$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa File: 0793e06c-647d-3a3a-a20c-4a207460adb8.roa (raw, json) Hash identifier: Ogq9lR0rgFf8MNF1s50hg7OULzQiEvNHzZ3r0BRjRd8= Subject key identifier: 9D:55:7A:AA:A2:58:D5:FA:96:8C:F1:96:5B:D3:55:CD:E1:90:B5:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841170F0ABF07B79EE109200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 172.253.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:70:f0:ab:f0:7b:79:ee:10:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8648d6c9-60dd-4d5d-a3a3-255950cff44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:85:54:4f:a0:17:3a:fa:3f:4a:65:88:fe: 03:ff:f4:eb:ec:f6:b0:b3:23:18:8e:56:d0:81:9f: c9:9e:11:28:00:ae:e5:80:ed:00:e2:c8:16:f9:e3: c1:37:a3:7f:b0:a3:1a:88:c7:98:2d:f7:1b:49:04: c5:40:8a:10:d4:e3:54:1b:2a:30:e2:5f:ec:f2:4a: 90:c6:45:a9:1a:3f:42:99:44:60:dd:f7:27:d3:9c: 5d:b0:0d:a2:a0:53:3e:21:c2:0d:30:ca:1a:02:8e: b5:51:36:49:fe:8d:55:bb:8a:c7:25:3c:6f:db:af: e3:16:f8:e8:06:e1:54:ea:96:70:c3:24:d5:7f:58: 8e:74:d6:07:a0:51:66:42:14:b2:88:8c:1a:2d:eb: 17:c5:6f:85:cd:52:23:0c:74:f8:9a:89:c4:ce:1b: 8b:1e:7c:b8:6d:db:72:29:e6:06:cd:14:04:11:96: f6:87:95:a6:f2:6b:e9:cb:40:7f:98:1a:f1:f4:1b: cf:80:0e:cd:9e:95:e4:0e:bc:0a:b4:36:f5:b4:63: 04:70:14:a6:74:25:bb:d8:bb:70:ad:40:4f:12:50: 9e:db:4c:ce:12:a8:d2:5a:69:08:cc:84:30:f3:b6: 88:23:3c:f9:4d:c4:28:60:97:f6:9f:0a:90:04:d6: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:7A:AA:A2:58:D5:FA:96:8C:F1:96:5B:D3:55:CD:E1:90:B5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9a:3c:82:cd:ee:48:d9:df:0a:86:d4:68:24:e7:c7:53:1e: 37:73:bb:b3:2e:ed:50:97:77:60:70:d0:f3:c2:b8:c1:d6:d6: a2:0a:e6:7f:a6:6b:e8:e8:1a:b1:56:a7:3f:27:c0:9f:c1:16: 1c:de:32:2c:8a:37:ed:4b:c9:df:48:b8:0b:e3:91:ef:dc:4b: 73:93:da:98:d9:12:65:4b:b5:6a:ba:ee:f5:44:87:15:0f:66: 62:74:5f:5c:3f:f7:28:f9:ce:17:a0:06:06:08:db:b6:48:43: 83:24:41:f3:1a:f3:3f:1a:2f:18:bf:4b:c1:be:cb:1d:8f:e5: 38:b7:86:e9:07:fd:1c:47:61:1f:60:32:c0:c4:d5:dd:25:f4: e0:c3:b1:e9:c9:a5:32:f2:d2:b8:74:64:ee:cf:37:0f:dc:65: 35:cc:4f:26:87:27:fa:7e:fb:82:79:66:ab:16:1f:97:ef:d3: e5:d0:34:51:76:7c:06:d0:a2:68:2d:20:6d:d0:fd:36:f1:af: 28:ad:27:3d:d0:e0:93:f4:ec:b4:c2:55:2d:89:33:7a:c5:11: f3:31:cb:7f:e4:53:af:97:59:6f:63:2c:7e:75:a7:85:5c:0f: 21:ef:35:0f:a6:58:2e:1f:8b:00:d9:36:9d:b1:06:2b:99:27: 3b:ff:a3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXDwq/B7ee4QkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODY0OGQ2YzktNjBkZC00ZDVkLWEzYTMtMjU1OTUwY2ZmNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGFVE+gFzr6P0pliP4D//Tr7PawsyMYjlbQ gZ/JnhEoAK7lgO0A4sgW+ePBN6N/sKMaiMeYLfcbSQTFQIoQ1ONUGyow4l/s8kqQ xkWpGj9CmURg3fcn05xdsA2ioFM+IcINMMoaAo61UTZJ/o1Vu4rHJTxv26/jFvjo BuFU6pZwwyTVf1iOdNYHoFFmQhSyiIwaLesXxW+FzVIjDHT4monEzhuLHny4bdty KeYGzRQEEZb2h5Wm8mvpy0B/mBrx9BvPgA7NnpXkDrwKtDb1tGMEcBSmdCW72Ltw rUBPElCe20zOEqjSWmkIzIQw87aIIzz5TcQoYJf2nwqQBNbJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1VeqqiWNX6lozxllvTVc3hkLUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc5M2UwNmMtNjQ3ZC0z YTNhLWEyMGMtNGEyMDc0NjBhZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOaPILN7kjZ3wqG1Ggk58dTHjdzu7Mu7VCXd2Bw0PPCuMHW1qIK5n+m a+joGrFWpz8nwJ/BFhzeMiyKN+1Lyd9IuAvjke/cS3OT2pjZEmVLtWq67vVEhxUP ZmJ0X1w/9yj5zhegBgYI27ZIQ4MkQfMa8z8aLxi/S8G+yx2P5Ti3hukH/RxHYR9g MsDE1d0l9ODDsenJpTLy0rh0ZO7PNw/cZTXMTyaHJ/p++4J5ZqsWH5fv0+XQNFF2 fAbQomgtIG3Q/TbxryitJz3Q4JP07LTCVS2JM3rFEfMxy3/kU6+XWW9jLH51p4Vc DyHvNQ+mWC4fiwDZNp2xBiuZJzv/o1I= -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:33 2025 by rpki-client