$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa File: 733964c1-767b-3dda-a3eb-57e0e756377d.roa (raw, json) Hash identifier: tQYYytXWBHzDvVK8x2PUSIUsd5edcXuZ4h/wHjtVulQ= Subject key identifier: 30:91:02:F7:80:59:CE:AC:B9:74:96:95:03:25:20:05:63:C7:0F:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABE8CFF72657AF3106000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:be:8c:ff:72:65:7a:f3:10:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cadee2b6-2d9d-48da-8ea6-45c493622007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:82:35:8a:d8:22:84:32:51:0c:88:9a:9b: 72:ef:76:9b:29:14:ac:d5:8e:25:11:28:44:03:d7: 86:38:4d:e5:a7:56:d7:1c:1f:a5:6e:df:c3:bc:45: c0:4d:7c:d5:78:2f:68:8e:97:1f:5c:58:f1:27:60: b8:97:0d:a2:36:d0:69:89:86:eb:7e:0c:2a:8c:d4: 8b:49:44:9a:ff:70:89:b3:f3:10:c8:3b:02:f9:78: 1e:5a:c6:99:82:0d:ff:2c:70:d5:c5:ae:c0:71:1b: c1:8b:46:6a:07:e7:12:dd:6e:ea:88:f5:ef:c0:ce: 22:a8:a1:8f:05:a5:dc:78:42:41:73:e2:74:d8:15: 7f:d9:ec:43:e8:46:5a:43:18:83:e7:c0:e3:44:fe: 2a:96:3c:d6:6a:6c:b9:f1:67:d6:53:1c:56:05:32: bc:62:73:b3:51:02:14:42:6d:de:75:cf:bb:47:63: ee:60:75:3b:e5:dd:d6:7d:93:02:5b:ca:03:88:aa: 36:8b:82:64:11:e7:7a:82:87:ed:65:66:2e:6e:8c: 1a:b6:1c:b1:c9:9e:f7:c7:91:51:c4:a3:97:07:dc: cb:25:59:45:a4:7d:79:09:e3:d0:b2:2d:4e:aa:f1: 11:5b:dd:7c:cd:bc:ff:e5:97:a2:3d:98:80:7e:19: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:02:F7:80:59:CE:AC:B9:74:96:95:03:25:20:05:63:C7:0F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4d:14:75:ea:84:b8:52:a7:f7:a0:11:70:97:96:ec:65:fd: 14:b4:c7:56:d1:04:06:9f:77:24:9d:a4:b7:76:fa:2a:ae:83: 1e:6d:b8:0a:d8:db:dd:99:d6:f5:8c:84:3c:ff:d7:80:d1:ca: b6:b9:6b:f1:93:82:f6:88:ef:75:29:f5:40:7e:02:bf:cc:0d: c9:10:b5:bb:c8:7c:cc:15:43:27:56:df:b4:92:7d:39:99:15: e4:bc:21:2c:81:6f:34:ac:29:da:8d:f9:f9:11:0b:53:c3:5c: 92:eb:cf:0c:dc:d3:65:8d:10:58:34:71:a2:77:bb:62:30:56: 30:f2:b9:9c:f2:f5:ff:ad:47:1e:7f:96:1f:47:82:eb:9a:e2: 64:ba:16:bc:f0:cf:7f:a0:1e:a3:48:d6:22:d3:50:fb:0e:24: c6:f0:0b:5c:98:9c:8a:9c:c2:79:e8:b0:15:91:57:c4:e5:d7: e8:db:a1:e9:4a:a1:08:ff:4c:c7:a0:b8:7d:22:cd:61:8b:42: 9d:53:c6:a4:1b:bf:17:43:52:1d:f2:99:7f:37:9e:d7:8c:9a: d7:ff:2c:27:f5:cc:46:0e:93:93:78:70:03:3c:0d:1a:52:f5: 0b:c6:32:3d:b9:8b:45:36:cd:a3:ca:ac:a3:e3:20:f9:f8:3f: f3:df:13:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur6M/3JlevMQYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2FkZWUyYjYtMmQ5ZC00OGRhLThlYTYtNDVjNDkzNjIyMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheGCNYrYIoQyUQyImpty73abKRSs1Y4lEShE A9eGOE3lp1bXHB+lbt/DvEXATXzVeC9ojpcfXFjxJ2C4lw2iNtBpiYbrfgwqjNSL SUSa/3CJs/MQyDsC+XgeWsaZgg3/LHDVxa7AcRvBi0ZqB+cS3W7qiPXvwM4iqKGP BaXceEJBc+J02BV/2exD6EZaQxiD58DjRP4qljzWamy58WfWUxxWBTK8YnOzUQIU Qm3edc+7R2PuYHU75d3WfZMCW8oDiKo2i4JkEed6goftZWYubowathyxyZ73x5FR xKOXB9zLJVlFpH15CePQsi1OqvERW918zbz/5ZeiPZiAfhnv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCRAveAWc6suXSWlQMlIAVjxw9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzMzOTY0YzEtNzY3Yi0z ZGRhLWEzZWItNTdlMGU3NTYzNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdNFHXqhLhSp/egEXCXluxl/RS0x1bRBAafdySdpLd2+iqugx5tuArY 292Z1vWMhDz/14DRyra5a/GTgvaI73Up9UB+Ar/MDckQtbvIfMwVQydW37SSfTmZ FeS8ISyBbzSsKdqN+fkRC1PDXJLrzwzc02WNEFg0caJ3u2IwVjDyuZzy9f+tRx5/ lh9Hguua4mS6Frzwz3+gHqNI1iLTUPsOJMbwC1yYnIqcwnnosBWRV8Tl1+jboelK oQj/TMeguH0izWGLQp1TxqQbvxdDUh3ymX83nteMmtf/LCf1zEYOk5N4cAM8DRpS 9QvGMj25i0U2zaPKrKPjIPn4P/PfE2A= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:15 2025 by rpki-client