$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa File: c87c6bc1-87e9-3fd3-9602-ac677580c521.roa (raw, json) Hash identifier: tfv4OkdumB06fAaNUiKgV85vl2iEEbcDxqbRMqQT7K8= Subject key identifier: 0D:94:19:06:9B:FD:18:C9:3B:E1:87:9A:0C:22:DD:52:5D:76:47:65 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC69C4251FD63267EFC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c6:9c:42:51:fd:63:26:7e:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bab294ed-4fcb-47f6-9bf5-ba42bd6cc0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:b5:18:62:ba:d4:71:24:e1:a6:eb:28:7a: fa:c9:3a:51:30:7f:b6:93:37:d3:67:6c:2a:4a:79: 4b:3a:2a:ff:91:b4:cd:2d:46:e5:d3:6d:6d:70:e6: 90:8e:93:38:29:0f:27:cb:63:71:9d:d2:05:45:3a: 82:bb:75:7f:48:76:7c:26:86:9f:0f:9e:58:c8:63: ac:8d:fa:23:ba:bf:fd:7f:78:b8:43:26:cf:ac:47: 81:b7:ed:ba:f1:9c:b0:6c:26:e5:ef:cc:f9:c2:35: e8:33:3c:f4:7b:fe:78:d2:4b:41:58:54:22:74:18: f8:48:fe:2d:22:f1:fd:e4:35:ce:74:cd:b3:d8:4d: 10:64:35:52:39:f3:3d:fa:c4:ce:22:36:05:8d:0d: 10:85:61:6e:6b:13:83:d6:d9:77:4d:fa:40:96:67: 5a:d5:eb:b6:ed:5f:24:c8:50:13:d2:70:40:0b:37: 8a:51:57:31:94:de:b2:2d:b6:1b:9b:5c:22:2c:c6: 71:f3:7f:6f:36:a6:fa:96:02:01:1d:ba:78:b8:dd: 01:35:4b:f1:e9:b3:7d:4f:11:bc:bd:0c:f4:e7:c6: 34:7c:ab:c8:03:f0:7f:97:80:24:2c:d6:ef:db:45: 63:e7:e3:68:d6:88:d0:37:9c:4f:1e:0d:a1:67:31: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:19:06:9B:FD:18:C9:3B:E1:87:9A:0C:22:DD:52:5D:76:47:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:17:e0:7f:b0:54:ad:2e:62:7d:e0:62:aa:5b:d9:0b:2d:da: 94:09:e4:88:ac:98:0a:3c:a2:df:2f:e8:6f:af:bc:ad:ed:72: 92:2d:76:40:7c:17:7c:d1:66:d3:9b:ee:be:17:ae:f2:b3:5a: a0:88:bb:b5:9f:7b:58:bd:84:93:d5:04:52:ae:32:40:4a:5b: d0:b6:16:a7:df:a3:97:27:cd:d2:ca:8a:5a:69:d1:a6:bf:8e: 01:a1:be:95:e3:2a:b1:43:41:85:1c:f0:48:db:80:08:ac:31: 1c:60:42:64:1a:6f:fc:b6:42:1a:bd:02:b6:bd:14:29:94:72: 9b:1f:2f:4d:df:b6:d8:8d:bd:0a:e2:12:5e:f4:5e:55:fa:80: f6:4f:0f:fa:c7:f0:86:70:85:d1:e6:69:67:51:00:10:ad:ef: b9:09:80:09:b5:01:c8:a6:44:70:cd:58:03:8c:c2:10:d2:ae: 1b:a2:e5:e2:18:a2:a6:f0:3e:ef:96:52:e7:8c:36:21:57:21: a4:e5:00:22:88:96:c7:30:85:fb:70:5f:85:3d:fe:f7:9e:42: 3b:7d:49:f0:80:d4:f1:dc:05:62:b2:28:49:51:27:a8:7e:3d: 71:13:ff:6b:91:b7:05:f1:5c:4e:aa:06:2a:5a:07:00:c7:e8: 4c:77:b7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusacQlH9YyZ+/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmFiMjk0ZWQtNGZjYi00N2Y2LTliZjUtYmE0MmJkNmNjMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYS1GGK61HEk4abrKHr6yTpRMH+2kzfTZ2wq SnlLOir/kbTNLUbl021tcOaQjpM4KQ8ny2NxndIFRTqCu3V/SHZ8JoafD55YyGOs jfojur/9f3i4QybPrEeBt+268ZywbCbl78z5wjXoMzz0e/540ktBWFQidBj4SP4t IvH95DXOdM2z2E0QZDVSOfM9+sTOIjYFjQ0QhWFuaxOD1tl3TfpAlmda1eu27V8k yFAT0nBACzeKUVcxlN6yLbYbm1wiLMZx839vNqb6lgIBHbp4uN0BNUvx6bN9TxG8 vQz058Y0fKvIA/B/l4AkLNbv20Vj5+No1ojQN5xPHg2hZzEYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2UGQab/RjJO+GHmgwi3VJddkdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3YzZiYzEtODdlOS0z ZmQzLTk2MDItYWM2Nzc1ODBjNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIX4H+wVK0uYn3gYqpb2Qst2pQJ5IismAo8ot8v6G+vvK3tcpItdkB8 F3zRZtOb7r4XrvKzWqCIu7Wfe1i9hJPVBFKuMkBKW9C2Fqffo5cnzdLKilpp0aa/ jgGhvpXjKrFDQYUc8EjbgAisMRxgQmQab/y2Qhq9Ara9FCmUcpsfL03fttiNvQri El70XlX6gPZPD/rH8IZwhdHmaWdRABCt77kJgAm1AcimRHDNWAOMwhDSrhui5eIY oqbwPu+WUueMNiFXIaTlACKIlscwhftwX4U9/veeQjt9SfCA1PHcBWKyKElRJ6h+ PXET/2uRtwXxXE6qBipaBwDH6Ex3txM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:40 2025 by rpki-client