$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json) Hash identifier: ub/SumlFZplH2iJLM1y79tF40Hk5KIbf7dATp1mrzUA= Subject key identifier: ED:99:B1:1F:58:DD:8D:D0:C6:6E:B3:CB:9D:0E:3F:C5:A0:40:A1:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACA505D3E03D63ABA0580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ca:50:5d:3e:03:d6:3a:ba:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d76935cc-573d-4563-8a06-9415c39f2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:2b:9f:59:11:23:d8:6a:c8:4a:e4:59:b0: c3:9f:23:69:36:21:2b:8b:f2:80:30:34:df:54:88: 8b:fb:6c:d9:b8:62:cb:fd:a0:5c:87:28:cf:a6:f3: 66:e2:36:bc:78:98:55:f8:74:2e:4c:ab:eb:f7:f3: 2d:0d:fd:df:01:30:44:bf:86:eb:4c:df:6e:c6:93: 31:c2:94:f0:b4:81:48:9c:31:bf:10:7f:f5:b5:41: de:4b:f4:4d:ef:81:cb:6a:1b:a3:13:8e:36:3f:58: db:6d:23:36:27:e9:c2:a8:95:d4:d7:ef:f0:fc:90: 91:61:57:12:2e:76:c7:d5:35:35:13:af:0e:79:63: e0:bf:89:6d:b7:0a:e8:a3:7a:d4:dd:86:f8:4d:36: 0a:56:8a:bc:d2:fb:42:b8:5b:a6:3a:52:ba:5c:77: d7:0b:c3:5c:a9:eb:84:33:b9:fa:3c:a4:42:cf:3b: 4f:cc:6e:9c:af:09:8f:de:53:ba:60:ce:25:fa:f1: 6c:04:61:a3:fd:0b:4b:57:fc:6a:f7:eb:37:a1:05: c7:4a:37:74:ef:c1:11:0d:18:b2:73:79:33:28:7c: c8:ed:e4:20:0a:69:34:a6:fc:ee:d0:cc:dd:bf:c8: 1d:bb:da:e1:64:d0:9f:5d:0b:22:ba:65:cc:17:4e: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:99:B1:1F:58:DD:8D:D0:C6:6E:B3:CB:9D:0E:3F:C5:A0:40:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:56:8e:55:32:31:ab:65:2c:5c:28:47:99:af:92:b6:4e:4e: e3:e9:ea:09:8b:59:05:62:c8:c3:6d:b5:45:ed:58:06:b9:94: 93:de:ad:f6:61:08:30:71:b7:53:20:b5:89:21:bc:db:99:ca: 0d:ea:7c:3a:91:e4:f1:06:85:6b:93:7b:9d:78:6e:0d:85:3a: ca:df:60:92:e0:1d:5b:d7:80:2e:8d:2a:c2:1f:ed:fa:63:89: ea:25:b9:07:a2:28:cb:77:bb:5c:c8:dd:44:ac:96:e8:89:70: 66:a4:00:e0:f6:d7:8d:3a:4a:31:af:84:d9:0d:57:9e:b6:42: b6:a6:4b:af:ef:20:37:e7:4a:c4:02:25:3e:c2:78:cc:bc:9c: 95:9c:36:ba:f4:34:f6:58:70:bc:1d:33:fc:6c:fa:e9:48:d9: 55:35:05:96:ae:b9:f4:79:48:45:36:7f:cd:eb:bc:33:a1:32: 6a:98:b4:05:e3:6b:10:04:46:f1:24:a4:dd:de:c9:c7:53:80: 40:da:62:66:69:d2:d1:d4:42:b8:94:23:8d:ab:67:5c:27:41: 14:2a:d4:26:2c:e7:1b:91:d2:5c:ea:bb:38:f2:93:8a:0d:0f: 05:a1:d6:a1:a8:7c:45:24:8e:cf:f0:49:43:93:88:ff:20:25: 8b:84:0c:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmkuspQXT4D1jq6BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDc2OTM1Y2MtNTczZC00NTYzLThhMDYtOTQxNWMzOWYyYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm94rn1kRI9hqyErkWbDDnyNpNiEri/KAMDTf VIiL+2zZuGLL/aBchyjPpvNm4ja8eJhV+HQuTKvr9/MtDf3fATBEv4brTN9uxpMx wpTwtIFInDG/EH/1tUHeS/RN74HLahujE442P1jbbSM2J+nCqJXU1+/w/JCRYVcS LnbH1TU1E68OeWPgv4lttwroo3rU3Yb4TTYKVoq80vtCuFumOlK6XHfXC8NcqeuE M7n6PKRCzztPzG6crwmP3lO6YM4l+vFsBGGj/QtLV/xq9+s3oQXHSjd078ERDRiy c3kzKHzI7eQgCmk0pvzu0Mzdv8gdu9rhZNCfXQsiumXMF04xZwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO2ZsR9Y3Y3Qxm6zy50OP8WgQKEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFjNzQ2ODItZTI2MC0z OTdkLTgyNjctM2E0ZGMwZThmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArP0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQFaOVTIxq2UsXChHma+Stk5O4+nqCYtZBWLIw221Re1YBrmUk96t9mEI MHG3UyC1iSG825nKDep8OpHk8QaFa5N7nXhuDYU6yt9gkuAdW9eALo0qwh/t+mOJ 6iW5B6Ioy3e7XMjdRKyW6IlwZqQA4PbXjTpKMa+E2Q1XnrZCtqZLr+8gN+dKxAIl PsJ4zLyclZw2uvQ09lhwvB0z/Gz66UjZVTUFlq659HlIRTZ/zeu8M6Eyapi0BeNr EARG8SSk3d7Jx1OAQNpiZmnS0dRCuJQjjatnXCdBFCrUJiznG5HSXOq7OPKTig0P BaHWoah8RSSOz/BJQ5OI/yAli4QMIQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:16 2025 by rpki-client