$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa File: c81ecdd5-605b-3621-b645-cf3f099edbbf.roa (raw, json) Hash identifier: cxOej/bSgrU09/z5nsOIaDHVO4ht7vGEaAlBE48mb4E= Subject key identifier: 2F:B9:66:37:24:9C:F5:7A:2A:6D:32:F8:70:AA:B5:C5:E6:37:71:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA389C78988028D5A55A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:9c:78:98:80:28:d5:a5:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=3bcde052-3bf5-4a19-978b-791c9974b63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:d5:d6:93:e1:1a:ba:88:50:4d:0c:30:a9: c5:2d:32:c2:05:9f:e7:92:d0:8c:69:6c:78:65:6f: d7:b5:a1:7a:41:b9:8a:b2:6a:9a:a4:5c:06:9a:2c: 08:09:90:e2:aa:d6:98:88:51:ab:80:da:49:e3:d3: 6d:06:50:ef:13:0d:e0:65:ee:f3:16:14:9d:04:e0: 1b:15:7e:7c:da:66:e5:11:0a:01:6a:ad:84:a2:c9: fc:b0:a7:3e:3a:7c:c5:6b:66:d0:f0:8b:77:c4:01: 48:10:b3:0b:51:af:a8:73:35:81:2c:2e:d2:34:01: 21:05:e4:23:f3:82:73:c8:dd:c5:af:ac:13:81:7c: 94:48:fb:21:9e:95:24:a7:4c:d6:44:e2:08:c3:49: ac:0f:c1:12:d5:b3:ed:0f:d9:79:f9:c6:78:08:5d: 57:d3:50:84:ec:fe:3e:02:c8:e6:7c:a5:7e:da:89: c1:89:aa:62:22:c8:73:a9:33:de:3d:bc:1f:7e:be: 63:54:6d:49:50:1c:a0:29:59:11:64:1f:4b:cf:36: 21:d7:61:16:fc:bf:40:5a:05:e1:e4:33:f5:fe:e8: 41:c5:7d:be:f9:75:ad:fe:c9:d0:a8:56:1d:d5:d3: 49:6e:b2:50:ed:6a:58:6c:51:86:be:2a:1e:5a:ed: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B9:66:37:24:9C:F5:7A:2A:6D:32:F8:70:AA:B5:C5:E6:37:71:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b9:bc:a1:88:42:a8:c5:72:80:c2:7b:59:7a:41:16:fe:54: a9:03:bf:3d:12:7c:ee:e0:7b:a7:cb:3f:c5:84:d4:ac:72:2b: 02:c5:11:d0:b6:77:42:07:b2:52:89:4b:bb:d3:4a:df:8d:a0: 25:d7:b2:85:c4:c9:30:e6:64:0a:52:81:f1:ec:10:0f:f8:56: 44:63:5d:f3:51:cd:35:ce:35:ca:08:67:90:01:f5:fd:eb:7e: e3:e3:4e:27:d0:10:7e:de:21:90:92:c9:68:fe:5f:f0:a7:d7: e7:db:64:87:56:71:de:09:0b:9d:c7:c3:b6:9b:f5:4d:9e:34: 31:d4:0e:08:f7:79:47:36:56:84:a2:75:a4:1a:21:ce:9f:05: d7:99:67:e2:71:d3:42:39:9c:a5:ae:f0:8b:7b:ce:6a:a0:20: 8b:a0:80:55:d0:b0:dc:36:c9:e9:30:74:bd:53:9b:49:26:49: 2a:00:e9:8b:c3:59:52:d3:2e:f8:5a:2c:72:09:a6:c5:8e:bc: d4:7d:dc:2b:25:28:98:c0:c9:d2:46:10:36:72:03:43:7c:5a: 31:08:3a:ae:10:8c:9f:62:6d:71:14:4c:18:fb:17:71:90:ff: 5e:81:00:0a:f4:32:29:35:bd:54:e3:15:00:a5:e5:17:49:5e: 1a:4b:7a:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jiceJiAKNWlWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk M2JjZGUwNTItM2JmNS00YTE5LTk3OGItNzkxYzk5NzRiNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj7V1pPhGrqIUE0MMKnFLTLCBZ/nktCMaWx4 ZW/XtaF6QbmKsmqapFwGmiwICZDiqtaYiFGrgNpJ49NtBlDvEw3gZe7zFhSdBOAb FX582mblEQoBaq2Eosn8sKc+OnzFa2bQ8It3xAFIELMLUa+oczWBLC7SNAEhBeQj 84JzyN3Fr6wTgXyUSPshnpUkp0zWROIIw0msD8ES1bPtD9l5+cZ4CF1X01CE7P4+ AsjmfKV+2onBiapiIshzqTPePbwffr5jVG1JUBygKVkRZB9LzzYh12EW/L9AWgXh 5DP1/uhBxX2++XWt/snQqFYd1dNJbrJQ7WpYbFGGvioeWu0QOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+5ZjcknPV6Km0y+HCqtcXmN3HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzgxZWNkZDUtNjA1Yi0z NjIxLWI2NDUtY2YzZjA5OWVkYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa5vKGIQqjFcoDCe1l6QRb+VKkDvz0SfO7ge6fLP8WE1KxyKwLFEdC2 d0IHslKJS7vTSt+NoCXXsoXEyTDmZApSgfHsEA/4VkRjXfNRzTXONcoIZ5AB9f3r fuPjTifQEH7eIZCSyWj+X/Cn1+fbZIdWcd4JC53Hw7ab9U2eNDHUDgj3eUc2VoSi daQaIc6fBdeZZ+Jx00I5nKWu8It7zmqgIIuggFXQsNw2yekwdL1Tm0kmSSoA6YvD WVLTLvhaLHIJpsWOvNR93CslKJjAydJGEDZyA0N8WjEIOq4QjJ9ibXEUTBj7F3GQ /16BAAr0Mik1vVTjFQCl5RdJXhpLejY= -----END CERTIFICATE-----Generated at Mon Jun 16 05:03:25 2025 by rpki-client