$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: gn2oMfxhqRPWpzqxj02qvXF6fM82/lgPN9IdPLI2d08= Subject key identifier: 11:71:0D:B6:E5:A7:60:C6:C4:82:45:31:26:2E:81:1B:D9:5B:BA:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841231D306FBF2EF6F2D7C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:31:d3:06:fb:f2:ef:6f:2d:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=89ea83f0-6a82-4c3e-bbb5-71c8fbc62754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:16:d4:26:02:c6:9f:44:51:53:ea:77:29: 3b:e6:6d:0c:f2:a4:3e:d7:96:75:8b:d8:f5:b0:40: c7:e8:9c:1e:2d:b0:d6:95:9a:fb:bd:72:e9:29:50: f3:5e:0d:53:dd:3f:a6:59:1d:d1:54:da:13:9f:ae: d9:e5:45:8a:01:ac:25:fe:66:fc:0a:8b:73:a4:d0: 98:01:95:90:45:09:fa:c9:36:40:9c:40:15:02:be: 65:17:c8:4a:61:d5:84:26:71:c9:89:57:cc:a8:d6: 4c:83:e0:07:dc:eb:4c:0b:48:ee:4c:c6:3a:d2:cd: 71:15:21:52:98:a4:ab:65:93:f2:30:51:f6:0c:aa: 17:dd:c0:d8:9b:a2:82:d3:b1:77:3a:e9:57:d9:a1: ae:cb:18:7f:8c:4e:25:d9:64:65:40:70:d1:76:42: 38:e1:ea:99:33:26:64:02:51:f4:47:b1:65:a4:2d: 11:4a:48:7e:56:72:9f:44:2a:0a:78:0f:59:c3:0b: e4:19:2f:98:e8:9b:77:bc:29:2d:6c:b9:35:b0:76: 9b:36:1d:d0:72:18:4b:b5:a9:f9:e5:23:08:b9:d1: 26:81:2b:2c:67:58:7e:fb:fb:13:69:ee:49:b1:fd: c0:87:52:6f:8b:85:44:37:32:55:17:13:63:76:06: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:0D:B6:E5:A7:60:C6:C4:82:45:31:26:2E:81:1B:D9:5B:BA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:4a:bd:6b:6b:25:8b:a2:a6:07:c3:d6:58:b7:c8:8a:9d:79: 4d:a2:d1:71:0a:00:06:10:3e:8c:9c:4e:d3:b2:31:7c:dc:f6: 4b:45:05:c1:0e:6a:09:21:31:a7:75:f4:66:4a:ee:30:f8:17: 46:5d:78:37:d3:71:2f:6e:42:10:2f:49:cc:0e:a1:4f:28:ef: 90:71:79:65:bd:42:00:89:ae:1c:85:4b:61:f2:3a:56:1d:0a: 58:93:ea:bf:aa:52:8e:54:a9:10:1a:18:0e:83:02:95:1d:fa: 21:35:cf:f4:9b:c2:f8:9f:d2:31:82:52:69:2c:8f:07:f2:a7: aa:cb:cd:72:27:72:33:54:80:a6:e6:43:12:0b:02:e7:53:44: c8:ee:24:44:e6:fb:cc:bd:53:d8:59:e6:e5:9e:7d:ef:15:9c: bd:5a:37:a8:3f:4d:30:cc:7c:e1:57:7c:5d:29:0b:8b:57:01: 6e:15:14:ff:b7:c3:d4:18:a7:fe:b1:08:aa:dc:e3:0c:59:12: 1d:30:5c:ff:a4:bb:ff:7a:10:0b:b7:c1:19:68:eb:b0:93:61: 3e:d6:ef:12:6b:46:5e:97:b5:f4:09:57:f7:26:15:cb:96:6b: aa:81:97:9d:c9:28:99:d9:44:0c:8d:f8:2b:63:ec:41:df:fc: b3:ab:85:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjHTBvvy728tfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODllYTgzZjAtNmE4Mi00YzNlLWJiYjUtNzFjOGZiYzYyNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIW1CYCxp9EUVPqdyk75m0M8qQ+15Z1i9j1 sEDH6JweLbDWlZr7vXLpKVDzXg1T3T+mWR3RVNoTn67Z5UWKAawl/mb8CotzpNCY AZWQRQn6yTZAnEAVAr5lF8hKYdWEJnHJiVfMqNZMg+AH3OtMC0juTMY60s1xFSFS mKSrZZPyMFH2DKoX3cDYm6KC07F3OulX2aGuyxh/jE4l2WRlQHDRdkI44eqZMyZk AlH0R7FlpC0RSkh+VnKfRCoKeA9ZwwvkGS+Y6Jt3vCktbLk1sHabNh3QchhLtan5 5SMIudEmgSssZ1h++/sTae5Jsf3Ah1Jvi4VENzJVFxNjdgYoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFxDbblp2DGxIJFMSYugRvZW7osMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVKvWtrJYuipgfD1li3yIqdeU2i0XEKAAYQPoycTtOyMXzc9ktFBcEO agkhMad19GZK7jD4F0ZdeDfTcS9uQhAvScwOoU8o75BxeWW9QgCJrhyFS2HyOlYd CliT6r+qUo5UqRAaGA6DApUd+iE1z/Sbwvif0jGCUmksjwfyp6rLzXIncjNUgKbm QxILAudTRMjuJETm+8y9U9hZ5uWefe8VnL1aN6g/TTDMfOFXfF0pC4tXAW4VFP+3 w9QYp/6xCKrc4wxZEh0wXP+ku/96EAu3wRlo67CTYT7W7xJrRl6XtfQJV/cmFcuW a6qBl53JKJnZRAyN+Ctj7EHf/LOrhSs= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:18 2025 by rpki-client