$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa File: 978c148b-3bd8-3213-aa1e-23bead315038.roa (raw, json) Hash identifier: nE0oV0O+z7H+qQ+n34g82dA1pTs582XnMufb8S+ymZo= Subject key identifier: F6:4B:1B:DB:6A:A5:F4:D5:F0:8E:C1:34:DA:D4:6B:E5:88:35:EC:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584AA590E856DE2361707907B180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:e8:56:de:23:61:70:79:07:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=9c766b2d-6010-446d-a7e5-9d6b7e68b564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:f1:de:af:de:4f:6b:f0:6e:4b:ce:f4:2e: 3e:ea:55:66:dd:f3:2f:69:a2:c0:38:34:ea:1d:1c: b3:c0:d7:ab:df:30:f3:18:fc:7c:1c:2d:bd:0e:fc: 30:98:00:05:62:33:3f:b4:67:6a:15:ad:62:94:96: 9d:30:63:3e:8a:d1:0b:16:7b:65:1c:da:e2:b8:27: 09:ec:05:5c:28:0b:2d:09:2d:6d:e8:f4:b0:90:c1: 1c:bd:5f:d7:89:d5:ef:6f:3d:a2:a8:5c:5c:00:ef: f1:e1:de:8f:1a:74:7d:e6:21:bf:ef:76:08:dc:3c: 2a:9a:60:1a:37:98:74:d8:6d:b2:1f:42:bd:69:9c: 53:80:9e:fb:56:a3:71:ca:8c:bc:c2:c3:2c:c8:d1: bb:49:57:c5:7f:59:8f:f5:4b:2c:f4:03:9d:0b:e1: 3d:5f:bd:cc:e2:de:07:04:a4:b3:ba:95:3d:80:08: bd:9c:aa:36:5a:dc:b5:17:25:c9:b1:cf:2b:c8:4d: 0e:53:5b:2c:54:d7:74:20:17:c6:2f:60:a9:df:30: 71:08:ca:58:95:b2:54:0c:2a:2c:23:ca:74:f1:4e: e6:70:f5:d5:2a:ab:da:a0:4d:c9:ef:b5:e7:49:8e: 27:75:20:4a:d5:5f:75:e2:18:11:65:3f:17:f7:c4: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:1B:DB:6A:A5:F4:D5:F0:8E:C1:34:DA:D4:6B:E5:88:35:EC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:ca:59:21:68:6a:a1:ea:38:c6:d0:8c:84:bf:6c:78:ed: 77:17:4e:08:cc:e4:69:d0:53:dc:89:39:6e:83:52:e9:82:1b: 04:34:ce:60:a9:10:0e:f9:f5:48:51:ff:f3:32:de:32:11:aa: d7:3b:a5:71:6e:35:f9:f2:fa:82:b0:bb:22:64:18:27:79:34: 4f:b8:87:84:d0:01:44:b3:95:6a:75:90:37:50:d9:55:fa:54: 57:14:c8:92:59:9f:9c:33:a8:f5:a5:8a:5a:21:95:ad:86:58: e1:ee:24:96:37:6e:60:d0:7d:ae:ab:a5:dd:fb:3f:b3:3f:43: e8:0d:21:88:d2:3c:55:8b:05:6e:8c:0b:10:66:34:80:74:48: 44:3c:61:78:d2:40:26:bf:75:39:49:6c:a9:a7:29:81:01:21: 22:9a:4f:ea:b1:3e:ec:df:62:4e:fe:ff:0a:4c:68:b3:33:24: 68:a2:cb:52:32:78:23:88:21:81:f1:d4:1b:cb:82:92:46:42: 24:f4:02:35:b8:23:29:9c:13:8c:24:08:0e:34:cf:fc:86:80: b6:00:6f:e0:bd:3a:6c:e4:72:fb:1c:13:a7:5d:a0:fb:99:4a: 0b:77:b9:0b:f6:42:07:54:a0:6e:13:fd:38:fd:54:9c:2b:47: 76:a2:0e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkOhW3iNhcHkHsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk OWM3NjZiMmQtNjAxMC00NDZkLWE3ZTUtOWQ2YjdlNjhiNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBDx3q/eT2vwbkvO9C4+6lVm3fMvaaLAODTq HRyzwNer3zDzGPx8HC29DvwwmAAFYjM/tGdqFa1ilJadMGM+itELFntlHNriuCcJ 7AVcKAstCS1t6PSwkMEcvV/XidXvbz2iqFxcAO/x4d6PGnR95iG/73YI3DwqmmAa N5h02G2yH0K9aZxTgJ77VqNxyoy8wsMsyNG7SVfFf1mP9Uss9AOdC+E9X73M4t4H BKSzupU9gAi9nKo2Wty1FyXJsc8ryE0OU1ssVNd0IBfGL2Cp3zBxCMpYlbJUDCos I8p08U7mcPXVKqvaoE3J77XnSY4ndSBK1V914hgRZT8X98TvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZLG9tqpfTV8I7BNNrUa+WINez4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTc4YzE0OGItM2JkOC0z MjEzLWFhMWUtMjNiZWFkMzE1MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH9ylkhaGqh6jjG0IyEv2x47XcXTgjM5GnQU9yJOW6DUumCGwQ0zmCp EA759UhR//My3jIRqtc7pXFuNfny+oKwuyJkGCd5NE+4h4TQAUSzlWp1kDdQ2VX6 VFcUyJJZn5wzqPWlilohla2GWOHuJJY3bmDQfa6rpd37P7M/Q+gNIYjSPFWLBW6M CxBmNIB0SEQ8YXjSQCa/dTlJbKmnKYEBISKaT+qxPuzfYk7+/wpMaLMzJGiiy1Iy eCOIIYHx1BvLgpJGQiT0AjW4IymcE4wkCA40z/yGgLYAb+C9OmzkcvscE6ddoPuZ Sgt3uQv2QgdUoG4T/Tj9VJwrR3aiDtE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:54 2025 by rpki-client