$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa File: 12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa (raw, json) Hash identifier: 2pYL0J/+SYox2vUO5Zf3R0TFikV7bWYzWYLXKdCyDcM= Subject key identifier: 76:77:DB:5D:DB:F2:FF:07:DD:B4:5A:BF:32:8C:93:C2:A5:C6:C3:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A1E2A990444C89C3BEAE43980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 15169 IP address blocks: 172.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:99:04:44:c8:9c:3b:ea:e4:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=9443c7fc-7246-4c75-8c58-e365693c3398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:2b:4c:6d:28:ef:7b:8d:c1:2e:fa:b7:c1: b6:dd:ab:45:7e:02:4d:91:69:d6:cb:c2:96:59:f1: c6:4d:3e:eb:ec:a3:94:95:6a:c6:d2:f9:4f:c3:5d: ec:bf:89:7b:e7:c6:b6:9f:87:dd:3c:de:6f:6d:5e: df:28:1d:17:0d:ea:68:e2:2e:d8:4c:ef:1c:29:b9: ff:19:c4:ed:b0:57:05:ea:bc:13:1b:d5:50:f0:17: e0:bc:48:92:aa:4d:6b:aa:dd:c5:a7:3f:24:b6:ba: ee:aa:83:ac:86:14:53:41:be:66:95:bb:24:ae:e7: 13:16:fa:c6:de:8b:d2:82:67:f6:98:b2:d7:d1:0d: 0f:bf:5a:2b:2a:2e:69:7e:f0:39:4c:68:c7:7f:34: 8d:34:ff:8e:8a:ce:9f:85:b7:56:52:4b:14:1e:b6: 91:8e:64:a5:f7:4a:1a:db:00:9c:b2:e1:84:25:fc: 00:e5:4e:bf:02:f4:2a:a1:77:4a:1e:b3:9a:77:e8: a2:ae:5b:a4:e4:35:b3:61:4d:7b:9d:ab:d1:9f:64: 35:06:4f:7d:30:39:cd:c0:5f:73:4a:f6:98:1b:19: 27:8b:3b:f7:04:c1:77:0a:f5:88:4d:78:ee:cf:ba: 9c:2c:7e:05:85:61:5b:c2:e6:6c:34:04:26:36:10: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:DB:5D:DB:F2:FF:07:DD:B4:5A:BF:32:8C:93:C2:A5:C6:C3:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2e:02:90:ac:da:19:b1:34:48:c8:dd:3d:41:b3:75:06:13: bb:52:c4:95:b7:7e:4d:8f:f7:60:3c:79:7b:3e:5f:f0:4e:2f: d4:c5:b2:f2:84:1d:c6:cd:9b:71:85:6a:f3:63:90:81:15:3c: 0a:b5:ab:8f:f7:11:b1:e8:61:26:23:f6:4b:a0:1a:8c:ef:02: a0:59:ae:77:a0:3a:af:83:66:81:d7:4b:94:44:07:e5:4d:bb: 30:d1:59:94:ba:aa:32:51:3d:e9:4a:55:ac:2e:96:3b:7a:43: 36:45:f7:ca:58:6d:db:ff:4e:c0:96:e9:30:99:33:69:32:b2: c7:cc:dd:59:83:9b:fa:60:d2:c6:ff:2b:4d:09:65:15:1e:fb: 32:b4:2a:17:23:a2:2b:40:7c:f4:4c:22:bf:5f:da:af:d7:71: 23:c2:11:47:73:24:d0:2d:c2:32:76:40:d2:ab:07:b7:d7:52: 32:c7:eb:70:4c:cc:5b:35:83:90:5c:18:9b:c8:8c:69:17:10: bf:08:6a:5d:c6:0d:89:08:4f:b3:0a:29:fd:fc:25:e2:da:5b: 83:94:6d:1f:88:7e:ff:e6:08:5b:9c:fa:38:6d:27:dd:5c:af: 11:dd:a0:d0:12:3f:48:be:a7:76:93:9d:5d:f6:5e:24:f4:2d: 9c:7a:a1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKpkERMicO+rkOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk OTQ0M2M3ZmMtNzI0Ni00Yzc1LThjNTgtZTM2NTY5M2MzMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN0rTG0o73uNwS76t8G23atFfgJNkWnWy8KW WfHGTT7r7KOUlWrG0vlPw13sv4l758a2n4fdPN5vbV7fKB0XDepo4i7YTO8cKbn/ GcTtsFcF6rwTG9VQ8BfgvEiSqk1rqt3Fpz8ktrruqoOshhRTQb5mlbskrucTFvrG 3ovSgmf2mLLX0Q0Pv1orKi5pfvA5TGjHfzSNNP+Ois6fhbdWUksUHraRjmSl90oa 2wCcsuGEJfwA5U6/AvQqoXdKHrOad+iirluk5DWzYU17navRn2Q1Bk99MDnNwF9z SvaYGxknizv3BMF3CvWITXjuz7qcLH4FhWFbwuZsNAQmNhAdnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ3213b8v8H3bRavzKMk8KlxsMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJkNjQwMGMtNGVmMC0z ZTk2LThlYWEtNzFmNTBmMjY2YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMuApCs2hmxNEjI3T1Bs3UGE7tSxJW3fk2P92A8eXs+X/BOL9TFsvKE HcbNm3GFavNjkIEVPAq1q4/3EbHoYSYj9kugGozvAqBZrnegOq+DZoHXS5REB+VN uzDRWZS6qjJRPelKVawuljt6QzZF98pYbdv/TsCW6TCZM2kyssfM3VmDm/pg0sb/ K00JZRUe+zK0KhcjoitAfPRMIr9f2q/XcSPCEUdzJNAtwjJ2QNKrB7fXUjLH63BM zFs1g5BcGJvIjGkXEL8Ial3GDYkIT7MKKf38JeLaW4OUbR+Ifv/mCFuc+jhtJ91c rxHdoNASP0i+p3aTnV32XiT0LZx6of4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:03:06 2025 by rpki-client