$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa File: 8c008d44-98e9-3f98-b352-39572488247b.roa (raw, json) Hash identifier: h6kC3b7gyMa9w6/vwC93CRyMbgHqz044LcuUaKiT7TI= Subject key identifier: 93:90:F1:03:CA:EE:99:D6:BE:D5:66:8B:23:21:48:8D:C7:64:3B:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC7CBCD772DAC86F5A880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c7:cb:cd:77:2d:ac:86:f5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aacf999f-d21a-466c-95b6-2b74da637a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:43:ce:08:2e:d3:42:fe:75:82:74:e1:11: 2c:ad:cd:05:4b:0a:70:27:b7:23:b1:1b:6b:d3:9b: 43:c6:fc:1e:47:a4:21:9c:ad:4e:49:62:8f:15:de: 2b:dd:78:34:4b:91:bf:06:a6:93:12:e6:3a:39:a0: bd:36:b4:cc:b1:ff:81:d4:28:1d:6d:a1:ab:c0:48: 48:09:3f:78:f3:22:77:34:31:4a:40:a1:e8:a3:1d: 10:f6:a7:f2:2d:d9:97:1b:28:77:72:5d:b8:77:53: fb:3e:99:84:2c:17:59:8d:c3:fe:8a:ea:e7:eb:10: c1:30:cc:1c:df:d6:1d:53:d7:a0:be:da:04:c1:13: 31:34:3a:3c:c9:ad:7d:20:95:e7:c3:2c:f6:a7:2e: 31:a7:2e:10:e4:30:a5:28:b3:f2:65:b4:a9:d6:bc: bc:d2:a8:ca:d4:b9:31:0d:e7:70:83:d7:52:ff:5b: 1a:16:3f:8a:ea:c6:12:b5:e7:21:f3:19:03:47:86: 34:39:1b:d3:07:6d:c6:db:90:d0:f0:a0:89:cc:d8: e0:8d:70:25:a3:81:4b:28:74:8f:83:3d:78:62:67: bd:96:8e:dc:b3:3f:01:10:0c:bb:62:bf:98:cc:9d: 51:48:59:8c:87:3f:0d:c9:d0:74:da:af:38:52:ed: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:F1:03:CA:EE:99:D6:BE:D5:66:8B:23:21:48:8D:C7:64:3B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e5:bc:f5:46:f7:43:52:fa:4a:95:3e:e2:d7:17:71:98:24: ca:1c:94:54:f8:0c:43:a7:b2:d8:05:be:7e:da:6c:d7:80:ab: 9f:f5:26:bb:14:76:c8:48:a9:08:a9:73:58:dd:3f:82:a4:f0: 7d:f8:9d:a6:55:cb:6e:e8:46:26:1c:3a:d7:9d:0e:0a:ea:cf: 5a:02:7c:b4:5a:43:a7:64:0e:e8:ec:61:85:f1:7e:b0:ef:58: 90:68:27:f9:cf:a7:96:bb:43:23:06:b4:8f:89:42:13:52:03: c0:1e:91:ce:5f:a2:9e:97:68:ae:48:46:d3:06:30:18:91:b5: 42:a9:4c:76:44:7a:c0:39:c1:2a:b4:d0:2d:7c:b4:09:e9:59: 60:a2:96:b0:fd:40:5f:ad:3d:27:be:7c:56:92:96:8a:9f:41: e8:67:4c:f6:31:87:97:5b:56:4b:dd:bb:5c:5d:55:d3:1d:99: 33:d4:e7:8f:7f:78:54:1a:57:fd:83:dc:53:dc:ad:d4:ed:d2: e7:f5:3a:bc:b3:35:98:d3:bc:a8:df:3d:f5:df:b5:32:28:f5: 01:89:fc:e4:2d:20:6e:85:ca:16:51:fa:b5:fe:9e:96:0d:c9: 55:15:f5:68:c4:a2:08:5a:f4:c5:96:f6:7e:22:80:71:02:63: f0:8d:4d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusfLzXctrIb1qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWFjZjk5OWYtZDIxYS00NjZjLTk1YjYtMmI3NGRhNjM3YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhtDzggu00L+dYJ04REsrc0FSwpwJ7cjsRtr 05tDxvweR6QhnK1OSWKPFd4r3Xg0S5G/BqaTEuY6OaC9NrTMsf+B1CgdbaGrwEhI CT948yJ3NDFKQKHoox0Q9qfyLdmXGyh3cl24d1P7PpmELBdZjcP+iurn6xDBMMwc 39YdU9egvtoEwRMxNDo8ya19IJXnwyz2py4xpy4Q5DClKLPyZbSp1ry80qjK1Lkx Dedwg9dS/1saFj+K6sYStech8xkDR4Y0ORvTB23G25DQ8KCJzNjgjXAlo4FLKHSP gz14Yme9lo7csz8BEAy7Yr+YzJ1RSFmMhz8NydB02q84Uu2sJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOQ8QPK7pnWvtVmiyMhSI3HZDvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGMwMDhkNDQtOThlOS0z Zjk4LWIzNTItMzk1NzI0ODgyNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzlvPVG90NS+kqVPuLXF3GYJMoclFT4DEOnstgFvn7abNeAq5/1JrsU dshIqQipc1jdP4Kk8H34naZVy27oRiYcOtedDgrqz1oCfLRaQ6dkDujsYYXxfrDv WJBoJ/nPp5a7QyMGtI+JQhNSA8Aekc5fop6XaK5IRtMGMBiRtUKpTHZEesA5wSq0 0C18tAnpWWCilrD9QF+tPSe+fFaSloqfQehnTPYxh5dbVkvdu1xdVdMdmTPU549/ eFQaV/2D3FPcrdTt0uf1OryzNZjTvKjfPfXftTIo9QGJ/OQtIG6FyhZR+rX+npYN yVUV9WjEogha9MWW9n4igHECY/CNTbU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:41 2025 by rpki-client