$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa File: d5fd37bd-341a-30b3-a5bf-c402e4909202.roa (raw, json) Hash identifier: WI+Gbi9HfMgwwJMFQlUrj/2eZHEBgC5spP08nEhCTJk= Subject key identifier: 2A:32:B6:39:57:82:32:07:37:F0:BC:D4:4C:E0:8F:D1:B0:87:6D:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122CE4733C6233D7D71340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2c:e4:73:3c:62:33:d7:d7:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ce8fc343-912a-4bc3-971a-f08abd54aca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:f6:80:52:9d:12:1a:45:3c:2d:14:c4:50: 49:77:4f:0f:2a:32:f4:59:cb:70:14:55:f6:46:d3: 16:48:0b:a6:9b:dd:6e:a6:32:d8:0d:7f:bf:15:45: 21:8b:3a:e7:06:1b:6c:ea:80:bd:89:d2:94:bf:6a: a9:b5:d8:3b:f9:37:01:18:4a:56:cd:22:6a:cb:d7: 14:6b:0e:60:be:c9:da:be:1c:15:8e:26:37:38:bf: b2:e7:d1:50:91:9c:fd:78:6a:28:8e:42:38:cc:df: 8f:5f:59:2d:b5:66:e1:08:a7:c8:b6:83:4f:ad:e2: f8:09:62:68:3a:aa:70:1a:63:f8:c3:5d:89:fd:55: 0f:bc:36:17:44:61:15:9b:70:72:23:94:fe:e9:fc: 5e:df:47:59:0b:f3:47:3b:a8:a2:b5:89:04:bb:83: 2a:84:2e:80:75:41:8e:1c:21:36:bd:2d:bb:c2:ef: 1e:a0:a4:6a:99:be:10:4c:d6:36:34:0c:59:13:72: 93:d4:01:79:40:9a:e9:ee:93:8b:83:7e:5e:b1:63: 29:48:2d:f7:06:b3:83:43:76:9f:10:ea:34:6f:b6: 1a:89:6b:61:a4:5a:b5:8a:6d:f5:c5:5c:1b:98:14: a3:0a:10:d7:d0:22:06:98:a2:7b:27:d7:c5:de:81: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:B6:39:57:82:32:07:37:F0:BC:D4:4C:E0:8F:D1:B0:87:6D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f6:08:be:1c:a0:d2:1e:e3:7b:1c:37:62:e9:b7:1e:cd:63: 85:04:9c:d3:51:23:5b:e9:6e:e2:75:1b:45:de:a5:a7:68:1b: 4c:9e:2e:ef:f6:e4:08:e7:ad:62:6c:54:6a:c2:42:8f:e9:2d: 0a:4b:9f:2a:f5:32:0a:d4:79:ce:74:2f:18:a9:c0:5f:23:c2: 63:7e:d8:28:0e:89:c2:5f:48:f5:39:2e:19:99:a5:8a:a6:b0: 34:32:39:c3:22:c4:98:c9:ea:a7:f4:47:50:de:71:21:7a:57: 38:33:a5:c6:62:c6:26:3c:bf:30:01:da:76:89:1c:de:a8:fc: 29:5a:08:f6:68:61:2e:3b:bb:3b:e0:67:01:c7:f3:41:97:f3: 7d:c0:28:96:bd:6e:b4:89:16:28:06:87:20:50:06:c3:a4:06: 6b:e3:fd:13:aa:3f:65:28:39:67:90:1a:23:a2:46:32:c1:d2: b0:df:d7:7e:74:be:30:42:f2:dc:2e:44:6a:7b:65:bb:f5:96: 4e:83:ac:59:da:58:21:7c:c0:f8:3d:46:a8:18:33:69:fa:5d: fd:e4:4d:d3:75:f2:a3:9e:a7:1e:1d:02:9d:e3:cc:bb:07:53: 1f:75:e3:e7:94:79:4d:d9:b8:8a:0c:c1:b1:e1:87:39:72:9a: 76:e0:bd:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEizkczxiM9fXE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2U4ZmMzNDMtOTEyYS00YmMzLTk3MWEtZjA4YWJkNTRhY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN32gFKdEhpFPC0UxFBJd08PKjL0WctwFFX2 RtMWSAumm91upjLYDX+/FUUhizrnBhts6oC9idKUv2qptdg7+TcBGEpWzSJqy9cU aw5gvsnavhwVjiY3OL+y59FQkZz9eGoojkI4zN+PX1kttWbhCKfItoNPreL4CWJo OqpwGmP4w12J/VUPvDYXRGEVm3ByI5T+6fxe30dZC/NHO6iitYkEu4MqhC6AdUGO HCE2vS27wu8eoKRqmb4QTNY2NAxZE3KT1AF5QJrp7pOLg35esWMpSC33BrODQ3af EOo0b7YaiWthpFq1im31xVwbmBSjChDX0CIGmKJ7J9fF3oHzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoytjlXgjIHN/C81Ezgj9Gwh21cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVmZDM3YmQtMzQxYS0z MGIzLWE1YmYtYzQwMmU0OTA5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH2CL4coNIe43scN2Lptx7NY4UEnNNRI1vpbuJ1G0XepadoG0yeLu/2 5AjnrWJsVGrCQo/pLQpLnyr1MgrUec50LxipwF8jwmN+2CgOicJfSPU5LhmZpYqm sDQyOcMixJjJ6qf0R1DecSF6VzgzpcZixiY8vzAB2naJHN6o/ClaCPZoYS47uzvg ZwHH80GX833AKJa9brSJFigGhyBQBsOkBmvj/ROqP2UoOWeQGiOiRjLB0rDf1350 vjBC8twuRGp7Zbv1lk6DrFnaWCF8wPg9RqgYM2n6Xf3kTdN18qOepx4dAp3jzLsH Ux914+eUeU3ZuIoMwbHhhzlymnbgvYc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:49 2025 by rpki-client