$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa File: 5a84109a-e093-3cc4-b314-e82aef89a710.roa (raw, json) Hash identifier: J3mKVgPpn9qqS3m4fXeEf0lThMr1qQ7zOiinUG+OQDQ= Subject key identifier: 83:E3:08:2F:A6:0B:62:69:95:9E:4E:40:9F:47:CB:D6:F2:26:53:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122D8C8833A82970FD3D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2d:8c:88:33:a8:29:70:fd:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=568b8b28-9ac1-4827-b9d1-cca9c415ef24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:c8:f5:b2:75:19:ec:4f:df:10:00:85:51: 59:0e:e8:00:9e:d4:4c:f2:cf:4b:95:d8:e1:76:f8: 22:d6:20:90:df:27:89:ab:73:ca:37:37:94:f8:b3: c3:90:e8:1c:86:1a:2b:67:71:c2:15:55:6d:c8:9a: 9f:df:ba:90:fc:6e:93:8f:f0:ac:0d:e8:51:bf:69: ca:b3:ac:21:91:f3:e9:32:c2:52:fa:5a:cc:e9:46: db:eb:63:e8:26:a6:57:d3:a1:1b:65:e5:4f:c3:9f: 71:83:4d:7b:ea:60:54:21:6d:24:a0:ac:90:57:b0: 4f:2f:4a:b8:a7:c8:3a:ad:e5:7e:0d:b7:02:49:44: 3a:97:4b:73:67:f8:86:3e:8f:46:47:20:ce:03:52: 73:08:21:60:38:b3:73:e6:45:21:c8:f7:96:34:f9: 2c:ed:2a:13:49:ca:1c:92:da:3f:47:a0:84:ac:b9: dd:08:a6:c9:69:79:c1:78:1a:0d:1b:ea:be:a5:2e: d0:3a:18:f1:79:40:24:65:04:a0:af:d9:13:4c:c4: a2:a5:00:10:ab:89:04:89:1f:67:1d:18:bf:c4:09: a5:09:f4:a9:8a:7d:13:19:07:b1:5e:be:a2:04:a1: 84:c5:5e:a7:35:f0:a6:62:b6:53:40:0a:15:e8:54: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:08:2F:A6:0B:62:69:95:9E:4E:40:9F:47:CB:D6:F2:26:53:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7a:c2:8b:bd:b8:f1:80:5b:ad:5d:af:31:84:e9:67:ec:0f: 8a:eb:c9:71:a2:f1:4b:ac:96:6f:5d:47:6a:61:e5:60:b4:b4: 78:25:73:e6:8c:34:48:30:5c:c9:60:42:a2:5e:75:4d:81:24: 77:f0:5d:c0:4a:98:76:cf:74:b5:4e:c4:b6:30:26:3a:ab:44: d7:03:36:28:60:97:ca:0d:9d:26:ae:fb:aa:dc:2a:9b:b2:0f: 3a:02:13:c4:8d:91:4e:dc:fe:cb:35:6b:2c:1a:c4:a1:77:da: 93:96:2f:9b:68:c0:4e:c6:3a:2d:34:b2:f7:2d:bc:c1:52:42: 3f:bb:43:4f:8b:c4:49:62:9b:0a:1b:12:e8:08:78:b0:a5:36: b6:93:cb:25:70:56:c2:07:fb:a1:5c:40:fc:ab:2e:14:97:1e: ee:95:90:55:a6:53:78:08:cb:f6:00:4e:30:0d:90:08:67:b2: d4:fe:bf:f2:2f:3b:32:67:81:c7:9e:72:9e:8e:95:b8:8a:02: 10:7a:f6:ad:ce:35:66:5e:09:de:50:a5:3c:c5:07:85:0d:72: ad:1d:52:03:12:c7:00:0e:b9:fb:41:da:eb:f6:e1:2c:46:9b: d5:72:60:7d:66:e2:d8:2d:43:84:be:c7:67:3c:b7:94:d6:0d: 51:65:91:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi2MiDOoKXD9PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTY4YjhiMjgtOWFjMS00ODI3LWI5ZDEtY2NhOWM0MTVlZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5HI9bJ1GexP3xAAhVFZDugAntRM8s9Lldjh dvgi1iCQ3yeJq3PKNzeU+LPDkOgchhorZ3HCFVVtyJqf37qQ/G6Tj/CsDehRv2nK s6whkfPpMsJS+lrM6Ubb62PoJqZX06EbZeVPw59xg0176mBUIW0koKyQV7BPL0q4 p8g6reV+DbcCSUQ6l0tzZ/iGPo9GRyDOA1JzCCFgOLNz5kUhyPeWNPks7SoTScoc kto/R6CErLndCKbJaXnBeBoNG+q+pS7QOhjxeUAkZQSgr9kTTMSipQAQq4kEiR9n HRi/xAmlCfSpin0TGQexXr6iBKGExV6nNfCmYrZTQAoV6FRfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPjCC+mC2JplZ5OQJ9Hy9byJlOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE4NDEwOWEtZTA5My0z Y2M0LWIzMTQtZTgyYWVmODlhNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp6wou9uPGAW61drzGE6WfsD4rryXGi8Uuslm9dR2ph5WC0tHglc+aM NEgwXMlgQqJedU2BJHfwXcBKmHbPdLVOxLYwJjqrRNcDNihgl8oNnSau+6rcKpuy DzoCE8SNkU7c/ss1aywaxKF32pOWL5towE7GOi00svctvMFSQj+7Q0+LxElimwob EugIeLClNraTyyVwVsIH+6FcQPyrLhSXHu6VkFWmU3gIy/YATjANkAhnstT+v/Iv OzJngceecp6OlbiKAhB69q3ONWZeCd5QpTzFB4UNcq0dUgMSxwAOuftB2uv24SxG m9VyYH1m4tgtQ4S+x2c8t5TWDVFlkbg= -----END CERTIFICATE-----Generated at Mon Aug 4 22:13:48 2025 by rpki-client