$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa File: 5a84109a-e093-3cc4-b314-e82aef89a710.roa (raw, json) Hash identifier: AXBSEVDylemqJSAGdL+DaGaRMut+uZiVXukq1AJU1E4= Subject key identifier: 1D:4C:4D:8F:3C:1D:E1:A6:95:30:67:8D:C7:33:19:E6:26:AE:B9:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB693F3D8B0A428B7C0F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:69:3f:3d:8b:0a:42:8b:7c:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=91a73576-db76-4bae-b704-c15ee8a0fa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:53:86:e5:2c:ee:38:20:20:87:c9:51:cd: e4:5a:7f:1b:fc:83:75:ed:73:4e:b6:66:86:ae:9e: 8a:db:42:72:d8:91:2e:8b:c6:4b:32:ba:1f:df:ab: 29:f3:f5:21:81:47:60:0d:6c:41:b3:6b:26:5b:d3: e7:55:b0:c1:3f:71:f9:48:fb:fa:07:67:79:cc:bd: d7:73:8c:48:e1:78:72:96:80:4d:a9:78:8c:c2:b2: a6:c2:56:c2:67:ea:45:38:58:87:6d:06:1d:ba:76: 6c:71:c5:b2:94:ac:32:c2:8d:f6:63:c8:40:8a:72: 15:3a:c8:75:c6:12:2a:5c:24:50:c4:78:fa:ad:0c: 66:7d:b3:2c:7e:e9:ee:b9:58:7a:52:be:cc:c8:29: 50:e0:dd:71:03:b2:be:8d:51:05:0d:a6:b5:30:b4: 90:d2:70:e5:12:fe:e5:cd:81:85:33:87:9b:c9:be: 66:c3:78:56:50:bc:fc:19:73:aa:ca:d7:ca:c5:e7: a3:31:69:5e:e8:54:a3:a2:fd:95:a0:53:03:d0:a4: 30:f3:e4:17:fa:eb:4d:08:04:50:2f:c5:27:63:3a: 75:d5:72:9a:9f:4b:c0:31:e4:ca:54:a3:bf:b2:d9: 38:b5:13:52:72:50:7f:39:6d:7c:07:2f:6c:7f:ce: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4C:4D:8F:3C:1D:E1:A6:95:30:67:8D:C7:33:19:E6:26:AE:B9:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:68:fc:33:a2:f1:08:f6:7f:8f:93:0b:b4:0b:cc:32:14:6d: 31:5a:7a:b1:59:71:59:5d:89:aa:f0:5f:39:c5:9c:4f:f0:51: a8:ea:0c:50:79:06:4f:c4:e8:02:eb:54:55:3b:d4:30:dd:4e: 94:ae:cd:d5:a1:2e:cf:a1:91:f8:59:64:b2:14:16:7a:e6:e7: 22:a1:5a:f2:0a:09:bc:1e:a3:55:3e:8c:34:d3:80:99:44:bd: cb:cc:22:86:b2:69:59:63:d6:cc:f1:0d:be:ef:91:bb:0c:ae: da:2d:54:3d:09:c3:60:2c:c8:f3:d8:5f:d2:34:90:b7:85:30: 83:52:7e:79:7c:6b:00:f2:58:e6:f5:92:bb:48:cb:dc:6f:01: 28:c8:ea:3d:68:bc:fb:61:be:0a:23:c6:2b:d5:9b:51:6e:f2: 1d:b9:89:aa:b2:a7:00:b5:11:e2:ec:54:b6:14:32:e3:7f:ea: e7:f8:96:13:ff:2d:90:8e:fc:a2:65:3e:61:15:7e:b1:d4:00: a1:f1:e8:25:e3:b7:0d:68:6b:62:65:6a:0b:af:07:92:57:3b: 6f:f6:0b:c3:69:77:a2:ff:2a:9e:b2:ab:e8:a3:f7:64:ab:66: d2:3b:61:35:f4:04:9d:18:85:c7:d7:57:86:12:59:89:66:08: c4:7a:94:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2k/PYsKQot8D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTFhNzM1NzYtZGI3Ni00YmFlLWI3MDQtYzE1ZWU4YTBmYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZThuUs7jggIIfJUc3kWn8b/IN17XNOtmaG rp6K20Jy2JEui8ZLMrof36sp8/UhgUdgDWxBs2smW9PnVbDBP3H5SPv6B2d5zL3X c4xI4XhyloBNqXiMwrKmwlbCZ+pFOFiHbQYdunZsccWylKwywo32Y8hAinIVOsh1 xhIqXCRQxHj6rQxmfbMsfunuuVh6Ur7MyClQ4N1xA7K+jVEFDaa1MLSQ0nDlEv7l zYGFM4ebyb5mw3hWULz8GXOqytfKxeejMWle6FSjov2VoFMD0KQw8+QX+utNCARQ L8UnYzp11XKan0vAMeTKVKO/stk4tRNSclB/OW18By9sf85yWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1MTY88HeGmlTBnjcczGeYmrrmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE4NDEwOWEtZTA5My0z Y2M0LWIzMTQtZTgyYWVmODlhNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJo/DOi8Qj2f4+TC7QLzDIUbTFaerFZcVldiarwXznFnE/wUajqDFB5 Bk/E6ALrVFU71DDdTpSuzdWhLs+hkfhZZLIUFnrm5yKhWvIKCbweo1U+jDTTgJlE vcvMIoayaVlj1szxDb7vkbsMrtotVD0Jw2AsyPPYX9I0kLeFMINSfnl8awDyWOb1 krtIy9xvASjI6j1ovPthvgojxivVm1Fu8h25iaqypwC1EeLsVLYUMuN/6uf4lhP/ LZCO/KJlPmEVfrHUAKHx6CXjtw1oa2JlaguvB5JXO2/2C8Npd6L/Kp6yq+ij92Sr ZtI7YTX0BJ0YhcfXV4YSWYlmCMR6lJc= -----END CERTIFICATE-----Generated at Sun Apr 27 03:05:55 2025 by rpki-client