$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa File: 978c148b-3bd8-3213-aa1e-23bead315038.roa (raw, json) Hash identifier: k4On9EyjD7v0hZYGl9lh1fzvQdDAX/RMKdbE55SkPTw= Subject key identifier: C5:68:A7:22:A2:CF:74:CD:FD:83:2E:30:DC:AC:B9:BE:37:53:7D:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849C5045CBB7C764266E9263C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa Signing time: Wed 07 May 2025 02:36:52 +0000 ROA not before: Wed 07 May 2025 02:36:52 +0000 ROA not after: Tue 05 Aug 2025 02:36:52 +0000 asID: 15169 IP address blocks: 172.253.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:04:5c:bb:7c:76:42:66:e9:26:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 7 02:36:52 2025 GMT Not After : Aug 5 02:36:52 2025 GMT Subject: CN=c4529480-3363-49f0-8f6b-51870440d044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:a1:6f:25:55:a2:99:ce:42:57:02:f2:d9: 35:bc:a6:8f:d9:f3:13:34:00:af:f9:03:a5:cb:8d: af:9d:76:c5:f6:9a:41:ac:1a:30:97:80:2d:48:a0: 76:da:ce:8b:ed:5e:a4:3d:a0:cc:4d:55:56:c9:cf: 77:0e:58:0a:7c:9f:5b:92:d7:fa:16:25:f6:7b:d4: 5f:fb:2f:81:2c:44:fe:ac:86:f8:fa:10:ca:7d:be: ca:83:81:5c:04:11:d8:e3:18:53:c5:30:6e:20:c3: a6:7c:cb:0b:0d:8a:06:90:ec:6d:8f:8a:de:e1:28: f2:63:f4:5e:12:14:0d:43:5d:10:62:0d:57:ad:2c: 4f:9a:bc:b3:6c:21:91:3b:4d:f3:7e:e6:74:8e:71: 96:02:a2:bd:ab:bd:ef:01:ef:92:98:81:2a:3b:a6: 08:9d:1b:2e:06:4e:35:a8:ac:48:c6:e5:b5:1a:6d: 59:4c:d6:9d:ee:17:bf:99:89:f3:63:1c:06:59:b2: 27:45:ac:1a:7d:36:fe:f7:e2:01:d8:a4:b9:53:d3: 3b:16:f9:7e:af:23:04:df:7b:80:d6:15:b7:f8:3b: f9:ed:ce:cb:52:a7:c5:aa:df:b8:22:1f:5e:4b:d7: 79:b1:57:fe:0e:74:46:0e:d7:9d:e7:70:22:82:fa: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:A7:22:A2:CF:74:CD:FD:83:2E:30:DC:AC:B9:BE:37:53:7D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:21:c6:0a:43:f2:cb:bb:16:8d:a4:74:49:c8:d6:f5:9d:78: a2:66:c2:8c:96:be:63:f9:50:e7:7e:48:28:7f:c4:ed:e0:a1: 9b:d2:5a:97:99:ec:6e:30:57:fc:11:5d:d7:3e:82:f4:31:dc: fd:65:02:c1:a0:3b:f6:a2:bb:42:d3:29:45:4b:77:7d:23:a2: 37:e6:77:44:33:88:78:64:a6:0e:6b:64:0c:dd:31:e5:15:fd: 36:88:24:10:1a:2a:df:c6:c8:8e:e8:3a:96:c7:c8:b4:e7:34: 89:a8:5d:42:95:78:ee:94:55:ee:4e:2f:e8:63:fe:11:0b:4c: e3:26:91:2d:0e:a6:c6:e3:31:0a:1b:75:62:cd:be:08:c1:cb: 8c:c1:c1:09:16:a4:c7:93:0a:ea:71:54:d2:ae:ae:cf:fc:e5: fc:56:5b:a7:80:d0:4e:85:64:33:f8:ed:3c:be:8e:4d:10:ab: 38:3f:25:59:78:d3:b8:52:90:9b:82:da:69:7b:1b:48:4f:47: 85:a8:c8:69:91:5d:47:dd:33:93:6c:b6:19:4a:83:5d:53:bb: 96:f4:f4:87:b2:91:1d:9c:2f:e9:3d:3a:03:2d:8e:06:46:62: 68:55:c5:b8:35:42:d8:8e:d0:7a:46:f4:66:1a:d5:ef:b0:27: 12:ee:ae:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBFy7fHZCZukmPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNzAyMzY1MloXDTI1MDgwNTAyMzY1MlowLzEtMCsGA1UEAxMk YzQ1Mjk0ODAtMzM2My00OWYwLThmNmItNTE4NzA0NDBkMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCuhbyVVopnOQlcC8tk1vKaP2fMTNACv+QOl y42vnXbF9ppBrBowl4AtSKB22s6L7V6kPaDMTVVWyc93DlgKfJ9bktf6FiX2e9Rf +y+BLET+rIb4+hDKfb7Kg4FcBBHY4xhTxTBuIMOmfMsLDYoGkOxtj4re4SjyY/Re EhQNQ10QYg1XrSxPmryzbCGRO03zfuZ0jnGWAqK9q73vAe+SmIEqO6YInRsuBk41 qKxIxuW1Gm1ZTNad7he/mYnzYxwGWbInRawafTb+9+IB2KS5U9M7Fvl+ryME33uA 1hW3+Dv57c7LUqfFqt+4Ih9eS9d5sVf+DnRGDted53AigvrC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVopyKiz3TN/YMuMNysub43U31kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTc4YzE0OGItM2JkOC0z MjEzLWFhMWUtMjNiZWFkMzE1MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGghxgpD8su7Fo2kdEnI1vWdeKJmwoyWvmP5UOd+SCh/xO3goZvSWpeZ 7G4wV/wRXdc+gvQx3P1lAsGgO/aiu0LTKUVLd30jojfmd0QziHhkpg5rZAzdMeUV /TaIJBAaKt/GyI7oOpbHyLTnNImoXUKVeO6UVe5OL+hj/hELTOMmkS0OpsbjMQob dWLNvgjBy4zBwQkWpMeTCupxVNKurs/85fxWW6eA0E6FZDP47Ty+jk0Qqzg/JVl4 07hSkJuC2ml7G0hPR4WoyGmRXUfdM5NsthlKg11Tu5b09IeykR2cL+k9OgMtjgZG YmhVxbg1QtiO0HpG9GYa1e+wJxLurqQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:56:05 2025 by rpki-client