$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa File: 7055a96f-f858-3768-bc22-8014d46b2b9b.roa (raw, json) Hash identifier: BJK0Q0ICWqQ+vPqkZI7MXimUgi/IbKT8EWdDKNyOD/s= Subject key identifier: D3:46:A0:54:A7:76:A3:67:63:02:4F:96:66:87:83:1C:49:5F:F0:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA36DFF6C848980E6A9200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:36:df:f6:c8:48:98:0e:6a:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d3ae0f29-7ab9-46a1-91d7-c55fbc15902a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:db:15:36:8f:27:fd:ec:85:92:64:46:e0: fd:4f:6d:06:3a:ba:eb:7b:b1:8f:91:f6:3f:8e:d2: 78:19:1b:6c:44:90:4d:93:ea:74:5d:0e:89:5f:11: 65:18:45:a5:21:c1:80:b2:1b:86:0d:0b:48:8a:b3: 2e:22:ae:3e:c5:8b:77:94:24:7f:77:04:ff:c3:99: e4:fe:df:7b:45:50:86:43:69:da:f9:62:b9:cc:fb: 0c:ed:86:67:72:dd:b5:ad:71:52:37:af:f6:4d:8c: 03:f2:94:c3:7f:02:5d:7d:79:1e:ba:6f:df:e9:3a: cb:3d:bf:a2:e2:b1:e7:62:9f:b5:82:1e:ec:63:f5: f6:ea:52:1f:70:5d:31:06:e9:41:4e:93:4f:95:52: 19:0a:0e:e5:c7:b2:a9:b5:0d:e7:98:04:63:4a:de: ac:4b:aa:ce:d6:35:a1:e7:7e:30:b3:c3:69:3b:fe: 3f:79:9a:54:f4:f3:a6:80:1d:83:9e:b3:5a:91:86: 71:95:10:f9:0f:10:75:21:3f:74:de:85:48:9c:49: cf:98:cc:0a:a1:05:ad:9d:28:5c:02:bc:de:5a:a8: 13:1d:2b:1d:11:bd:ca:2b:b9:00:29:36:70:3f:19: 81:0c:ed:3a:1a:ae:f8:4b:df:a2:b6:e4:f2:f6:ca: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:A0:54:A7:76:A3:67:63:02:4F:96:66:87:83:1C:49:5F:F0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a0:43:c0:f6:f7:ac:d8:b9:37:78:6e:7d:93:53:57:33:f7: ac:ff:3e:6c:81:c3:0a:d7:dd:fa:1b:f4:b3:13:cb:c4:71:82: d8:c6:89:c0:4c:b1:de:af:8e:2b:65:41:cd:df:29:49:cd:9e: 91:00:5a:34:84:31:35:1b:e7:fc:2e:44:ba:20:04:74:0a:3d: cf:1a:a6:2f:b4:e2:b2:5d:53:ae:b4:b1:c1:0c:12:ef:9c:44: c7:25:c9:bd:41:ab:97:58:34:e8:6e:93:89:ef:79:01:2b:c7: a7:0b:f8:85:83:ca:db:cb:23:41:b5:7d:8a:a5:11:8e:f0:d7: 68:79:74:de:09:b9:84:55:49:7c:cc:72:87:24:76:4c:78:ca: 60:d7:dd:40:af:8d:8f:c2:5f:e2:dc:d1:de:09:d1:6b:9d:16: 05:18:4b:e9:cc:93:1c:53:62:b7:af:c8:5a:e6:e7:68:4c:a8: 8d:22:16:f1:be:87:d9:55:06:cf:74:a0:cb:54:78:a7:b2:25: 7c:54:8b:32:06:5c:53:65:52:f5:46:61:02:55:a3:cc:c6:c8: 1b:ad:71:42:48:96:1c:7a:4b:7f:d2:c5:10:c0:88:81:1e:4c: 2f:02:43:a2:af:41:f7:fc:35:93:1b:60:07:4b:71:34:b5:54: f0:be:1a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jbf9shImA5qkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDNhZTBmMjktN2FiOS00NmExLTkxZDctYzU1ZmJjMTU5MDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY/bFTaPJ/3shZJkRuD9T20GOrrre7GPkfY/ jtJ4GRtsRJBNk+p0XQ6JXxFlGEWlIcGAshuGDQtIirMuIq4+xYt3lCR/dwT/w5nk /t97RVCGQ2na+WK5zPsM7YZnct21rXFSN6/2TYwD8pTDfwJdfXkeum/f6TrLPb+i 4rHnYp+1gh7sY/X26lIfcF0xBulBTpNPlVIZCg7lx7KptQ3nmARjSt6sS6rO1jWh 534ws8NpO/4/eZpU9POmgB2DnrNakYZxlRD5DxB1IT903oVInEnPmMwKoQWtnShc ArzeWqgTHSsdEb3KK7kAKTZwPxmBDO06Gq74S9+ituTy9sowvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNGoFSndqNnYwJPlmaHgxxJX/D5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA1NWE5NmYtZjg1OC0z NzY4LWJjMjItODAxNGQ0NmIyYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+gQ8D296zYuTd4bn2TU1cz96z/PmyBwwrX3fob9LMTy8RxgtjGicBM sd6vjitlQc3fKUnNnpEAWjSEMTUb5/wuRLogBHQKPc8api+04rJdU660scEMEu+c RMclyb1Bq5dYNOhuk4nveQErx6cL+IWDytvLI0G1fYqlEY7w12h5dN4JuYRVSXzM cockdkx4ymDX3UCvjY/CX+Lc0d4J0WudFgUYS+nMkxxTYrevyFrm52hMqI0iFvG+ h9lVBs90oMtUeKeyJXxUizIGXFNlUvVGYQJVo8zGyButcUJIlhx6S3/SxRDAiIEe TC8CQ6KvQff8NZMbYAdLcTS1VPC+GiA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:41 2025 by rpki-client