$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa File: 1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa (raw, json) Hash identifier: GN9bBMdCb2d/XsGZ0pcANhVC3TT+GGsuwfh/9i5j7S4= Subject key identifier: 6C:94:2A:7D:DE:A4:D6:A4:D9:03:FB:56:BA:EA:1D:1C:5A:68:71:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F1ECCDC1AD34A5C12200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f1:ec:cd:c1:ad:34:a5:c1:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=f518dca7-7b82-46de-9598-955fc6518059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:a4:c4:9e:91:c9:14:8a:43:74:53:36:3a: e4:ad:c7:71:89:27:52:b7:91:93:8f:df:77:d7:ea: f6:a1:81:8d:ae:7b:17:20:07:60:8d:20:bc:74:55: 90:d6:c1:d4:76:fb:14:9a:a1:41:a4:dd:86:f3:c5: 44:a1:12:ac:4f:11:da:a8:d6:b0:b5:b0:09:72:a9: 8d:35:ac:39:3b:4e:ed:9d:c4:b9:dd:c0:b8:41:e6: 15:6d:a4:f4:1b:27:72:7e:b4:c9:45:3a:ea:64:6f: 3b:54:a4:dd:8d:ab:28:18:e5:da:54:55:10:31:ae: 72:ad:50:96:9a:54:10:cd:a2:b3:e4:b4:b6:80:e7: ce:dc:64:a9:ca:04:2a:d6:e0:35:f2:3e:55:92:0c: 7b:28:00:67:71:53:6b:61:06:cc:4f:f1:db:9e:d0: ec:15:3d:d5:90:59:f2:f2:38:9e:57:e8:2f:22:57: b5:1f:17:d1:7f:37:0b:90:bc:5c:ae:1c:d0:d8:ba: 5a:f5:ca:f9:53:a4:5c:62:d4:58:40:3c:00:c0:22: 2f:3f:01:1b:88:41:74:02:9e:ad:ff:a1:e3:91:e3: 59:85:9f:1c:df:18:40:6d:3c:08:15:b6:5a:4e:43: 35:c5:7d:cc:65:20:71:be:ff:9f:17:f9:2f:f7:aa: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:94:2A:7D:DE:A4:D6:A4:D9:03:FB:56:BA:EA:1D:1C:5A:68:71:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:7d:af:5d:13:f6:9d:a0:7a:8f:7e:71:71:a7:89:c4:0f: ec:2e:0c:1e:83:b1:c1:88:8e:d9:97:2d:b5:e0:1d:a5:59:ca: a8:98:ff:f8:70:16:11:d9:90:69:26:28:c5:22:b4:2d:12:e7: 4e:fd:7d:bb:e3:8b:71:b5:a1:c6:84:4d:74:dc:3a:ee:f4:60: 3b:c7:c3:16:0f:7c:7c:cd:ed:d0:2c:e3:22:db:e0:d5:b4:36: 2d:47:e8:40:e9:4f:54:03:9f:74:4a:60:a9:ce:59:2f:3c:05: f4:b6:55:58:29:59:80:fe:ae:10:78:b4:a6:de:67:64:ac:63: 42:cb:ca:4f:5a:71:64:4c:21:e5:f2:85:e3:95:79:45:cd:9e: 55:74:02:fd:c5:13:fb:b0:d8:4f:88:5e:2a:0b:09:c1:8c:7c: 1b:eb:82:e1:3b:e6:ae:bd:d6:9f:22:7e:82:08:07:75:9f:cd: ea:c2:43:27:0d:1e:0c:0c:15:ba:98:ad:fd:28:62:27:4d:38: 0a:27:7f:2a:9b:4a:16:39:88:1a:5c:f2:32:76:1c:58:b4:57: 0c:e4:cb:4c:2d:74:82:1a:95:31:5b:02:06:3c:a9:1f:f5:7d: 50:f3:b7:01:37:11:96:d8:74:31:ec:52:ce:60:12:44:cd:a3: 63:fd:6c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPHszcGtNKXBIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZjUxOGRjYTctN2I4Mi00NmRlLTk1OTgtOTU1ZmM2NTE4MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHakxJ6RyRSKQ3RTNjrkrcdxiSdSt5GTj993 1+r2oYGNrnsXIAdgjSC8dFWQ1sHUdvsUmqFBpN2G88VEoRKsTxHaqNawtbAJcqmN Naw5O07tncS53cC4QeYVbaT0GydyfrTJRTrqZG87VKTdjasoGOXaVFUQMa5yrVCW mlQQzaKz5LS2gOfO3GSpygQq1uA18j5Vkgx7KABncVNrYQbMT/HbntDsFT3VkFny 8jieV+gvIle1HxfRfzcLkLxcrhzQ2Lpa9cr5U6RcYtRYQDwAwCIvPwEbiEF0Ap6t /6HjkeNZhZ8c3xhAbTwIFbZaTkM1xX3MZSBxvv+fF/kv96qS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyUKn3epNak2QP7VrrqHRxaaHEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZmZTEwMDgtNTZiMy0z ZDk1LWIzZWEtZTc5ZGUxNDBhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQzfa9dE/adoHqPfnFxp4nED+wuDB6DscGIjtmXLbXgHaVZyqiY//hw FhHZkGkmKMUitC0S5079fbvji3G1ocaETXTcOu70YDvHwxYPfHzN7dAs4yLb4NW0 Ni1H6EDpT1QDn3RKYKnOWS88BfS2VVgpWYD+rhB4tKbeZ2SsY0LLyk9acWRMIeXy heOVeUXNnlV0Av3FE/uw2E+IXioLCcGMfBvrguE75q691p8ifoIIB3WfzerCQycN HgwMFbqYrf0oYidNOAonfyqbShY5iBpc8jJ2HFi0Vwzky0wtdIIalTFbAgY8qR/1 fVDztwE3EZbYdDHsUs5gEkTNo2P9bN8= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:39 2025 by rpki-client