$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa File: 1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa (raw, json) Hash identifier: RnMAzLdWweBasW+lKC2OpArzAgJiSy9ayox/Sp0pC1U= Subject key identifier: 24:4C:DF:F3:47:E8:0C:EE:9E:6D:34:C3:96:44:6B:ED:DC:19:CD:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118125562A23B37385C200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:81:25:56:2a:23:b3:73:85:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1d197ee8-18dc-472c-a61d-ca04f0c45ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fc:cb:99:bf:f5:4a:68:ed:d8:f6:4d:3b:df: b1:17:25:81:e8:b8:91:e9:c7:cc:c0:61:f3:2e:de: 17:db:b4:c1:97:16:fc:42:ad:4b:44:51:be:43:d7: eb:d2:db:22:1e:61:6e:2b:56:f5:c2:20:8c:9c:f7: 3d:88:8e:ab:52:d0:26:e6:f5:fc:ee:02:e2:50:fd: ea:e3:e5:bd:c6:c7:58:10:65:06:b6:35:d7:19:58: a4:08:6e:e8:46:02:7f:f6:82:ba:bc:12:f3:e3:8e: ec:bd:56:2d:6b:6f:5d:55:0b:f2:76:b8:e1:57:aa: 04:19:c9:e9:a1:72:70:4f:d5:6b:3c:ed:50:c9:90: d9:b4:1a:02:32:fe:32:eb:56:74:6e:11:5d:66:cc: bb:da:17:f1:26:3c:ce:74:db:dc:28:aa:04:43:17: b3:15:d3:ab:6b:58:6b:20:8f:1d:02:aa:23:13:d0: aa:7b:37:11:8a:df:fc:7f:3c:d2:55:72:e1:53:8a: 6d:c9:98:d1:cc:11:98:80:b9:ff:08:69:1c:2f:fd: d8:05:43:f8:b1:6c:73:e4:d2:47:a3:4e:ae:c9:05: 61:b7:9a:a1:31:69:18:95:ce:53:b2:5b:4c:fb:46: 3b:78:ab:d2:ec:20:be:8e:ea:0a:a4:c9:57:e5:ec: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:DF:F3:47:E8:0C:EE:9E:6D:34:C3:96:44:6B:ED:DC:19:CD:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b3:63:90:53:68:38:09:b7:30:f9:8b:ce:9f:3a:92:c0:55: f5:36:46:14:1e:be:80:52:b0:6f:cc:43:91:1a:e3:6a:9f:f3: 5b:78:69:3f:22:d3:c2:92:7e:81:5e:88:6b:eb:b1:5b:b1:df: 67:84:91:ec:78:1c:6b:2f:b2:ef:56:be:f5:d7:b7:33:15:e8: db:9d:78:d7:51:dc:02:c2:50:d9:21:70:4e:fc:4d:4d:3d:6a: 23:85:73:43:ad:b2:6b:9c:ef:10:3f:57:f3:62:4b:d9:a2:84: aa:06:74:6d:61:6e:10:8d:47:31:1b:25:20:92:41:07:fc:f8: 8a:28:f4:f2:46:56:0f:d8:58:63:89:d4:15:91:6e:ce:55:ab: 08:e0:25:7f:d9:06:79:f4:51:24:de:bb:11:8d:87:48:42:43: f5:13:25:a2:16:60:95:48:14:bb:6d:32:7f:b6:a5:fc:29:eb: b8:c0:40:4f:e8:59:18:4d:fc:f8:bf:ca:ab:9d:82:80:57:3c: 58:56:f4:19:c3:78:9d:90:1e:3b:4f:7c:4d:1e:52:7c:9c:e9: ad:5d:a1:e8:3e:1e:cd:f6:e5:48:12:bf:59:0d:fb:d6:e7:56: 4b:87:92:13:46:9b:18:bd:de:24:60:fc:34:9c:ea:4f:a2:70: 34:be:85:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYElViojs3OFwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWQxOTdlZTgtMThkYy00NzJjLWE2MWQtY2EwNGYwYzQ1YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPzLmb/1Smjt2PZNO9+xFyWB6LiR6cfMwGHz Lt4X27TBlxb8Qq1LRFG+Q9fr0tsiHmFuK1b1wiCMnPc9iI6rUtAm5vX87gLiUP3q 4+W9xsdYEGUGtjXXGVikCG7oRgJ/9oK6vBLz447svVYta29dVQvydrjhV6oEGcnp oXJwT9VrPO1QyZDZtBoCMv4y61Z0bhFdZsy72hfxJjzOdNvcKKoEQxezFdOra1hr II8dAqojE9CqezcRit/8fzzSVXLhU4ptyZjRzBGYgLn/CGkcL/3YBUP4sWxz5NJH o06uyQVht5qhMWkYlc5TsltM+0Y7eKvS7CC+juoKpMlX5exHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRM3/NH6Azunm00w5ZEa+3cGc2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWMyNDhhZmQtNjJjZi0z NmI1LThhYjYtNjViMjBjMGEwOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAizY5BTaDgJtzD5i86fOpLAVfU2RhQevoBSsG/MQ5Ea42qf81t4aT8i 08KSfoFeiGvrsVux32eEkex4HGsvsu9WvvXXtzMV6NudeNdR3ALCUNkhcE78TU09 aiOFc0Otsmuc7xA/V/NiS9mihKoGdG1hbhCNRzEbJSCSQQf8+Ioo9PJGVg/YWGOJ 1BWRbs5VqwjgJX/ZBnn0USTeuxGNh0hCQ/UTJaIWYJVIFLttMn+2pfwp67jAQE/o WRhN/Pi/yqudgoBXPFhW9BnDeJ2QHjtPfE0eUnyc6a1doeg+Hs325UgSv1kN+9bn VkuHkhNGmxi93iRg/DSc6k+icDS+hfI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:08 2025 by rpki-client