$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa File: b9223ba9-c001-3f64-a368-a9d91e996b1c.roa (raw, json) Hash identifier: b/IXDhIKcB5/VBwQR36cYCf5Jm+72mqu3AC5//sGBJA= Subject key identifier: EE:89:17:3B:06:01:AA:A1:1F:7D:98:79:A7:C0:07:E4:0A:37:19:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A006E9A040F8D037C1171600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa Signing time: Wed 23 Apr 2025 20:37:05 +0000 ROA not before: Wed 23 Apr 2025 20:37:05 +0000 ROA not after: Tue 22 Jul 2025 20:37:05 +0000 asID: 15169 IP address blocks: 172.253.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:06:e9:a0:40:f8:d0:37:c1:17:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 20:37:05 2025 GMT Not After : Jul 22 20:37:05 2025 GMT Subject: CN=5ffeb6ab-019e-4013-9a5b-9f7ae72ec3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:e9:7f:bf:b0:73:ec:f0:b0:3a:9d:ce:d8: 95:8a:99:36:2b:47:82:3d:89:4e:ff:93:49:51:f6: 48:c9:b7:26:53:41:ea:5c:2b:ef:fe:29:a6:9d:eb: 89:06:67:b5:a7:e4:1f:14:06:b3:b7:80:8f:47:55: 4e:51:27:c9:c9:8e:52:b0:61:ab:49:51:e8:b8:f4: 62:05:ca:88:db:f7:ae:be:8a:c6:f2:3a:eb:20:21: d6:46:6a:45:3f:fc:50:49:a7:0c:4f:7a:a4:1f:9a: e9:8f:39:32:40:3d:95:80:c0:fa:80:a8:67:82:cd: b2:f7:5e:8b:cf:d0:fe:49:2f:57:fd:04:19:ac:2e: 93:aa:84:39:2a:f9:7f:5a:ef:9f:0d:c0:82:81:cf: e5:3d:34:10:ac:67:f9:41:7f:fa:a9:fb:85:8a:7c: 5b:99:f7:e7:45:9b:3b:4c:1e:a0:da:3b:fd:50:5a: de:23:c4:2a:96:4d:d9:b1:36:a5:e4:fd:f9:a6:6c: 12:05:32:55:f8:a2:7b:a9:c3:84:8c:be:e1:35:77: 2c:41:f7:3a:98:79:a6:d3:c5:2f:b9:50:3d:62:2a: dc:11:f9:b8:c6:cb:86:a4:65:89:b7:59:94:14:45: 0c:e5:67:88:28:ba:e0:1c:71:51:52:24:52:65:66: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:17:3B:06:01:AA:A1:1F:7D:98:79:A7:C0:07:E4:0A:37:19:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:59:6f:b3:8c:93:81:4c:30:70:7a:eb:6f:7c:e7:ce:2a:1c: 47:c3:1d:9e:36:df:6a:6c:75:10:4e:13:05:44:c1:a8:ae:db: ab:08:2e:e1:7f:de:59:c0:38:1e:44:3f:f6:b5:7e:c7:92:a3: e2:04:ba:bb:e5:22:fb:49:f2:c6:84:4c:fe:01:6b:93:51:b9: 2a:d4:e6:c4:65:04:e5:e2:3b:e6:c5:06:89:7a:ab:ae:b3:8c: a0:20:5e:fa:bd:88:7b:a8:8a:df:8d:ed:d0:bc:c4:77:63:f4: a5:aa:a5:06:56:5d:78:f5:3d:36:90:a7:a0:18:a2:bf:03:e5: 92:de:f5:b5:09:6f:f4:5c:bd:ea:57:b7:e9:5d:f3:59:09:90: 02:6a:c1:71:98:3e:00:03:8f:a8:e0:b0:6c:e8:95:73:ab:c8: 87:2d:3d:36:6c:e6:e1:f3:82:76:71:f6:93:6d:49:1b:82:ef: 87:74:b5:42:df:ea:6f:b3:2f:9e:0b:6a:d8:d7:9c:be:6d:7b: a8:33:6f:93:1a:46:82:51:58:9c:87:bd:81:0b:1e:69:6b:aa: 73:8e:82:e3:51:66:74:d0:35:55:e0:e1:3e:e7:2b:b1:1e:70: 9f:51:75:48:7c:93:66:db:96:d6:12:45:be:16:21:dc:05:43: 1c:28:d7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgBumgQPjQN8EXFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzIwMzcwNVoXDTI1MDcyMjIwMzcwNVowLzEtMCsGA1UEAxMk NWZmZWI2YWItMDE5ZS00MDEzLTlhNWItOWY3YWU3MmVjM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Tpf7+wc+zwsDqdztiVipk2K0eCPYlO/5NJ UfZIybcmU0HqXCvv/immneuJBme1p+QfFAazt4CPR1VOUSfJyY5SsGGrSVHouPRi BcqI2/euvorG8jrrICHWRmpFP/xQSacMT3qkH5rpjzkyQD2VgMD6gKhngs2y916L z9D+SS9X/QQZrC6TqoQ5Kvl/Wu+fDcCCgc/lPTQQrGf5QX/6qfuFinxbmffnRZs7 TB6g2jv9UFreI8Qqlk3ZsTal5P35pmwSBTJV+KJ7qcOEjL7hNXcsQfc6mHmm08Uv uVA9YircEfm4xsuGpGWJt1mUFEUM5WeIKLrgHHFRUiRSZWZ67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6JFzsGAaqhH32YeafAB+QKNxn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjkyMjNiYTktYzAwMS0z ZjY0LWEzNjgtYTlkOTFlOTk2YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhZb7OMk4FMMHB66298584qHEfDHZ4232psdRBOEwVEwaiu26sILuF/ 3lnAOB5EP/a1fseSo+IEurvlIvtJ8saETP4Ba5NRuSrU5sRlBOXiO+bFBol6q66z jKAgXvq9iHuoit+N7dC8xHdj9KWqpQZWXXj1PTaQp6AYor8D5ZLe9bUJb/RcvepX t+ld81kJkAJqwXGYPgADj6jgsGzolXOryIctPTZs5uHzgnZx9pNtSRuC74d0tULf 6m+zL54LatjXnL5te6gzb5MaRoJRWJyHvYELHmlrqnOOguNRZnTQNVXg4T7nK7Ee cJ9RdUh8k2bbltYSRb4WIdwFQxwo16w= -----END CERTIFICATE-----Generated at Sat Apr 26 21:41:37 2025 by rpki-client