$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa File: 3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa (raw, json) Hash identifier: yrzi6f3DEGsA1/ng/CzZgkCujZwDzL6EupY6WQwgWMU= Subject key identifier: 08:56:DD:EF:88:79:81:42:7B:81:C2:3D:F4:8C:57:85:51:C5:27:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A18C79EB5BA48C45F20A01400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa Signing time: Fri 06 Jun 2025 02:42:22 +0000 ROA not before: Fri 06 Jun 2025 02:42:22 +0000 ROA not after: Thu 04 Sep 2025 02:42:22 +0000 asID: 15169 IP address blocks: 172.253.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:c7:9e:b5:ba:48:c4:5f:20:a0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 6 02:42:22 2025 GMT Not After : Sep 4 02:42:22 2025 GMT Subject: CN=c21bca66-54b8-4cd7-9a38-31304d9b5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:68:7a:aa:b5:34:49:c4:ad:c3:cb:c3:1a: 99:50:7c:93:04:75:b2:e6:24:1e:a7:25:ae:0f:1d: a8:9a:31:0a:c9:60:55:c1:5c:73:fe:20:ba:5d:9e: 67:b4:09:b8:5a:f4:92:45:c8:42:c0:d9:97:cc:72: b9:b2:01:d7:e2:98:87:1e:a4:a4:a2:6a:19:3d:13: bd:36:6b:a2:64:b7:f5:b5:a1:ef:29:c4:f7:82:d1: 9e:4f:a8:80:d2:01:e5:c3:dd:24:a0:24:55:cf:b5: 95:51:a6:28:04:95:75:a8:54:ba:5d:57:cf:d3:b4: 9f:ee:7f:b8:c3:5e:04:79:bb:41:da:c6:bd:68:64: 77:01:bc:fe:e8:04:65:90:5b:21:ad:3b:93:87:ff: 3f:08:d4:05:04:6d:80:43:35:26:67:af:05:72:df: ad:73:45:e1:fa:89:17:75:8a:c5:91:3b:9b:f8:53: 40:ba:51:74:33:9f:d9:ff:fe:61:55:a6:d5:67:38: cf:b0:6c:bb:da:5e:6c:0f:9e:ca:23:18:21:56:48: da:6a:df:72:d6:ab:ad:c1:c8:8c:e5:50:c2:8b:ab: 07:f4:8e:a2:a8:1b:8e:52:d5:7d:2f:f8:bf:47:cb: 50:e5:f7:90:21:24:df:f7:7c:21:68:f1:cf:db:7d: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:DD:EF:88:79:81:42:7B:81:C2:3D:F4:8C:57:85:51:C5:27:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:08:73:c6:aa:30:63:79:c5:a8:9a:af:46:e8:f5:4c:6f:ab: 23:f5:2f:fa:d4:84:cc:1e:1a:a8:a3:8f:99:65:d0:66:ed:55: 53:2e:09:e2:3f:57:44:b8:d2:d4:4a:52:99:f3:61:dc:f4:7e: dc:88:5e:cd:5d:37:1c:1e:44:f2:9e:cf:6a:db:5b:42:24:9e: 30:cf:7a:44:2e:ba:36:3d:a8:7b:32:f6:b7:46:3b:74:e3:e4: 53:52:23:b1:b1:38:13:59:7a:62:c4:83:3c:a7:9a:63:df:e7: 08:bb:28:d6:b7:37:de:3f:dc:3b:6b:8f:b5:b0:57:19:e1:7f: 90:4c:0c:8a:f5:3e:9b:4d:73:79:bb:ae:f5:f5:52:50:a8:aa: 60:4f:ef:e6:73:64:cc:d6:da:de:d5:fe:8d:e7:b5:9f:0c:59: 8f:39:da:2f:e2:0b:9e:37:6e:da:3f:2d:49:5a:24:a6:cd:f4: 15:3d:52:fd:52:e3:f0:b8:13:39:bf:09:f9:17:67:e4:59:99: 36:37:61:4c:52:25:6c:29:19:44:0d:fa:eb:ef:82:61:12:78: e5:96:41:9f:29:75:6a:cb:30:0e:86:8f:ab:39:f0:40:af:49: 2e:a6:1a:3f:de:e3:9d:f8:0f:09:dc:8a:9c:58:bc:9d:81:2d: e2:9a:21:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYx561ukjEXyCgFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYwNjAyNDIyMloXDTI1MDkwNDAyNDIyMlowLzEtMCsGA1UEAxMk YzIxYmNhNjYtNTRiOC00Y2Q3LTlhMzgtMzEzMDRkOWI1MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZoeqq1NEnErcPLwxqZUHyTBHWy5iQepyWu Dx2omjEKyWBVwVxz/iC6XZ5ntAm4WvSSRchCwNmXzHK5sgHX4piHHqSkomoZPRO9 NmuiZLf1taHvKcT3gtGeT6iA0gHlw90koCRVz7WVUaYoBJV1qFS6XVfP07Sf7n+4 w14EebtB2sa9aGR3Abz+6ARlkFshrTuTh/8/CNQFBG2AQzUmZ68Fct+tc0Xh+okX dYrFkTub+FNAulF0M5/Z//5hVabVZzjPsGy72l5sD57KIxghVkjaat9y1qutwciM 5VDCi6sH9I6iqBuOUtV9L/i/R8tQ5feQISTf93whaPHP2327swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhW3e+IeYFCe4HCPfSMV4VRxScZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2I5NTA5YzEtZDNjYy0z NzFjLWE5ZGEtNzllNGI4MThiOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIIc8aqMGN5xaiar0bo9UxvqyP1L/rUhMweGqijj5ll0GbtVVMuCeI/ V0S40tRKUpnzYdz0ftyIXs1dNxweRPKez2rbW0IknjDPekQuujY9qHsy9rdGO3Tj 5FNSI7GxOBNZemLEgzynmmPf5wi7KNa3N94/3Dtrj7WwVxnhf5BMDIr1PptNc3m7 rvX1UlCoqmBP7+ZzZMzW2t7V/o3ntZ8MWY852i/iC543bto/LUlaJKbN9BU9Uv1S 4/C4Ezm/CfkXZ+RZmTY3YUxSJWwpGUQN+uvvgmESeOWWQZ8pdWrLMA6Gj6s58ECv SS6mGj/e4534DwncipxYvJ2BLeKaIRs= -----END CERTIFICATE-----Generated at Sun Jun 15 13:53:38 2025 by rpki-client