$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa File: 0793e06c-647d-3a3a-a20c-4a207460adb8.roa (raw, json) Hash identifier: 1IXYxrunaefbUXW+45TrDthJs03zn+tNefp99/Lkxgk= Subject key identifier: 7C:68:66:73:89:07:33:20:B0:70:E9:B3:F1:24:AA:1D:94:EC:49:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB8308EAB28FBC86C8B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b8:30:8e:ab:28:fb:c8:6c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=199f1535-0052-44e5-ac11-597a6c0fd139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:92:43:31:1d:7a:c5:0b:61:a0:0f:d4:93: 68:d6:e0:25:f0:33:4a:a4:1d:bb:27:86:34:73:4a: 29:8c:f6:4a:e8:b9:0b:a6:04:b2:a9:79:cf:32:84: 5c:55:8a:2e:d5:1a:c4:09:ce:88:a3:16:9b:94:09: 36:ed:c1:6c:41:1b:ec:9a:40:ea:79:00:cf:76:3b: 19:62:d3:f7:c7:1e:9f:18:60:0f:73:37:49:50:d2: 02:28:af:b8:fc:6e:16:17:67:8c:66:20:ca:9d:8c: 01:41:81:10:fa:ae:61:2e:17:83:67:0d:40:93:86: 8f:ec:e5:e6:71:0e:fe:b4:c0:28:a1:31:14:af:43: 59:c5:08:25:4a:a9:06:39:02:0a:ee:98:c0:0c:c2: 6e:46:e8:0f:1d:f6:f0:75:8f:c9:19:f1:1d:46:79: 28:62:f6:d4:fc:f7:45:14:34:8b:01:08:b3:1c:4c: 01:21:86:c9:87:1d:30:cd:a9:32:2b:1f:29:5f:9e: 9e:54:cb:d3:77:2a:02:30:27:ca:e9:6a:22:28:51: d1:b1:a2:b1:4f:ef:62:c0:2f:3a:41:ed:95:e3:93: 24:3a:d5:a2:bd:cf:cd:03:91:c7:af:0d:2d:66:8f: 99:a5:84:33:0c:a6:b4:20:2f:49:1f:31:9e:86:66: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:66:73:89:07:33:20:B0:70:E9:B3:F1:24:AA:1D:94:EC:49:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fc:52:ec:1f:a0:99:bb:f3:04:6c:10:58:21:31:7e:22:84: d9:e9:e9:4f:f5:80:d6:14:6c:dc:df:1d:03:73:42:a8:1a:71: 61:11:8f:51:1b:ab:9d:86:97:89:15:a8:2c:80:6b:0c:62:17: fc:98:06:19:1d:3d:fc:3e:2b:30:29:63:03:41:75:83:48:6a: 71:48:b7:e8:78:f1:27:6f:17:1a:4f:c4:5b:7a:0b:df:b0:54: 45:37:67:cf:7c:d1:4d:11:dc:d3:08:a0:35:72:79:35:bb:2a: 26:c3:ae:27:19:9e:ee:d6:13:1a:ac:00:cf:08:62:57:c8:24: 26:4f:d3:cb:77:9a:90:94:cb:9d:c0:a5:c0:93:6e:d1:74:56: e0:37:b9:ec:ea:9e:5e:b2:e5:c7:01:79:06:e9:82:f8:e8:76: 96:bd:ac:d3:ec:bc:d9:ae:d6:2b:ea:58:13:9a:76:d5:e5:59: 88:13:d2:67:86:6d:ab:cf:f3:b8:51:fb:8b:12:46:73:63:5b: 85:47:5a:50:84:ff:ef:0f:ab:9a:ae:e8:bc:da:f9:17:e1:95: 12:57:c7:12:87:c6:2f:a3:7f:ba:02:fc:26:df:35:98:0a:a6: 53:aa:9f:51:ff:e0:7f:5d:35:f2:5d:ca:7c:51:43:e2:eb:39: cf:22:2b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurgwjqso+8hsiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTk5ZjE1MzUtMDA1Mi00NGU1LWFjMTEtNTk3YTZjMGZkMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7GSQzEdesULYaAP1JNo1uAl8DNKpB27J4Y0 c0opjPZK6LkLpgSyqXnPMoRcVYou1RrECc6IoxablAk27cFsQRvsmkDqeQDPdjsZ YtP3xx6fGGAPczdJUNICKK+4/G4WF2eMZiDKnYwBQYEQ+q5hLheDZw1Ak4aP7OXm cQ7+tMAooTEUr0NZxQglSqkGOQIK7pjADMJuRugPHfbwdY/JGfEdRnkoYvbU/PdF FDSLAQizHEwBIYbJhx0wzakyKx8pX56eVMvTdyoCMCfK6WoiKFHRsaKxT+9iwC86 Qe2V45MkOtWivc/NA5HHrw0tZo+ZpYQzDKa0IC9JHzGehmaNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxoZnOJBzMgsHDps/Ekqh2U7ElpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc5M2UwNmMtNjQ3ZC0z YTNhLWEyMGMtNGEyMDc0NjBhZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL8UuwfoJm78wRsEFghMX4ihNnp6U/1gNYUbNzfHQNzQqgacWERj1Eb q52Gl4kVqCyAawxiF/yYBhkdPfw+KzApYwNBdYNIanFIt+h48SdvFxpPxFt6C9+w VEU3Z8980U0R3NMIoDVyeTW7KibDricZnu7WExqsAM8IYlfIJCZP08t3mpCUy53A pcCTbtF0VuA3uezqnl6y5ccBeQbpgvjodpa9rNPsvNmu1ivqWBOadtXlWYgT0meG bavP87hR+4sSRnNjW4VHWlCE/+8Pq5qu6Lza+RfhlRJXxxKHxi+jf7oC/CbfNZgK plOqn1H/4H9dNfJdynxRQ+LrOc8iKwk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:39 2025 by rpki-client