$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json) Hash identifier: 0KXkkU5DuVj83hrhIs+KZBT6CVvHi0H6GdSkJhf1p6I= Subject key identifier: 2D:56:D2:3D:04:51:AC:02:45:97:A6:41:C2:47:38:70:2F:C4:3C:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123717C2E1A82690640E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 172.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:17:c2:e1:a8:26:90:64:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=71e51b02-c48b-44d9-9f9e-9679caac65a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:0d:d9:33:92:a1:11:c5:f6:09:ff:5f:04: 49:05:76:b0:0b:22:ce:86:6e:0a:69:cf:fa:f5:49: f9:65:2d:0c:18:bd:7b:54:41:8c:28:19:52:f3:c7: 4f:ee:7f:08:72:e7:47:8e:4b:fd:58:07:e4:b6:6b: a6:98:bd:92:a0:82:a4:74:bf:cc:86:51:0a:eb:e9: 3c:48:c0:67:7b:0f:a6:90:b7:68:14:5c:45:04:d7: ae:59:1f:a4:3f:05:28:0a:1a:7e:f2:e0:9a:5a:52: 5c:02:73:fb:ef:2b:5f:51:7e:a8:cf:29:91:95:49: e5:56:95:7a:02:f8:dc:47:3b:b7:fa:21:31:27:3e: d3:65:02:9a:c1:bb:78:d9:23:58:d4:03:21:58:af: 9e:3c:ed:6d:dc:de:34:4c:04:75:6a:dc:d4:c4:29: 49:5c:48:50:c1:9a:37:32:c7:5b:2d:4e:cb:52:5d: d1:07:eb:63:5d:10:82:ac:90:22:4e:26:35:0b:af: 6f:e2:2e:15:bb:37:8f:5e:58:ea:36:2a:ea:10:a8: ef:11:c2:b9:0b:b8:94:7d:00:a3:21:d0:7c:6a:3e: a1:cd:06:2b:65:3e:cc:33:61:d1:60:f4:fe:2b:48: 70:48:a2:e5:c0:e8:c3:04:f2:37:7d:b2:a4:60:b7: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:56:D2:3D:04:51:AC:02:45:97:A6:41:C2:47:38:70:2F:C4:3C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fd:28:5f:56:51:26:4f:47:db:7c:dc:28:8b:4f:63:34:3e: 68:ed:52:b3:16:a8:d3:75:b6:1a:d9:b8:1e:1d:2c:89:36:f9: 6e:4d:75:30:f6:0a:d8:e3:a5:07:6b:4a:59:d3:f5:8e:8b:30: 4f:0c:bf:5a:fb:d3:99:20:c8:e0:6c:ce:96:96:5d:21:8d:45: 75:90:86:21:91:2c:28:6d:74:dd:bc:c8:52:1e:2b:7d:ec:51: 2d:1a:ba:d0:7c:57:e6:07:59:0b:0b:f3:e4:1e:fb:78:28:22: 2b:47:b2:5d:f2:67:07:e2:4d:24:d1:38:b3:dc:ad:e4:e2:ee: 87:ab:c1:ca:0d:9d:7f:4e:f7:64:99:db:55:d4:82:a7:90:a0: 02:2b:e4:f1:67:ce:d4:da:9c:3d:a2:0a:6e:fc:2d:3f:80:68: 47:20:1f:9b:58:02:ff:91:8f:5b:25:59:9d:12:6c:f9:ff:32: c4:d4:55:5f:a6:f0:16:76:99:56:69:61:c6:50:fe:9e:a4:74: 27:59:33:f3:9a:89:76:b0:81:da:eb:6e:81:b2:16:0e:86:fb: 02:32:4f:97:06:17:5a:fa:0f:af:7d:d3:bc:fa:e9:13:8b:55: 94:cf:1e:e7:9a:b4:36:0a:00:f8:f4:12:5c:ca:40:69:30:9d: c8:ea:5b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjcXwuGoJpBkDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzFlNTFiMDItYzQ4Yi00NGQ5LTlmOWUtOTY3OWNhYWM2NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1cN2TOSoRHF9gn/XwRJBXawCyLOhm4Kac/6 9Un5ZS0MGL17VEGMKBlS88dP7n8IcudHjkv9WAfktmummL2SoIKkdL/MhlEK6+k8 SMBnew+mkLdoFFxFBNeuWR+kPwUoChp+8uCaWlJcAnP77ytfUX6ozymRlUnlVpV6 AvjcRzu3+iExJz7TZQKawbt42SNY1AMhWK+ePO1t3N40TAR1atzUxClJXEhQwZo3 MsdbLU7LUl3RB+tjXRCCrJAiTiY1C69v4i4VuzePXljqNirqEKjvEcK5C7iUfQCj IdB8aj6hzQYrZT7MM2HRYPT+K0hwSKLlwOjDBPI3fbKkYLdkfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1W0j0EUawCRZemQcJHOHAvxDwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQ5ZDNjMTQtMzczNi0z M2E0LThkZWYtNmM0ZWIyZTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB79KF9WUSZPR9t83CiLT2M0PmjtUrMWqNN1thrZuB4dLIk2+W5NdTD2 CtjjpQdrSlnT9Y6LME8Mv1r705kgyOBszpaWXSGNRXWQhiGRLChtdN28yFIeK33s US0autB8V+YHWQsL8+Qe+3goIitHsl3yZwfiTSTROLPcreTi7oerwcoNnX9O92SZ 21XUgqeQoAIr5PFnztTanD2iCm78LT+AaEcgH5tYAv+Rj1slWZ0SbPn/MsTUVV+m 8BZ2mVZpYcZQ/p6kdCdZM/OaiXawgdrrboGyFg6G+wIyT5cGF1r6D69907z66ROL VZTPHueatDYKAPj0ElzKQGkwncjqW1A= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:47 2025 by rpki-client