$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: 06hw/QYbjTj+vw0vvUFHn2si2EfgRlnlf36nytNIXbw= Subject key identifier: F7:AF:D7:0B:32:2C:C1:5C:4D:67:50:1A:51:00:82:37:40:74:A8:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117F2E4D1DB4408A8BCF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7f:2e:4d:1d:b4:40:8a:8b:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=deea9c97-6bff-4821-90d1-7fd8431bc299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:60:b4:a3:f6:ae:1c:e3:e9:75:fc:69:2d: f7:8f:f0:8d:d2:16:85:0d:11:eb:09:3f:06:82:e2: a4:a4:c8:36:1a:e2:4b:91:24:f3:1e:cb:33:ec:bb: 4c:fe:11:80:70:bf:92:aa:ff:19:5e:b2:05:5b:7c: af:aa:fb:24:2f:94:ac:19:e2:d5:5e:cf:12:e0:91: 03:65:3e:cd:c3:13:01:37:00:1b:0b:4f:50:5d:6e: 31:9d:dc:97:8d:1b:24:da:f2:06:f8:c3:1b:5d:5b: 5e:90:bc:51:fb:a9:16:78:bb:c8:3b:f3:8b:f2:ba: 55:38:b0:6b:3e:35:52:7a:cb:ba:a6:9a:c0:ba:4d: 6b:4b:03:ef:50:1b:06:7e:ea:5e:a8:09:8a:16:9c: 60:dd:50:df:af:53:5e:36:45:81:8e:6d:d0:df:74: 86:98:9c:89:4f:1b:6e:61:f8:f7:76:14:b0:c8:3e: 70:5e:8c:1f:95:10:fc:8c:e5:12:3e:cd:62:ee:54: 87:f4:ec:6a:c5:77:9e:f1:de:72:25:93:c1:d7:89: 16:32:e4:da:9f:12:2c:f8:a7:11:42:b1:cf:fc:95: 24:a2:63:8f:e4:fc:32:8c:0b:1e:21:ad:6a:50:57: f4:e1:69:29:4b:55:ac:e9:dc:54:66:81:09:19:33: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:D7:0B:32:2C:C1:5C:4D:67:50:1A:51:00:82:37:40:74:A8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:90:38:e2:78:9c:f7:f6:23:c7:2b:1b:13:6a:09:d5:f0:af: 8f:da:06:6a:4d:34:42:ad:d5:e7:3b:28:74:f7:00:53:85:35: fa:a7:19:cd:3e:a8:d1:60:e2:2e:11:7a:1f:54:1c:3a:da:b2: c7:36:fe:4b:43:b7:34:6f:1b:80:17:54:ee:55:40:87:3d:46: 44:5d:1a:d5:f0:10:2e:db:3f:fe:c3:63:f8:48:06:9e:2f:30: bf:68:94:28:2d:0e:d2:24:c7:7e:78:7a:40:46:80:27:93:5d: 51:7a:ef:3f:2a:5c:d5:df:2e:47:08:d5:c9:57:38:26:f7:27: 67:d4:c3:48:47:d2:34:0f:0d:f2:48:64:77:51:5e:2a:7f:ff: b8:77:21:d7:06:5f:79:24:a5:f5:81:49:d9:c4:50:88:e0:55: 5c:36:1a:d4:47:0b:15:9e:6c:3b:54:67:82:39:7e:82:20:ca: 49:62:3e:00:42:d6:ec:5f:a7:d2:e0:3a:58:87:17:fd:48:98: 1c:d2:78:0b:9d:50:e0:a6:4f:f4:bd:a7:da:0f:35:00:d1:3c: 90:38:5c:5f:e9:92:90:77:25:eb:41:58:93:d0:33:01:09:8d: 09:52:28:67:f6:29:2b:72:9a:20:f7:b4:7b:d3:b8:98:e7:a5: e3:86:07:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX8uTR20QIqLz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGVlYTljOTctNmJmZi00ODIxLTkwZDEtN2ZkODQzMWJjMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh09gtKP2rhzj6XX8aS33j/CN0haFDRHrCT8G guKkpMg2GuJLkSTzHssz7LtM/hGAcL+Sqv8ZXrIFW3yvqvskL5SsGeLVXs8S4JED ZT7NwxMBNwAbC09QXW4xndyXjRsk2vIG+MMbXVtekLxR+6kWeLvIO/OL8rpVOLBr PjVSesu6pprAuk1rSwPvUBsGfupeqAmKFpxg3VDfr1NeNkWBjm3Q33SGmJyJTxtu Yfj3dhSwyD5wXowflRD8jOUSPs1i7lSH9OxqxXee8d5yJZPB14kWMuTanxIs+KcR QrHP/JUkomOP5PwyjAseIa1qUFf04WkpS1Ws6dxUZoEJGTOB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPev1wsyLMFcTWdQGlEAgjdAdKhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmQOOJ4nPf2I8crGxNqCdXwr4/aBmpNNEKt1ec7KHT3AFOFNfqnGc0+ qNFg4i4Reh9UHDrassc2/ktDtzRvG4AXVO5VQIc9RkRdGtXwEC7bP/7DY/hIBp4v ML9olCgtDtIkx354ekBGgCeTXVF67z8qXNXfLkcI1clXOCb3J2fUw0hH0jQPDfJI ZHdRXip//7h3IdcGX3kkpfWBSdnEUIjgVVw2GtRHCxWebDtUZ4I5foIgykliPgBC 1uxfp9LgOliHF/1ImBzSeAudUOCmT/S9p9oPNQDRPJA4XF/pkpB3JetBWJPQMwEJ jQlSKGf2KStymiD3tHvTuJjnpeOGB/w= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:50 2025 by rpki-client