$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: A9TlU9sq2YVGECpT3WmpHvNx2OFu0DaBxAnBwPP+CKI= Subject key identifier: 6A:EE:07:DB:E0:5A:8A:02:47:DC:C8:F4:EC:D7:85:91:25:BD:C9:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F814B10B3409421CB280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f8:14:b1:0b:34:09:42:1c:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=3f70ec4c-2616-4aba-9cbb-12e7713bffad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:67:75:d6:45:7f:2d:40:a8:2f:dc:a3:d1:69: 38:df:95:f1:8a:d9:71:2c:2e:10:7e:cf:eb:de:0c: 66:67:1c:95:8a:99:9d:25:d2:0d:8e:13:2c:2b:a5: da:e0:6f:ec:af:9b:45:45:6f:bd:70:73:03:85:11: 29:27:b1:d6:ba:c7:1c:cc:99:25:19:40:34:8f:07: 02:ed:29:d3:fe:85:5f:86:ce:ae:65:c1:6a:4f:b3: 05:b9:8e:c2:b7:b9:db:1c:55:80:b9:15:66:98:44: fa:b0:6e:df:13:14:3a:b3:31:43:c3:d7:39:3c:c3: ba:8f:ca:19:8b:fb:1d:7c:72:a6:04:d8:bc:ec:09: 84:db:e3:a9:b6:9d:9a:6b:c4:6f:68:45:0f:6e:92: b1:a9:1f:0c:8a:a7:ef:98:c7:ed:e2:58:50:59:9b: 8b:cb:68:df:12:7b:ab:23:a3:91:e5:cc:ae:f7:ec: a5:0f:79:d0:83:f5:cd:86:5d:cd:4e:46:34:79:de: 5f:48:38:d7:81:3a:fc:89:9e:5a:bf:d8:f2:48:dd: 7f:42:db:f6:b7:68:7e:b0:49:8f:e0:e3:64:8f:35: 89:24:57:42:00:00:94:44:a3:9a:b8:62:5f:f8:d3: ee:85:4f:80:77:4f:06:3a:bf:b2:a3:94:a9:e1:e3: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:07:DB:E0:5A:8A:02:47:DC:C8:F4:EC:D7:85:91:25:BD:C9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:dc:2c:48:e3:96:af:ad:3b:0c:30:46:0a:7a:5b:97:f7:9b: b0:98:65:63:bb:53:bf:29:b5:11:04:1f:d8:2b:4b:40:89:4c: b5:74:cc:57:2d:be:0f:ef:aa:68:b5:86:39:0a:93:6f:ea:d2: 6e:3b:39:d5:f5:7f:12:13:bf:41:90:dc:47:64:d2:91:44:86: 97:37:55:33:ad:5d:d6:8b:9c:16:94:6b:5a:0f:6e:59:28:4a: 24:0c:4b:f1:c1:5c:70:f4:54:5f:36:0c:31:02:2c:21:72:30: 11:95:4b:4e:a7:a1:2a:05:ba:de:b1:63:a5:de:59:e9:58:0a: 91:c3:be:81:48:25:59:75:d9:f3:d7:89:ad:b4:df:4f:fd:73: 8a:2c:2f:f5:55:1f:dd:6f:26:82:84:3b:3d:74:2b:f2:d9:e1: a1:e3:cb:f1:60:e0:ff:76:28:75:ac:99:7e:00:3c:7a:54:96: 9b:fb:64:30:95:de:1b:e3:4c:29:40:66:b1:b5:38:01:8b:d0: 42:3b:47:ac:c1:dc:e0:65:75:eb:a1:29:e3:a3:08:8a:45:4e: 15:eb:b1:38:de:9a:63:8d:76:d5:15:e7:0b:b9:68:56:56:c4: cb:ce:20:49:42:5a:4c:a0:64:21:df:0f:d6:1d:c6:90:15:a8: 38:61:9b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPgUsQs0CUIcsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk M2Y3MGVjNGMtMjYxNi00YWJhLTljYmItMTJlNzcxM2JmZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Gd11kV/LUCoL9yj0Wk435XxitlxLC4Qfs/r 3gxmZxyVipmdJdINjhMsK6Xa4G/sr5tFRW+9cHMDhREpJ7HWuscczJklGUA0jwcC 7SnT/oVfhs6uZcFqT7MFuY7Ct7nbHFWAuRVmmET6sG7fExQ6szFDw9c5PMO6j8oZ i/sdfHKmBNi87AmE2+Optp2aa8RvaEUPbpKxqR8MiqfvmMft4lhQWZuLy2jfEnur I6OR5cyu9+ylD3nQg/XNhl3NTkY0ed5fSDjXgTr8iZ5av9jySN1/Qtv2t2h+sEmP 4ONkjzWJJFdCAACURKOauGJf+NPuhU+Ad08GOr+yo5Sp4eM1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGruB9vgWooCR9zI9OzXhZElvcnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzcLEjjlq+tOwwwRgp6W5f3m7CYZWO7U78ptREEH9grS0CJTLV0zFct vg/vqmi1hjkKk2/q0m47OdX1fxITv0GQ3Edk0pFEhpc3VTOtXdaLnBaUa1oPblko SiQMS/HBXHD0VF82DDECLCFyMBGVS06noSoFut6xY6XeWelYCpHDvoFIJVl12fPX ia2030/9c4osL/VVH91vJoKEOz10K/LZ4aHjy/Fg4P92KHWsmX4APHpUlpv7ZDCV 3hvjTClAZrG1OAGL0EI7R6zB3OBldeuhKeOjCIpFThXrsTjemmONdtUV5wu5aFZW xMvOIElCWkygZCHfD9YdxpAVqDhhm5Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:00 2025 by rpki-client