$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa File: 63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa (raw, json) Hash identifier: eRSyTaOx4kcILwMubdSPd/pIoAjmp6RCkbahL4djQAU= Subject key identifier: 52:84:64:5E:EB:9A:0D:4A:64:FC:62:0E:41:0B:B3:39:02:AC:C6:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACF082BDF5C6FBCCCC500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:08:2b:df:5c:6f:bc:cc:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=02846450-b076-42a0-bb15-1bc5a0af2df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:53:d1:93:c8:33:06:ff:8c:fb:fd:a5:f7: f8:3e:ac:49:c0:17:14:28:6a:a0:7c:6c:14:50:29: 4d:4b:2c:54:56:35:a3:19:83:97:f9:f5:78:d9:31: 72:a5:dd:ba:f8:a9:03:2d:7e:01:fb:68:eb:e3:4a: fc:42:bd:52:83:26:63:41:7a:eb:87:8d:d6:3c:cf: 7c:7d:d4:04:c8:bc:c4:f6:ef:58:a7:d8:8e:22:86: 81:e9:74:24:37:54:3b:d2:f4:93:56:4c:3e:10:bf: ef:cc:70:d7:e2:7e:6e:33:5f:f6:93:20:0c:14:1a: af:cb:4f:55:46:09:34:52:31:cb:55:f8:95:f1:67: 06:ea:2b:f9:1b:88:1e:e0:37:66:06:23:f6:9d:bf: 7a:d1:df:60:2a:75:84:2a:ab:99:ae:d5:60:16:01: ec:29:70:d9:73:79:55:76:f0:eb:8f:ae:23:92:ae: b4:b9:d5:b6:78:14:c6:a0:cb:44:5d:f4:6c:58:28: ff:33:03:d1:7e:a3:4b:5e:70:81:f9:c5:8f:45:c7: c8:9f:bb:ff:e2:cf:ce:e7:92:5e:50:27:89:c4:43: 44:58:c8:e4:98:7a:cd:79:99:54:49:47:7c:74:91: dd:29:84:2e:10:ed:19:b4:f1:19:5e:3b:13:55:39: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:64:5E:EB:9A:0D:4A:64:FC:62:0E:41:0B:B3:39:02:AC:C6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bb:dc:91:4d:cc:41:c3:c8:a5:43:17:f7:b5:44:4e:b3:ef: 3c:31:54:e7:2b:fa:8e:a0:da:a4:9f:21:48:56:67:53:aa:44: 6b:1f:66:21:73:b9:ad:a9:0b:60:a8:6e:e7:5b:85:00:32:77: 59:91:1e:df:11:a8:fe:bd:8c:6e:7e:77:33:be:77:f3:31:1b: 4c:49:65:48:bb:87:7b:15:1a:2b:63:58:cf:80:4c:c6:3b:d7: c8:4d:6d:ae:12:93:1e:72:f1:6f:eb:4e:ef:f5:78:62:93:0d: ac:73:fb:86:80:76:25:dd:28:cb:bc:97:d9:17:20:0a:34:23: af:8a:9b:16:b5:1e:97:18:57:e1:c8:a6:e7:3f:a0:d0:0a:01: 19:95:ea:73:bf:69:d0:11:16:f5:79:81:fe:17:9e:87:6e:ed: 70:3b:14:ed:ed:46:49:bb:c0:c2:a7:18:5a:79:a5:bd:f9:2f: 93:0e:ad:a3:85:0e:70:90:42:09:6a:f7:b5:7c:1b:3c:d6:3f: f9:6b:ad:40:ba:c9:ee:1d:05:fe:a4:39:f8:93:2b:1b:a9:15: c5:65:44:ce:6a:a9:3c:b3:51:c1:6b:03:15:30:4e:01:10:ec: 21:7b:d1:d6:d5:cd:60:9a:4f:12:84:20:d6:58:58:4d:7f:61: 91:f2:65:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus8IK99cb7zMxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDI4NDY0NTAtYjA3Ni00MmEwLWJiMTUtMWJjNWEwYWYyZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JlT0ZPIMwb/jPv9pff4PqxJwBcUKGqgfGwU UClNSyxUVjWjGYOX+fV42TFypd26+KkDLX4B+2jr40r8Qr1SgyZjQXrrh43WPM98 fdQEyLzE9u9Yp9iOIoaB6XQkN1Q70vSTVkw+EL/vzHDX4n5uM1/2kyAMFBqvy09V Rgk0UjHLVfiV8WcG6iv5G4ge4DdmBiP2nb960d9gKnWEKquZrtVgFgHsKXDZc3lV dvDrj64jkq60udW2eBTGoMtEXfRsWCj/MwPRfqNLXnCB+cWPRcfIn7v/4s/O55Je UCeJxENEWMjkmHrNeZlUSUd8dJHdKYQuEO0ZtPEZXjsTVTlrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKEZF7rmg1KZPxiDkELszkCrMYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNhNGIwZTgtYTFmNS0z ZmNjLWE1ZjctYjU4YzJiZmVkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE673JFNzEHDyKVDF/e1RE6z7zwxVOcr+o6g2qSfIUhWZ1OqRGsfZiFz ua2pC2CobudbhQAyd1mRHt8RqP69jG5+dzO+d/MxG0xJZUi7h3sVGitjWM+ATMY7 18hNba4Skx5y8W/rTu/1eGKTDaxz+4aAdiXdKMu8l9kXIAo0I6+Kmxa1HpcYV+HI puc/oNAKARmV6nO/adARFvV5gf4Xnodu7XA7FO3tRkm7wMKnGFp5pb35L5MOraOF DnCQQglq97V8GzzWP/lrrUC6ye4dBf6kOfiTKxupFcVlRM5qqTyzUcFrAxUwTgEQ 7CF70dbVzWCaTxKEINZYWE1/YZHyZZU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:00 2025 by rpki-client