$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: qDfBqzoVpn9u2Q2eoDy7PRvJJUNs5Df/meLoPopPlg4= Subject key identifier: 1C:96:D6:A1:CE:28:7D:60:FC:F0:D6:A3:3E:5D:B3:63:FA:BB:99:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117D288BAE3F1ECE5F6898 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7d:28:8b:ae:3f:1e:ce:5f:68:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b29293c7-7eb2-4472-adaa-25d9548b79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:f6:f9:4b:5e:62:d4:c5:83:6d:99:d9:dc: 57:79:64:d7:1f:c9:4a:5b:6d:a5:bb:91:2b:d3:aa: 01:71:c9:87:3c:a1:79:63:6a:65:6a:6c:1a:c6:cc: 95:35:5c:3f:94:ba:b5:87:23:52:eb:02:bb:b9:ed: 4f:37:c8:de:bd:5e:af:82:81:8b:98:86:ea:47:bd: 75:a7:bc:b7:92:02:2f:f5:71:97:6d:21:69:2a:20: 46:10:da:16:20:65:11:3d:0a:e7:05:e0:9f:f5:82: 1c:ed:b5:e3:fb:b2:27:20:4e:0c:07:8f:ff:c8:3f: d7:84:92:7c:73:be:e1:97:b2:5a:d5:50:ef:f6:25: 62:82:1b:f5:d7:31:5b:bc:2f:86:41:70:c3:29:ff: 5a:a3:ed:96:83:42:8f:60:82:f7:d9:09:40:db:c1: d2:84:5f:c0:a0:10:87:ba:d5:6f:02:aa:16:4b:0c: ac:ea:ed:22:04:0e:af:fb:70:3b:73:ab:85:ee:4f: e6:be:5d:61:9f:f6:26:c5:ab:6f:20:39:99:66:d6: e5:7c:07:72:1a:c5:7e:7b:3d:fc:dd:02:2b:52:46: 61:f7:3e:86:0a:50:42:f5:d9:af:80:75:f7:6e:0e: 97:5a:91:67:12:c3:39:6c:4e:ae:7b:a3:ea:7f:b4: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:D6:A1:CE:28:7D:60:FC:F0:D6:A3:3E:5D:B3:63:FA:BB:99:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e9:fa:48:11:49:4c:60:ad:56:23:88:4a:8a:98:71:2b:67: 2d:de:4b:33:6b:01:cc:1e:e1:0d:87:c0:6d:ac:a1:04:77:3a: 23:70:dd:05:04:11:9c:35:40:1f:95:8f:69:99:8c:1a:1c:bf: ba:26:4c:15:29:09:4a:59:d7:63:f4:0a:27:20:80:c7:9e:1e: 1f:22:3d:1c:28:a6:08:ed:76:e3:73:51:ea:26:65:4f:9a:b5: 34:c2:a4:a9:8b:f8:38:55:94:ea:56:af:b6:e1:48:27:e1:68: b5:78:20:73:36:30:d0:e2:53:e6:42:7e:87:a5:ce:c8:18:b0: 8c:cc:f4:2c:0a:e8:e2:91:b2:df:60:36:dd:71:52:9b:14:e4: fe:74:c3:a4:c3:b9:58:ff:e3:47:e3:12:01:33:d9:9f:53:79: c4:af:e7:2b:fc:16:d8:8b:5e:4e:4b:0c:d0:71:1e:b4:55:9b: e0:3e:a4:97:6a:0c:c2:7c:a3:3e:84:3c:ca:2f:55:95:96:ed: b3:3d:b3:6d:b1:c8:09:fb:c1:5f:e6:f2:da:b8:26:7f:8e:d5: 4c:55:4b:6a:ea:5a:d7:0c:ef:20:9d:3a:fd:ba:3f:ec:91:a5: e4:57:25:f7:2d:de:cc:99:8e:ab:c8:17:5f:76:91:5b:4d:0c: 5f:26:30:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX0oi64/Hs5faJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjI5MjkzYzctN2ViMi00NDcyLWFkYWEtMjVkOTU0OGI3OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVP2+UteYtTFg22Z2dxXeWTXH8lKW22lu5Er 06oBccmHPKF5Y2plamwaxsyVNVw/lLq1hyNS6wK7ue1PN8jevV6vgoGLmIbqR711 p7y3kgIv9XGXbSFpKiBGENoWIGURPQrnBeCf9YIc7bXj+7InIE4MB4//yD/XhJJ8 c77hl7Ja1VDv9iVighv11zFbvC+GQXDDKf9ao+2Wg0KPYIL32QlA28HShF/AoBCH utVvAqoWSwys6u0iBA6v+3A7c6uF7k/mvl1hn/YmxatvIDmZZtblfAdyGsV+ez38 3QIrUkZh9z6GClBC9dmvgHX3bg6XWpFnEsM5bE6ue6Pqf7QiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByW1qHOKH1g/PDWoz5ds2P6u5mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzp+kgRSUxgrVYjiEqKmHErZy3eSzNrAcwe4Q2HwG2soQR3OiNw3QUE EZw1QB+Vj2mZjBocv7omTBUpCUpZ12P0CicggMeeHh8iPRwopgjtduNzUeomZU+a tTTCpKmL+DhVlOpWr7bhSCfhaLV4IHM2MNDiU+ZCfoelzsgYsIzM9CwK6OKRst9g Nt1xUpsU5P50w6TDuVj/40fjEgEz2Z9TecSv5yv8FtiLXk5LDNBxHrRVm+A+pJdq DMJ8oz6EPMovVZWW7bM9s22xyAn7wV/m8tq4Jn+O1UxVS2rqWtcM7yCdOv26P+yR peRXJfct3syZjqvIF192kVtNDF8mMNY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:14 2025 by rpki-client