$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa File: 935bd29f-5047-300b-b66d-40395de7b976.roa (raw, json) Hash identifier: onVloxCyn+E6zjici6MNSGGTxdoy6/yuMKDIXWDvEj8= Subject key identifier: 7F:41:BF:C2:81:44:4C:48:79:60:6C:60:42:D5:B3:FE:D9:B8:5F:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD4F83A5CC52802B5F140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d4:f8:3a:5c:c5:28:02:b5:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=592ee4e7-afba-45f6-9d36-ae6680b7f5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:ce:52:f5:66:09:6b:c5:33:15:ed:fa:0c: 6e:35:af:c4:bb:f7:56:f2:09:b8:8f:cf:cb:ab:73: 78:31:c5:1d:8a:aa:51:3f:ee:36:25:e5:17:7a:74: 7a:37:d5:59:9e:1e:80:9e:4c:36:56:25:0b:78:b9: 64:2c:ef:07:58:c1:d4:22:a8:2e:73:b9:71:1c:8e: 67:06:ca:fc:c1:61:bc:cb:a1:61:12:e8:e4:c4:2e: 5f:a9:fa:34:74:22:83:39:72:5c:1d:91:77:53:29: 4f:82:7b:9f:00:8b:0c:3b:56:f8:3a:d9:ad:ca:23: 3b:c4:06:31:1e:33:90:86:53:e3:56:16:6f:6e:92: 44:2e:5f:02:72:66:2e:89:42:a1:e4:95:14:52:5f: 22:5d:9e:48:bf:7f:d2:a9:7f:5d:f5:46:e2:5a:21: 9b:f7:a0:5c:ca:f3:b5:24:65:fc:2f:d0:d7:91:56: b7:2e:37:a4:c7:65:c4:10:76:7d:a6:9e:34:64:bf: 84:cf:75:d3:97:f1:f7:25:be:9e:ad:3e:43:50:42: bb:fc:b5:50:38:b7:59:25:40:f8:2d:bb:58:2d:ad: 94:1c:87:74:43:60:0e:bd:b5:7d:4b:23:d4:de:a2: f9:9f:83:1d:ec:55:4a:2a:12:89:01:f7:04:7e:91: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:BF:C2:81:44:4C:48:79:60:6C:60:42:D5:B3:FE:D9:B8:5F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:51:b0:b4:c0:fd:ee:1b:79:12:c2:be:b4:41:e9:6b:47:f5: d5:e9:6b:99:5c:eb:db:e1:1f:fb:54:ff:28:b1:9e:9a:64:21: 16:fa:c9:f4:d8:42:a7:7a:34:b1:da:e0:e4:55:0d:e2:33:8b: db:ba:d5:4c:4f:0f:7c:4b:a7:90:23:03:78:ac:a3:b8:fd:c4: 56:da:46:e7:d4:9d:e5:da:93:26:86:24:b2:48:1e:e8:66:2d: 84:8c:58:45:31:69:0d:12:c2:03:0a:16:8b:0f:19:47:19:a3: f6:29:36:b0:18:2f:48:b4:d5:a8:c3:8d:33:b4:5e:b8:63:51: 08:b9:d2:8a:75:a9:f5:33:f5:d4:50:30:bc:76:71:b3:12:a0: 51:95:4e:1a:cb:72:f9:82:38:fc:fe:08:55:39:2f:5b:ed:ff: 26:77:31:5c:d9:95:33:3a:e8:67:8d:3d:61:5c:30:7f:06:ff: e4:bd:8b:52:30:e6:66:ed:a0:a7:d9:8e:a9:7c:17:2a:33:84: 52:2f:e4:21:56:91:fa:8d:2b:56:0f:6b:64:8b:86:d3:10:e6: f3:d5:87:40:6d:b3:36:d4:33:8a:4d:15:98:e7:d9:76:58:22: 8e:b9:3e:a8:4f:f4:17:1c:60:78:ce:59:f7:6f:2a:78:a9:c2: e8:bb:a8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutT4OlzFKAK18UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTkyZWU0ZTctYWZiYS00NWY2LTlkMzYtYWU2NjgwYjdmNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdrOUvVmCWvFMxXt+gxuNa/Eu/dW8gm4j8/L q3N4McUdiqpRP+42JeUXenR6N9VZnh6Ankw2ViULeLlkLO8HWMHUIqguc7lxHI5n Bsr8wWG8y6FhEujkxC5fqfo0dCKDOXJcHZF3UylPgnufAIsMO1b4OtmtyiM7xAYx HjOQhlPjVhZvbpJELl8CcmYuiUKh5JUUUl8iXZ5Iv3/SqX9d9UbiWiGb96BcyvO1 JGX8L9DXkVa3Ljekx2XEEHZ9pp40ZL+Ez3XTl/H3Jb6erT5DUEK7/LVQOLdZJUD4 LbtYLa2UHId0Q2AOvbV9SyPU3qL5n4Md7FVKKhKJAfcEfpGzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9Bv8KBRExIeWBsYELVs/7ZuF8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM1YmQyOWYtNTA0Ny0z MDBiLWI2NmQtNDAzOTVkZTdiOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVRsLTA/e4beRLCvrRB6WtH9dXpa5lc69vhH/tU/yixnppkIRb6yfTY Qqd6NLHa4ORVDeIzi9u61UxPD3xLp5AjA3iso7j9xFbaRufUneXakyaGJLJIHuhm LYSMWEUxaQ0SwgMKFosPGUcZo/YpNrAYL0i01ajDjTO0XrhjUQi50op1qfUz9dRQ MLx2cbMSoFGVThrLcvmCOPz+CFU5L1vt/yZ3MVzZlTM66GeNPWFcMH8G/+S9i1Iw 5mbtoKfZjql8FyozhFIv5CFWkfqNK1YPa2SLhtMQ5vPVh0BtszbUM4pNFZjn2XZY Io65PqhP9BccYHjOWfdvKnipwui7qJE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:18 2025 by rpki-client