$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa File: 2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json) Hash identifier: 5eDjPgM/kNQZNK7f+uapoX+D8Iwsj+ggmG2eXcbML8w= Subject key identifier: 4B:FE:26:E5:E9:1F:94:B3:6A:A0:D1:E4:AA:3D:86:CF:00:31:5D:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122840B8855B8737627B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:28:40:b8:85:5b:87:37:62:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f2b3909a-c881-4120-95a7-a0a73d2295d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:4a:fc:2e:44:10:cb:0a:31:cb:4f:75:0b: c5:d1:95:99:4c:db:c9:3f:6c:74:82:19:8c:6a:d4: cd:80:e9:21:3c:d9:c2:bf:2a:bd:d7:03:a7:35:8c: 5b:a3:cb:b4:35:df:65:89:84:ae:f7:09:e5:5f:ff: c0:8a:f9:0e:7a:73:d3:52:e4:4e:32:e0:79:65:7a: 25:1f:42:39:4e:98:fb:bb:1c:46:58:c6:8c:9e:4a: 83:df:59:78:3f:e3:32:e9:55:e8:68:2a:03:61:94: ba:a8:dd:eb:8d:12:c9:64:a4:11:8d:48:ab:6b:38: 35:40:21:61:e4:99:6e:75:35:f4:81:bc:7b:93:cf: fa:90:d7:a6:ef:6f:10:ab:dc:8c:fc:23:a6:72:b3: 57:b1:fc:2c:02:ba:99:66:c8:60:96:03:90:82:b2: 3a:34:f2:3e:ad:e0:63:00:b4:4a:33:57:c3:ee:88: 8e:67:46:65:91:03:f0:3f:2e:9f:68:74:12:55:da: 25:65:67:28:2e:20:76:aa:90:43:5c:4c:22:67:57: 58:a1:c9:f2:69:56:86:49:e3:94:28:8e:ad:03:91: 9d:8b:f7:0b:c7:60:ae:01:a5:b7:7c:33:e7:ec:9f: ed:d5:2d:9a:87:e0:5a:b8:30:e2:a1:50:4a:86:3d: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:26:E5:E9:1F:94:B3:6A:A0:D1:E4:AA:3D:86:CF:00:31:5D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:81:f8:21:3c:f6:ee:35:90:c8:de:ba:80:48:d0:09:70:8f: ea:45:99:bc:bb:2f:6f:7b:7e:cb:54:e6:e4:70:e9:d4:a6:2d: e1:9a:97:c3:b5:b0:f3:47:d0:35:04:9d:a3:0a:64:aa:35:2d: bc:9d:fd:23:30:5f:6c:81:14:5a:a2:75:6d:cf:64:25:ea:88: 16:cd:29:d1:2e:58:c9:cd:d4:06:b8:fa:c6:f2:37:c4:30:d2: 0a:53:f4:64:c9:fb:3d:02:32:0f:2b:22:f1:d5:59:b0:3d:e0: be:9e:d7:9f:50:f3:44:80:73:51:0b:ed:a5:02:09:ff:fa:ff: 72:36:a0:d7:29:3a:57:16:5f:a5:0c:5e:38:e6:75:a9:3a:16: 77:7a:cb:f1:99:c5:bc:b2:1b:e7:f5:d7:af:a0:34:21:60:1e: c5:61:57:35:93:8e:d7:26:bb:60:74:f4:23:3c:e6:fd:57:75: 40:91:da:ca:68:ef:19:45:da:1f:19:7f:20:38:17:23:40:59: 4c:9c:80:6f:ef:45:fb:38:e1:a5:6f:6e:2e:d5:d4:5b:77:03: c0:d3:f3:98:37:61:27:f0:8e:a5:1e:ab:f6:74:9f:dd:33:5f: 7f:94:43:1d:4a:f4:6e:b3:a1:25:15:24:51:63:8b:ec:b4:c5: 79:84:a4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEihAuIVbhzdiewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjJiMzkwOWEtYzg4MS00MTIwLTk1YTctYTBhNzNkMjI5NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjhK/C5EEMsKMctPdQvF0ZWZTNvJP2x0ghmM atTNgOkhPNnCvyq91wOnNYxbo8u0Nd9liYSu9wnlX//AivkOenPTUuROMuB5ZXol H0I5Tpj7uxxGWMaMnkqD31l4P+My6VXoaCoDYZS6qN3rjRLJZKQRjUirazg1QCFh 5JludTX0gbx7k8/6kNem728Qq9yM/COmcrNXsfwsArqZZshglgOQgrI6NPI+reBj ALRKM1fD7oiOZ0ZlkQPwPy6faHQSVdolZWcoLiB2qpBDXEwiZ1dYocnyaVaGSeOU KI6tA5Gdi/cLx2CuAaW3fDPn7J/t1S2ah+BauDDioVBKhj1lPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv+JuXpH5SzaqDR5Ko9hs8AMV3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MmE5NTEtMDU4Yi0z YjdiLTg5YjYtMDEwNzg2YzE2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaB+CE89u41kMjeuoBI0Alwj+pFmby7L297fstU5uRw6dSmLeGal8O1 sPNH0DUEnaMKZKo1Lbyd/SMwX2yBFFqidW3PZCXqiBbNKdEuWMnN1Aa4+sbyN8Qw 0gpT9GTJ+z0CMg8rIvHVWbA94L6e159Q80SAc1EL7aUCCf/6/3I2oNcpOlcWX6UM Xjjmdak6Fnd6y/GZxbyyG+f116+gNCFgHsVhVzWTjtcmu2B09CM85v1XdUCR2spo 7xlF2h8ZfyA4FyNAWUycgG/vRfs44aVvbi7V1Ft3A8DT85g3YSfwjqUeq/Z0n90z X3+UQx1K9G6zoSUVJFFji+y0xXmEpA0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:51 2025 by rpki-client