6qmUagne6u0s1yYnqwQ1a GyhszuiXsS/AEJLPW2asAU9VsQ8HE1pWzAO0hHfrj3cz1BndawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXB18IQqGGJnBauVP/VAHZs6ZAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ6MYieGA/Txa1YGetP/mBhyXFoCkEReSNQ7PBQptfzjZ+z0sVyjH3w kCVYnxP6QUSIDQ2HH//hlahCGUv3qL1yR2YlYqsgI8P5vERKSuuXhaiI7lJ90Get 9Z6CgaF5lGjFy62yGOL+Yap1PwNB1G0/6qMbfABr1v5exwTmIxnKaRCD2CkHlwpm 8AeAEsgJ/BB2DmfJTO46je1i+lDE2CDQa44LeQnlHcCCj5WJt9kPuJ8x+HOGinFV 2SayQ18gbCycZ2i6UVbEEBmuygLhK55NC2XvzPDYh7ZpmwH6bUEV5JV7k6HuAYnY L5vLsjKjTQKR0vJjv2uP9xiwIti693g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:59 2025 by rpki-client