$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa File: 70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa (raw, json) Hash identifier: FqUomYwyeDzpnhPE3w5U4sP7IStAOEADRZR8ny/eOuI= Subject key identifier: 54:AA:94:1F:1C:B1:D7:11:FD:B0:24:9C:A0:BA:2D:4D:BA:19:EF:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849F2E51E7E8031E26EF8960A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:1e:7e:80:31:e2:6e:f8:96:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=14569434-430c-4c06-abd3-5ae84e9e2246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:69:6c:d4:bb:a7:c1:c9:41:a5:f0:76:a8: 31:f4:0e:52:b6:27:ab:df:23:5e:87:c6:ba:37:6d: c7:4c:f5:80:de:ac:13:fb:6d:0d:3b:26:89:4d:7c: d9:bd:03:90:a7:8c:f2:e9:bb:1a:8e:5c:d1:93:d8: 0a:88:35:d8:b4:d8:43:21:7b:6d:90:a0:9c:e2:e4: 4d:42:33:1f:76:6c:dc:e6:80:0c:39:8b:f7:8a:40: dd:30:b4:33:75:fa:d3:04:23:22:38:62:ee:19:71: 9d:d0:05:f4:ad:ff:40:dc:36:78:ff:33:29:07:e9: 08:58:c3:9e:cd:75:74:87:a5:46:33:cb:fc:25:44: 1f:24:d1:55:cb:f1:dc:ef:54:36:76:ef:d0:3b:df: 11:d5:7d:36:d4:52:4c:69:ac:79:8f:59:ee:4f:db: cd:4b:87:f6:dc:7f:43:f4:64:cc:f8:d9:b1:11:79: 8c:a1:fc:84:18:8a:55:19:5e:a5:e4:01:11:8b:9d: 3d:9e:c8:12:4c:72:5d:f8:0f:1c:17:e6:e8:92:ff: b8:5c:6d:31:33:7a:8a:d0:a1:d6:21:91:fa:1b:9e: 91:b7:91:db:c5:92:77:72:18:02:8a:b1:e4:06:83: d1:db:cc:c8:07:35:84:98:b1:db:4c:ee:7b:f9:42: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:94:1F:1C:B1:D7:11:FD:B0:24:9C:A0:BA:2D:4D:BA:19:EF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5a:35:97:96:a0:1c:b0:9a:74:4c:b4:b6:54:81:c3:2b:f8: 7d:ef:37:12:2c:28:01:6a:54:35:de:74:fe:2a:78:89:3e:c0: 97:7f:c7:81:9d:5a:c8:24:b9:77:0e:58:64:ea:9c:e1:50:fe: 28:5f:ef:39:5f:b7:d6:f3:ad:27:6a:9b:ab:22:df:be:96:04: 2f:ae:b6:77:b0:e7:66:a0:83:b3:db:8b:09:1d:98:16:fd:3d: d5:36:cc:84:d9:59:f7:b7:56:41:09:9a:5d:fb:6a:2c:93:95: 7c:07:03:33:c7:b7:20:00:2b:fb:43:88:6a:5f:bb:91:37:cb: 35:c7:ff:f9:fb:5d:e0:10:04:1c:b6:2f:dc:c8:59:d9:ac:e4: 94:d7:7c:c5:2e:c7:10:a1:fa:bc:ef:1c:55:b7:63:8e:d4:60: 20:85:11:c9:c4:9e:fb:81:21:c6:ad:07:db:b1:2b:e7:de:54: 6f:36:0f:d8:b6:07:6c:67:2e:db:1d:8c:84:da:ab:7b:a9:3c: 46:3d:cd:c7:90:a2:1d:69:fa:49:e9:0f:83:03:8d:6f:d4:00: c4:ca:cf:11:5b:60:ec:7d:56:de:de:71:d0:2d:0a:9a:08:2b: 0d:17:d9:51:7f:2d:7e:87:e9:fc:38:c8:4c:2a:6a:84:00:63: 60:27:7f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5R5+gDHibviWCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MTQ1Njk0MzQtNDMwYy00YzA2LWFiZDMtNWFlODRlOWUyMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MlpbNS7p8HJQaXwdqgx9A5Stier3yNeh8a6 N23HTPWA3qwT+20NOyaJTXzZvQOQp4zy6bsajlzRk9gKiDXYtNhDIXttkKCc4uRN QjMfdmzc5oAMOYv3ikDdMLQzdfrTBCMiOGLuGXGd0AX0rf9A3DZ4/zMpB+kIWMOe zXV0h6VGM8v8JUQfJNFVy/Hc71Q2du/QO98R1X021FJMaax5j1nuT9vNS4f23H9D 9GTM+NmxEXmMofyEGIpVGV6l5AERi509nsgSTHJd+A8cF+bokv+4XG0xM3qK0KHW IZH6G56Rt5HbxZJ3chgCirHkBoPR28zIBzWEmLHbTO57+UIS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSqlB8csdcR/bAknKC6LU26Ge8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBkN2E1NDktMWI3ZS0z MTU4LTg0YjEtMzc2ZGJmYzIwYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhaNZeWoBywmnRMtLZUgcMr+H3vNxIsKAFqVDXedP4qeIk+wJd/x4Gd WsgkuXcOWGTqnOFQ/ihf7zlft9bzrSdqm6si376WBC+utnew52agg7PbiwkdmBb9 PdU2zITZWfe3VkEJml37aiyTlXwHAzPHtyAAK/tDiGpfu5E3yzXH//n7XeAQBBy2 L9zIWdms5JTXfMUuxxCh+rzvHFW3Y47UYCCFEcnEnvuBIcatB9uxK+feVG82D9i2 B2xnLtsdjITaq3upPEY9zceQoh1p+knpD4MDjW/UAMTKzxFbYOx9Vt7ecdAtCpoI Kw0X2VF/LX6H6fw4yEwqaoQAY2Anf+Q= -----END CERTIFICATE-----Generated at Sun Jun 15 23:17:28 2025 by rpki-client