$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa File: 6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa (raw, json) Hash identifier: UGeI9k0qjCYqH45DZyXEYeja6lsdpXcVU4VeTOQ3tqk= Subject key identifier: 87:9E:7A:50:D2:65:CC:50:45:0B:EB:EE:1F:69:7F:34:11:28:E4:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A1E2A9EB1125F38BE465283C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 15169 IP address blocks: 172.253.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:9e:b1:12:5f:38:be:46:52:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=740818da-ee6b-4e19-bf77-5e43e6546142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:f1:d2:af:29:72:bd:c2:1c:c0:47:a4:47: 02:8b:21:1e:78:c7:b9:2e:21:49:28:c8:93:89:8b: df:19:91:45:a6:4a:ac:4d:30:f3:01:ff:f3:a2:73: 7f:76:e6:e0:47:7a:1f:9c:e7:0e:2c:de:c7:56:7f: 97:68:b3:1f:2c:d2:b7:85:38:04:12:ab:3d:df:f6: f8:99:f9:5b:08:a0:26:16:ea:10:46:4a:63:bc:f2: d6:c1:98:33:5d:43:49:a0:69:41:89:ec:00:84:e2: 13:5f:b7:06:f2:cf:bf:29:fb:e9:f8:48:1e:c4:ef: 6f:49:9e:26:81:f4:a4:46:20:fc:5c:6c:b3:d8:b1: 0a:fe:6b:28:29:6d:ec:1c:d2:2e:c8:58:c6:e4:51: a2:36:99:fa:c4:3f:a2:80:a8:35:75:b5:56:52:96: ce:12:d3:ab:e1:e6:cd:ec:8f:94:f4:2d:0a:4a:c2: d1:81:c4:81:5a:19:ba:77:c1:c7:17:d5:e1:d8:6d: c8:8e:6b:38:63:bb:70:a3:32:36:ff:29:7d:b0:1f: 98:bf:81:8a:5a:bd:b8:e0:20:fa:40:39:6a:08:49: 9a:10:05:af:68:47:f4:8d:31:80:c5:ba:f0:da:01: 46:05:75:ee:89:42:fc:13:ed:ae:b5:d0:16:0d:e1: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:7A:50:D2:65:CC:50:45:0B:EB:EE:1F:69:7F:34:11:28:E4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b8:e0:0b:9d:75:f4:f2:c0:e2:ad:91:a2:f6:01:f9:5b:8f: a6:1b:81:f0:dd:c8:04:cf:c4:fc:62:90:83:30:58:2e:09:3c: 67:e4:0c:ad:12:98:9e:1f:9b:1f:9f:67:bc:74:33:8e:17:18: 76:dc:d2:32:39:53:7e:1f:7b:69:9e:b0:07:c5:52:7f:5e:2f: 46:2f:77:f6:a0:9c:ca:90:f1:e5:85:74:73:2a:6a:0e:e9:88: 1f:fb:3d:75:c3:00:fd:b0:a0:41:df:6c:01:c5:0a:1b:c2:47: e8:e1:f4:b8:fb:88:fb:27:06:cd:c1:90:c2:bd:ea:d6:30:53: 11:4d:78:8c:41:80:a4:e2:4a:a7:8f:d8:f8:93:6a:60:87:cf: 95:73:ad:85:23:6b:7b:9c:b1:fe:37:b0:8f:1e:04:ad:5c:a7: b2:d4:b1:e7:56:24:9c:ce:c0:9d:e2:fa:33:d6:71:20:11:dd: f7:63:14:22:f0:93:f4:a7:cf:3c:5e:cf:a6:bf:3f:c1:11:50: fd:8e:34:31:be:7d:9c:b2:78:f0:a4:d4:c9:71:db:f8:6c:0a: 13:bb:56:e4:a0:16:5a:ae:62:ea:a9:65:c4:d6:47:9b:e3:91: 68:2b:e3:3d:ca:2e:34:a2:e2:aa:93:71:e2:6a:a8:40:3f:73: 53:d5:82:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKp6xEl84vkZSg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NzQwODE4ZGEtZWU2Yi00ZTE5LWJmNzctNWU0M2U2NTQ2MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooTx0q8pcr3CHMBHpEcCiyEeeMe5LiFJKMiT iYvfGZFFpkqsTTDzAf/zonN/dubgR3ofnOcOLN7HVn+XaLMfLNK3hTgEEqs93/b4 mflbCKAmFuoQRkpjvPLWwZgzXUNJoGlBiewAhOITX7cG8s+/Kfvp+EgexO9vSZ4m gfSkRiD8XGyz2LEK/msoKW3sHNIuyFjG5FGiNpn6xD+igKg1dbVWUpbOEtOr4ebN 7I+U9C0KSsLRgcSBWhm6d8HHF9Xh2G3Ijms4Y7twozI2/yl9sB+Yv4GKWr244CD6 QDlqCEmaEAWvaEf0jTGAxbrw2gFGBXXuiUL8E+2utdAWDeFrrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeeelDSZcxQRQvr7h9pfzQRKOSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmVjYjlmNTgtZWY5Yy0z YzNjLTg1M2UtNjQ2ZGI4ZTNjYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq44AuddfTywOKtkaL2Aflbj6YbgfDdyATPxPxikIMwWC4JPGfkDK0S mJ4fmx+fZ7x0M44XGHbc0jI5U34fe2mesAfFUn9eL0Yvd/agnMqQ8eWFdHMqag7p iB/7PXXDAP2woEHfbAHFChvCR+jh9Lj7iPsnBs3BkMK96tYwUxFNeIxBgKTiSqeP 2PiTamCHz5VzrYUja3ucsf43sI8eBK1cp7LUsedWJJzOwJ3i+jPWcSAR3fdjFCLw k/Snzzxez6a/P8ERUP2ONDG+fZyyePCk1Mlx2/hsChO7VuSgFlquYuqpZcTWR5vj kWgr4z3KLjSi4qqTceJqqEA/c1PVggM= -----END CERTIFICATE-----Generated at Mon Jun 16 06:05:03 2025 by rpki-client