$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: EsK3hgzRfTDjpGUkAmHJIYXn25JoefTtW680r2ZZilw= Subject key identifier: 64:25:E9:43:EF:68:0D:B5:A4:7F:74:8E:DC:65:EA:B9:3B:53:90:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC28937F21729476F0DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c2:89:37:f2:17:29:47:6f:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=508a0b46-4d4a-47e8-b9b0-aa83cfa79551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:49:05:82:60:b0:ff:68:b5:fb:6a:a6:3c: cf:a8:00:dd:7d:5d:14:c7:57:eb:a2:68:68:3e:2e: a0:34:e4:42:6d:2c:59:3c:c6:44:8c:4f:ed:58:c5: d2:e7:c3:4e:86:20:56:4b:8a:b4:ef:00:2b:c8:74: 42:80:90:19:6d:61:fd:19:2b:a7:80:08:a1:de:81: 4f:3e:bb:ab:a4:35:db:f2:26:1a:35:e2:95:40:c1: 51:96:6b:ae:70:5a:15:99:f7:3d:d2:f7:08:3a:e0: e2:fa:36:a5:e8:1b:84:be:21:20:04:63:18:ff:e2: aa:eb:3a:06:32:56:ed:cb:c8:5c:6f:d9:c4:c8:95: c2:94:4e:c4:d1:34:5b:cd:cc:ac:f2:a1:4f:01:5a: 1e:b1:7a:a2:c3:37:e6:bb:d5:a3:59:6b:82:8b:9a: 8c:a4:57:d5:ed:02:83:e4:09:d9:8c:5e:72:dd:57: 95:b8:c7:ee:31:f2:38:8f:ee:b4:06:d3:09:17:76: 3c:4a:e4:43:55:06:22:61:83:52:88:88:d6:44:ac: 21:ab:f7:81:a5:67:f9:fc:1d:79:38:6a:07:65:6b: 3d:9b:0a:7d:50:77:36:58:23:4e:5d:13:63:91:f7: d5:58:e2:82:1f:e7:ad:4d:b1:62:79:bb:cc:b9:90: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:25:E9:43:EF:68:0D:B5:A4:7F:74:8E:DC:65:EA:B9:3B:53:90:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:21:cf:5d:1f:c0:25:c6:0f:cd:f4:9f:66:7d:01:76:c1:71: 87:ab:ca:02:8e:62:95:d9:a1:94:d5:ee:5c:82:00:12:49:87: d7:84:34:9a:e5:52:e2:00:b4:c4:19:96:98:8f:35:2a:3d:79: 14:ce:2d:fe:37:5c:37:ba:17:47:2f:6a:a0:c0:d1:e5:1c:08: 4c:68:20:f5:31:04:c8:40:f6:89:2e:e4:bc:82:2d:f5:c7:91: 46:fa:50:e2:26:77:cb:5a:6b:c5:36:68:de:a8:d5:a0:cc:19: 95:fc:e9:87:b1:0d:7a:ce:82:61:37:33:03:e3:ac:16:7e:58: 6c:7c:6f:41:25:91:c6:e0:7b:3e:49:8b:08:2b:dc:b0:cc:df: f9:3e:82:b7:03:b8:5a:cd:34:ce:1d:17:69:18:7b:34:5a:ef: cf:2d:27:3d:65:ad:56:33:f6:8d:d3:87:f0:77:96:55:3b:64: 1d:43:cf:70:6e:bd:bf:54:c3:58:74:6f:83:65:9e:68:cc:11: ff:8f:80:be:20:c0:7b:f9:48:cc:89:ce:76:c1:96:a4:43:ef: ea:f6:2a:75:b0:ed:d8:f3:ff:a5:31:62:3d:53:86:0d:86:f2: 6b:e7:11:21:5f:4d:a6:f9:5b:8e:3e:6c:5b:75:76:ae:04:07: a7:3f:c0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusKJN/IXKUdvDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTA4YTBiNDYtNGQ0YS00N2U4LWI5YjAtYWE4M2NmYTc5NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVhJBYJgsP9otftqpjzPqADdfV0Ux1fromho Pi6gNORCbSxZPMZEjE/tWMXS58NOhiBWS4q07wAryHRCgJAZbWH9GSungAih3oFP PrurpDXb8iYaNeKVQMFRlmuucFoVmfc90vcIOuDi+jal6BuEviEgBGMY/+Kq6zoG Mlbty8hcb9nEyJXClE7E0TRbzcys8qFPAVoesXqiwzfmu9WjWWuCi5qMpFfV7QKD 5AnZjF5y3VeVuMfuMfI4j+60BtMJF3Y8SuRDVQYiYYNSiIjWRKwhq/eBpWf5/B15 OGoHZWs9mwp9UHc2WCNOXRNjkffVWOKCH+etTbFiebvMuZCqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQl6UPvaA21pH90jtxl6rk7U5CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIhz10fwCXGD830n2Z9AXbBcYerygKOYpXZoZTV7lyCABJJh9eENJrl UuIAtMQZlpiPNSo9eRTOLf43XDe6F0cvaqDA0eUcCExoIPUxBMhA9oku5LyCLfXH kUb6UOImd8taa8U2aN6o1aDMGZX86YexDXrOgmE3MwPjrBZ+WGx8b0Elkcbgez5J iwgr3LDM3/k+grcDuFrNNM4dF2kYezRa788tJz1lrVYz9o3Th/B3llU7ZB1Dz3Bu vb9Uw1h0b4NlnmjMEf+PgL4gwHv5SMyJznbBlqRD7+r2KnWw7djz/6UxYj1Thg2G 8mvnESFfTab5W44+bFt1dq4EB6c/wLM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:09 2025 by rpki-client