$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa File: 9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa (raw, json) Hash identifier: ijyR9yGpp7vnRYcSGAz+EMcYhqC+urjwsKxVH+UExHY= Subject key identifier: A6:EE:CF:23:96:08:B3:D5:6D:3F:B3:51:E3:07:02:01:E4:BF:1D:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117DB0A7DE28B2FCDB3000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7d:b0:a7:de:28:b2:fc:db:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3d88edfe-66d0-49c6-bf04-67fa6622e912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:5e:d8:ea:d5:d9:61:1a:5d:d5:48:eb:d1: 07:d1:e8:c0:d5:61:85:33:cb:6a:ed:6e:58:a1:58: fa:66:b6:05:96:16:94:41:10:99:c0:2b:38:11:3f: e2:3f:e2:04:95:bd:57:a3:55:05:44:2c:13:a4:3c: ed:cb:4d:16:1b:be:30:9c:96:2c:9d:dd:67:36:49: 8c:8b:48:91:9c:6b:10:3c:5f:7b:7c:a1:1b:ad:55: 13:32:60:ee:c8:2e:93:7f:cc:d6:60:cb:14:8d:14: a2:73:35:ec:81:10:a0:62:0a:06:ca:8a:5f:1b:c3: 5e:4c:8c:10:b5:66:b8:2f:00:f2:b5:fd:58:f6:c7: 28:bb:c8:b5:43:56:98:f5:0c:ba:95:b0:2e:d4:8d: b7:c9:b3:57:fa:06:3a:29:c1:f5:c8:99:d3:e9:44: c5:ca:e0:6c:fe:51:0f:67:d1:a3:c3:b1:30:fc:c4: c2:31:39:18:ef:c7:88:71:ca:ea:4c:02:85:0c:a9: 16:88:72:2d:f5:6c:95:d5:de:7b:92:62:03:e3:bd: 9e:bf:48:d8:5a:99:2f:42:9e:4c:73:50:88:66:7f: 50:93:79:48:f6:86:94:41:d5:21:f9:6b:9c:13:73: 61:a2:e3:23:a0:2e:ba:24:03:a6:98:50:28:5f:67: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EE:CF:23:96:08:B3:D5:6D:3F:B3:51:E3:07:02:01:E4:BF:1D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8f:21:30:43:7f:5a:48:74:9e:13:73:4e:73:ec:a1:c9:ef: 11:e1:bd:96:38:99:aa:09:4e:af:2f:0a:2c:7c:4f:d5:36:a5: cd:d8:a6:f8:21:a3:0f:0c:76:45:91:02:bb:65:c1:ca:34:e0: e9:da:83:ac:d9:75:dc:18:d8:15:45:1d:38:cf:ae:eb:50:aa: 11:54:97:f7:02:16:41:46:d6:c0:f4:3b:76:c6:46:f3:54:2d: ef:46:76:c6:9a:0c:c8:66:b7:1b:dc:5a:b2:f7:31:03:ef:5f: 4f:d8:c5:2f:d6:05:f9:1a:bd:fd:8f:22:aa:32:35:5d:72:ba: aa:77:50:f2:a8:a2:35:38:64:58:b9:94:d2:db:b7:7c:52:dc: ba:91:51:bd:dc:f7:11:31:23:a5:6f:d5:45:37:81:dc:cc:38: 06:a9:41:6c:05:de:4f:72:5b:40:d5:90:25:50:3c:e2:70:52: 6e:ae:7a:5f:d2:c1:2d:84:99:c3:6f:99:30:dd:d8:d6:03:0e: f8:24:4e:aa:f0:bd:a0:bd:29:a7:7a:6d:bd:34:01:e6:01:2e: d5:6a:73:74:0c:7b:6d:0c:f9:0f:b9:a6:2b:ef:99:c6:6c:dd: 4d:7d:ce:c3:a4:a4:85:67:da:7f:64:65:1f:e4:cd:4d:bc:b9: 5a:dc:90:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX2wp94osvzbMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2Q4OGVkZmUtNjZkMC00OWM2LWJmMDQtNjdmYTY2MjJlOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM1e2OrV2WEaXdVI69EH0ejA1WGFM8tq7W5Y oVj6ZrYFlhaUQRCZwCs4ET/iP+IElb1Xo1UFRCwTpDzty00WG74wnJYsnd1nNkmM i0iRnGsQPF97fKEbrVUTMmDuyC6Tf8zWYMsUjRSiczXsgRCgYgoGyopfG8NeTIwQ tWa4LwDytf1Y9scou8i1Q1aY9Qy6lbAu1I23ybNX+gY6KcH1yJnT6UTFyuBs/lEP Z9Gjw7Ew/MTCMTkY78eIccrqTAKFDKkWiHIt9WyV1d57kmID472ev0jYWpkvQp5M c1CIZn9Qk3lI9oaUQdUh+WucE3NhouMjoC66JAOmmFAoX2cjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbuzyOWCLPVbT+zUeMHAgHkvx2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1NjhkMTEtYmMxZS0z NGQ4LWE3ZGItMGRmYWI5MDAxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqPITBDf1pIdJ4Tc05z7KHJ7xHhvZY4maoJTq8vCix8T9U2pc3Ypvgh ow8MdkWRArtlwco04Onag6zZddwY2BVFHTjPrutQqhFUl/cCFkFG1sD0O3bGRvNU Le9GdsaaDMhmtxvcWrL3MQPvX0/YxS/WBfkavf2PIqoyNV1yuqp3UPKoojU4ZFi5 lNLbt3xS3LqRUb3c9xExI6Vv1UU3gdzMOAapQWwF3k9yW0DVkCVQPOJwUm6uel/S wS2EmcNvmTDd2NYDDvgkTqrwvaC9Kad6bb00AeYBLtVqc3QMe20M+Q+5pivvmcZs 3U19zsOkpIVn2n9kZR/kzU28uVrckDg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:19 2025 by rpki-client