$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: hvGJaEm687iDI8UmAPlFg7Wy8sYtJciC6htZ2EUND64= Subject key identifier: F4:F6:90:2E:17:DB:4E:F5:CC:16:C9:C7:46:FF:29:CB:AF:C9:1B:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122AD01C5E27BB1C093B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2a:d0:1c:5e:27:bb:1c:09:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d0049c0e-2f7b-4dff-b831-f396e00df26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:05:ae:e8:0b:62:06:1f:01:c2:84:fb:be: 97:c1:21:e8:41:da:cf:80:83:a1:50:67:6f:ef:4e: c4:71:70:f2:0a:b4:4a:5c:7c:d5:ec:af:76:06:20: 7d:52:89:9e:b0:d6:bf:ca:83:50:ef:0d:50:04:39: c2:1c:ca:b1:0b:27:8a:71:60:0b:a0:82:31:c4:ea: aa:d4:2d:dd:02:da:1a:98:f2:d5:b6:09:df:19:a8: ad:92:25:a9:95:b1:a5:76:bc:9a:21:4e:0f:ac:54: 5c:9a:b6:ea:dd:21:24:38:40:79:c6:1d:9a:6f:4f: af:36:29:8f:cd:4e:c3:d7:ba:69:48:75:ed:bc:de: c6:14:d8:0f:b5:8f:45:b2:8a:4e:3f:70:95:a7:95: 75:76:33:44:9d:c0:0b:61:f1:f9:2a:aa:42:f9:cc: 24:dd:bc:3f:8a:d6:63:47:0c:04:3d:bc:64:b0:65: f6:77:13:30:d0:7d:b9:58:71:da:e0:73:9f:e4:c4: 9c:42:49:39:32:0e:61:a7:b2:f0:e5:cd:9e:ab:b1: fe:5d:c3:3a:f5:a2:74:f6:9e:ae:64:0a:ff:b4:3f: cc:40:f5:8d:c5:6e:26:78:8e:c6:67:11:d6:63:94: fe:af:15:cc:dc:7c:d3:4a:94:74:16:cf:cc:d3:ea: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:90:2E:17:DB:4E:F5:CC:16:C9:C7:46:FF:29:CB:AF:C9:1B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b2:dd:3c:29:f4:f7:b2:3f:6f:78:71:73:e0:cb:f1:53:10: ba:27:14:d3:20:d8:c1:c5:0e:5e:1f:3f:94:df:cc:92:6d:35: b8:db:5d:16:4d:78:af:55:c8:94:b8:0a:5a:6f:78:ad:af:c2: 16:37:b5:2d:48:97:e9:05:70:92:0f:0e:a6:34:d0:77:1b:7b: be:bd:99:16:36:e5:cf:f4:1d:32:c7:f8:bf:cf:1d:af:27:0e: c1:5d:dd:de:23:a5:5c:0d:2e:12:dd:8a:5a:09:81:04:c1:58: b2:d0:7c:46:f4:33:ef:00:1d:6a:17:b7:7c:0b:1a:c6:18:b3: 63:30:de:ad:b2:86:fb:9f:31:87:38:31:a3:64:ee:ec:64:df: 5f:63:fd:07:ef:09:ad:ec:d8:77:8b:14:16:0e:25:e9:28:a9: c2:3b:c2:07:75:2c:16:51:64:62:2e:da:f6:57:a4:8f:b0:1c: e4:dd:43:34:06:94:68:24:b0:b3:96:db:d5:1b:47:d8:55:55: d6:37:e2:e0:0e:e4:6a:e2:6e:87:f0:8f:c7:89:14:ce:a4:2e: 1f:75:28:07:5a:4b:18:76:bd:e9:d9:55:da:ca:08:2d:e8:39: 72:d3:47:26:89:78:45:9c:26:51:d8:2c:1a:4f:7c:38:64:e3: ee:54:4a:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEirQHF4nuxwJOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDAwNDljMGUtMmY3Yi00ZGZmLWI4MzEtZjM5NmUwMGRmMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngcFrugLYgYfAcKE+76XwSHoQdrPgIOhUGdv 707EcXDyCrRKXHzV7K92BiB9UomesNa/yoNQ7w1QBDnCHMqxCyeKcWALoIIxxOqq 1C3dAtoamPLVtgnfGaitkiWplbGldryaIU4PrFRcmrbq3SEkOEB5xh2ab0+vNimP zU7D17ppSHXtvN7GFNgPtY9FsopOP3CVp5V1djNEncALYfH5KqpC+cwk3bw/itZj RwwEPbxksGX2dxMw0H25WHHa4HOf5MScQkk5Mg5hp7Lw5c2eq7H+XcM69aJ09p6u ZAr/tD/MQPWNxW4meI7GZxHWY5T+rxXM3HzTSpR0Fs/M0+pPWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT2kC4X2071zBbJx0b/KcuvyRvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGy3Twp9PeyP294cXPgy/FTELonFNMg2MHFDl4fP5TfzJJtNbjbXRZN eK9VyJS4ClpveK2vwhY3tS1Il+kFcJIPDqY00Hcbe769mRY25c/0HTLH+L/PHa8n DsFd3d4jpVwNLhLdiloJgQTBWLLQfEb0M+8AHWoXt3wLGsYYs2Mw3q2yhvufMYc4 MaNk7uxk319j/QfvCa3s2HeLFBYOJekoqcI7wgd1LBZRZGIu2vZXpI+wHOTdQzQG lGgksLOW29UbR9hVVdY34uAO5Gribofwj8eJFM6kLh91KAdaSxh2venZVdrKCC3o OXLTRyaJeEWcJlHYLBpPfDhk4+5UShw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:27 2025 by rpki-client