$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: kSlue5zr4bH4P5JBcSKefnD8f5AMkWAv0tN27sbs6i4= Subject key identifier: 17:8C:63:63:A1:E4:85:41:9E:DE:34:4A:D6:FC:4C:3B:65:DB:90:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6E507BE1E61622229E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6e:50:7b:e1:e6:16:22:22:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=617db622-a985-4c4c-a112-1b8ed64b091c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:ec:52:fa:f4:95:fc:34:bf:6f:f9:e6:c3: d1:38:ef:f4:a6:bf:c0:33:b7:b0:62:13:12:48:1f: 09:42:7f:c8:7e:8d:25:5f:35:5e:cf:75:00:19:7e: b8:aa:fd:07:58:84:7a:d7:ec:01:89:4c:03:db:4d: 36:b4:6a:64:4d:83:91:5c:f7:7d:ec:a6:52:c9:f5: c0:a8:ae:5a:da:d6:52:14:c7:3a:1a:66:e3:54:8c: a4:45:5f:a8:7b:42:7f:c5:0b:8c:99:63:25:7f:95: 08:c9:c1:f1:d4:e8:08:48:ff:0a:4a:c9:64:36:4c: 46:75:42:f2:8c:39:15:5c:98:40:b2:04:30:d0:c9: 74:3a:0d:8f:99:95:5b:0f:cc:1a:1d:2a:41:21:6b: 7c:de:6a:92:1e:b6:35:61:2e:2f:37:92:32:af:0e: ff:43:8c:29:34:9d:90:23:38:bd:e4:31:a4:61:5e: aa:a6:95:bf:b5:22:75:77:f0:80:28:4e:27:a4:07: 52:13:44:0d:d9:f4:3c:52:17:e7:05:40:0d:64:98: 2f:d1:e9:5c:c9:a0:e5:0f:42:a8:d3:8f:d2:24:07: 76:8b:1a:23:47:72:05:db:7a:0b:2c:11:1d:3d:81: e1:a1:1c:56:dd:c8:86:fa:7e:10:7b:2d:a5:43:75: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:63:63:A1:E4:85:41:9E:DE:34:4A:D6:FC:4C:3B:65:DB:90:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ed:0f:5c:bf:d2:ea:77:ce:51:36:a7:6e:4d:99:d9:da:97: 83:b1:88:50:3f:41:f5:94:3f:ed:e4:f3:99:05:76:81:1c:35: 1a:2a:ad:20:99:82:64:b4:d3:35:cf:87:c7:f6:9d:e2:1e:b6: 99:c9:f3:ca:11:8a:2d:1d:2b:d7:32:ca:c8:c4:64:83:ad:fc: 69:42:19:85:0e:0c:2c:dd:9a:c2:cb:83:0e:d1:a1:72:2c:c1: 8c:ce:27:91:e5:ba:b1:cc:81:8f:36:88:58:eb:a8:a8:90:45: 94:15:a2:de:fd:13:29:d0:af:31:53:a2:24:a5:5a:b1:b3:ab: b3:bd:7e:62:76:93:f9:f7:0e:01:5e:1e:b5:9e:c4:7f:ba:9c: 89:a3:f2:d8:37:fe:04:d0:6b:fc:b6:95:54:b5:42:e4:e0:05: 35:89:97:6a:76:15:81:a1:7e:97:08:ce:a0:b7:bb:8a:55:a1: bf:25:b2:78:dd:15:4f:c2:3f:1d:43:c8:84:93:79:e6:18:12: a3:2c:7d:2e:6b:cd:54:9f:fa:b0:73:c3:3a:b8:68:8d:f2:e4: 81:f5:b8:42:b4:5b:a6:4f:bf:48:eb:55:87:cf:7f:eb:a0:87: b8:f2:a2:4e:e5:5f:1b:7e:04:dc:9e:d0:22:77:23:7c:0d:36: 5d:85:5c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku25Qe+HmFiIinoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjE3ZGI2MjItYTk4NS00YzRjLWExMTItMWI4ZWQ2NGIwOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHsUvr0lfw0v2/55sPROO/0pr/AM7ewYhMS SB8JQn/Ifo0lXzVez3UAGX64qv0HWIR61+wBiUwD2002tGpkTYORXPd97KZSyfXA qK5a2tZSFMc6GmbjVIykRV+oe0J/xQuMmWMlf5UIycHx1OgISP8KSslkNkxGdULy jDkVXJhAsgQw0Ml0Og2PmZVbD8waHSpBIWt83mqSHrY1YS4vN5Iyrw7/Q4wpNJ2Q Izi95DGkYV6qppW/tSJ1d/CAKE4npAdSE0QN2fQ8UhfnBUANZJgv0elcyaDlD0Ko 04/SJAd2ixojR3IF23oLLBEdPYHhoRxW3ciG+n4Qey2lQ3VBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeMY2Oh5IVBnt40Stb8TDtl25AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLtD1y/0up3zlE2p25Nmdnal4OxiFA/QfWUP+3k85kFdoEcNRoqrSCZ gmS00zXPh8f2neIetpnJ88oRii0dK9cyysjEZIOt/GlCGYUODCzdmsLLgw7RoXIs wYzOJ5HlurHMgY82iFjrqKiQRZQVot79EynQrzFToiSlWrGzq7O9fmJ2k/n3DgFe HrWexH+6nImj8tg3/gTQa/y2lVS1QuTgBTWJl2p2FYGhfpcIzqC3u4pVob8lsnjd FU/CPx1DyISTeeYYEqMsfS5rzVSf+rBzwzq4aI3y5IH1uEK0W6ZPv0jrVYfPf+ug h7jyok7lXxt+BNye0CJ3I3wNNl2FXLc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:13 2025 by rpki-client