$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: n+cG2uWKmLHvY5m3yUa+Ro1i+lVYVsL/zhbvoQKgj9g= Subject key identifier: 0E:17:6E:A2:26:B5:84:F4:48:C3:B7:71:11:86:7E:B9:E9:28:DA:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC43A64C5BE2A21A1B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c4:3a:64:c5:be:2a:21:a1:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0242922a-c9e5-4406-ae7e-8f8ebfdea45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:d6:ea:ab:f2:69:cb:a5:e3:a9:5f:aa:4f: 6b:61:c0:79:1b:12:17:3e:5b:55:63:3d:14:18:2d: 36:b9:08:cb:b9:d8:59:ad:8e:50:f4:87:56:2f:69: 15:12:6d:dd:48:bf:0f:05:dc:9c:3b:e0:0c:3e:32: 1f:3e:a9:03:74:e9:66:15:fc:57:5a:67:5c:8e:ef: 78:dc:7d:83:8b:8c:9c:08:0e:4c:f7:b2:02:27:8d: d7:b7:d0:55:33:77:fd:7b:b9:1c:6b:51:58:6a:e5: d4:83:37:b9:9e:66:ba:f5:3e:52:db:df:a0:64:26: 8d:38:d5:e9:4a:12:7e:05:39:0f:8f:97:7c:01:2f: 03:00:b2:9c:d2:a6:af:c2:33:00:d2:70:3e:fc:87: 92:42:a6:b0:12:3e:b3:8e:12:e3:fa:d7:15:6c:3c: ef:cc:ef:24:30:7d:51:25:41:2f:6c:b1:44:b7:2b: 7c:9c:92:10:c3:1d:06:24:b0:80:d9:1f:fc:14:08: dd:ac:7c:88:4c:f2:39:67:24:93:82:ae:99:82:02: fa:3e:08:e5:b8:fd:f4:3e:b4:58:89:60:c1:b4:27: 50:b5:c8:6e:e3:56:30:2f:ca:79:7f:66:bb:7d:8e: b6:9d:fa:f4:9c:a8:6b:7c:31:7e:f8:54:45:49:35: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:6E:A2:26:B5:84:F4:48:C3:B7:71:11:86:7E:B9:E9:28:DA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:75:8f:fe:d1:70:11:f5:97:7a:4e:5d:34:fc:a8:93:39:57: fa:94:fd:b6:f6:e6:10:2c:62:86:9c:a6:20:4c:44:af:d7:ed: 98:86:54:ab:bd:92:8d:83:de:37:21:1f:31:15:f1:f3:3b:e4: 6e:f0:2b:1e:f4:b8:a0:ea:bc:b8:24:76:81:50:61:5a:22:8e: 2f:e8:e1:6a:ec:c7:c1:d6:90:43:d4:c6:c2:74:ad:a6:ff:ea: 72:27:6a:d2:a3:2f:b8:cc:16:20:12:71:33:32:54:06:d4:5e: 33:25:11:81:fc:78:6b:3f:ce:30:a2:3f:72:e1:45:f0:34:95: 1f:af:ab:96:81:02:7d:36:00:1d:ca:64:47:22:e2:ff:ce:db: 36:e7:34:b0:b7:61:79:29:f9:67:ac:21:ff:75:24:07:9d:8b: cb:cd:27:e1:be:f9:0c:3b:23:f2:81:fa:7d:f7:33:23:89:80: 8b:20:22:11:9e:ce:69:42:47:6e:cb:b2:12:eb:e4:51:3d:5d: 6b:0e:49:5b:eb:6c:2e:f2:95:a8:91:bb:f8:d5:36:ba:f8:6d: 34:4f:6b:45:6b:16:4f:81:9f:db:88:87:a9:84:fb:79:1d:9c: 3f:59:c8:6f:07:1b:a6:49:f5:cc:3a:7a:fd:30:7b:a0:a7:f1: c5:e3:31:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusQ6ZMW+KiGhtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDI0MjkyMmEtYzllNS00NDA2LWFlN2UtOGY4ZWJmZGVhNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZLW6qvyacul46lfqk9rYcB5GxIXPltVYz0U GC02uQjLudhZrY5Q9IdWL2kVEm3dSL8PBdycO+AMPjIfPqkDdOlmFfxXWmdcju94 3H2Di4ycCA5M97ICJ43Xt9BVM3f9e7kca1FYauXUgze5nma69T5S29+gZCaNONXp ShJ+BTkPj5d8AS8DALKc0qavwjMA0nA+/IeSQqawEj6zjhLj+tcVbDzvzO8kMH1R JUEvbLFEtyt8nJIQwx0GJLCA2R/8FAjdrHyITPI5ZySTgq6ZggL6PgjluP30PrRY iWDBtCdQtchu41YwL8p5f2a7fY62nfr0nKhrfDF++FRFSTXcfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4XbqImtYT0SMO3cRGGfrnpKNoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt1j/7RcBH1l3pOXTT8qJM5V/qU/bb25hAsYoacpiBMRK/X7ZiGVKu9 ko2D3jchHzEV8fM75G7wKx70uKDqvLgkdoFQYVoiji/o4Wrsx8HWkEPUxsJ0rab/ 6nInatKjL7jMFiAScTMyVAbUXjMlEYH8eGs/zjCiP3LhRfA0lR+vq5aBAn02AB3K ZEci4v/O2zbnNLC3YXkp+WesIf91JAedi8vNJ+G++Qw7I/KB+n33MyOJgIsgIhGe zmlCR27LshLr5FE9XWsOSVvrbC7ylaiRu/jVNrr4bTRPa0VrFk+Bn9uIh6mE+3kd nD9ZyG8HG6ZJ9cw6ev0we6Cn8cXjMYY= -----END CERTIFICATE-----Generated at Sun Apr 27 09:34:32 2025 by rpki-client