$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa File: a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa (raw, json) Hash identifier: uFlqU0DxTZwPBnW/FDEVDnyw1uaELpympCFU+uH25FM= Subject key identifier: 82:EA:D8:16:15:95:AE:12:F5:F6:82:6C:2A:13:81:89:B8:C2:A0:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB86C294B0EFB701A1D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b8:6c:29:4b:0e:fb:70:1a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6709ba36-1f81-4e62-80a9-d4b25259904d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:1b:d6:6d:23:68:53:74:3c:d2:8e:46:2a: ab:6c:4c:2c:dd:34:aa:d7:c7:86:fd:de:8c:68:22: df:bd:7f:d7:3c:4d:37:5f:7b:b5:c1:9e:3b:7d:27: 1c:5c:a9:c5:e0:12:51:4d:99:61:74:2b:39:76:33: 7c:40:ed:0d:f3:79:52:69:52:b6:9d:fa:68:81:23: f1:5f:78:60:0e:6a:c3:fc:77:d5:26:b1:e9:26:d5: ed:a2:7f:7b:b7:a0:98:9a:ec:44:90:fd:1a:30:db: 5d:71:97:e4:65:a7:f9:60:3c:95:54:da:73:a9:56: 05:52:7c:2e:32:82:04:7f:ca:c1:b6:3f:98:65:1c: 23:01:ce:ca:a6:52:b7:ce:4c:41:52:33:29:e4:04: 5c:5a:56:b4:b5:96:6a:8e:16:a1:40:7e:32:5d:a5: 64:5f:fe:ac:88:66:a7:37:9b:d4:61:ed:b8:de:10: a1:ae:1e:86:a0:24:78:c0:68:1d:b9:36:c1:2f:14: 47:12:d0:93:98:a6:ec:3f:b9:4b:78:08:8d:c2:ff: 55:62:57:c5:7a:92:9a:98:84:5b:97:20:6f:87:e2: 0f:59:f6:03:75:18:b9:14:2e:2d:5e:50:6a:af:b2: 39:c8:16:f7:7b:ea:60:85:73:2b:82:e9:ad:27:96: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EA:D8:16:15:95:AE:12:F5:F6:82:6C:2A:13:81:89:B8:C2:A0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:19:b3:52:eb:bd:41:cb:3f:0e:9d:be:b0:b1:ca:80:7e:f1: 46:40:94:d3:87:d9:0f:36:b4:35:26:7b:76:83:24:fd:49:1a: a2:d1:20:ec:f7:e7:a8:9a:7c:04:19:72:d8:01:80:19:d4:3f: 1f:33:7f:dc:4c:11:d1:16:01:64:9a:28:a7:12:e0:70:70:b1: e9:48:5a:90:81:44:c2:c0:e3:17:a1:39:5c:9c:18:f0:be:e4: 52:9c:67:4e:20:f0:dc:ed:7a:9e:be:76:72:55:3a:6d:bd:e7: 2d:42:48:46:a4:5b:9d:d5:25:6e:11:2e:40:29:2b:8b:50:a5: 19:32:d4:e6:c3:bf:60:e0:b7:8d:db:27:94:54:c4:b8:ac:fd: c3:5c:d6:f6:a6:fb:6e:dd:2c:bb:c4:0e:66:24:26:d6:b8:6c: 8f:cb:92:14:5d:33:b4:34:5b:84:2c:5e:51:a1:47:b2:de:1a: e2:b9:b1:05:16:f8:9f:3d:a9:1e:94:ec:f3:35:53:2e:9e:09: d9:df:dc:7b:52:c5:3d:ed:60:ca:12:fd:97:13:74:ae:30:b2: 71:57:00:46:49:78:5d:b0:bf:fc:90:54:b0:5c:cd:33:59:ce: a3:0b:cf:aa:8e:21:3b:3a:05:f1:92:d3:52:c0:c6:d9:5c:cf: 87:a4:35:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurhsKUsO+3AaHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjcwOWJhMzYtMWY4MS00ZTYyLTgwYTktZDRiMjUyNTk5MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Yb1m0jaFN0PNKORiqrbEws3TSq18eG/d6M aCLfvX/XPE03X3u1wZ47fSccXKnF4BJRTZlhdCs5djN8QO0N83lSaVK2nfpogSPx X3hgDmrD/HfVJrHpJtXton97t6CYmuxEkP0aMNtdcZfkZaf5YDyVVNpzqVYFUnwu MoIEf8rBtj+YZRwjAc7KplK3zkxBUjMp5ARcWla0tZZqjhahQH4yXaVkX/6siGan N5vUYe243hChrh6GoCR4wGgduTbBLxRHEtCTmKbsP7lLeAiNwv9VYlfFepKamIRb lyBvh+IPWfYDdRi5FC4tXlBqr7I5yBb3e+pghXMrgumtJ5ZqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILq2BYVla4S9faCbCoTgYm4wqBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQ5NTc1MjAtOTM5Ny0z N2JiLWIwMmYtYmUyZTBlOWU0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4Zs1LrvUHLPw6dvrCxyoB+8UZAlNOH2Q82tDUme3aDJP1JGqLRIOz3 56iafAQZctgBgBnUPx8zf9xMEdEWAWSaKKcS4HBwselIWpCBRMLA4xehOVycGPC+ 5FKcZ04g8Nztep6+dnJVOm295y1CSEakW53VJW4RLkApK4tQpRky1ObDv2Dgt43b J5RUxLis/cNc1vam+27dLLvEDmYkJta4bI/LkhRdM7Q0W4QsXlGhR7LeGuK5sQUW +J89qR6U7PM1Uy6eCdnf3HtSxT3tYMoS/ZcTdK4wsnFXAEZJeF2wv/yQVLBczTNZ zqMLz6qOITs6BfGS01LAxtlcz4ekNWk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:15 2025 by rpki-client