$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa File: e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa (raw, json) Hash identifier: 2gB5PoVWVrWnlBYdSukRWmRqleOJ/J26eLJRS0YZLlg= Subject key identifier: C4:5B:35:BB:8D:17:5B:33:4E:A5:80:FA:4C:B7:86:EB:4F:53:DB:6E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6D360A0AC3A151A471C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6d:36:0a:0a:c3:a1:51:a4:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=53daefa4-304b-4880-921e-60c2b9f9d8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:c7:9a:ce:93:68:9a:34:8b:1e:b9:a1:65: af:66:ff:86:14:61:c9:50:bc:c0:44:64:f8:2a:3d: c3:cd:ee:b8:c3:38:56:e8:d3:e9:14:a6:79:57:48: 05:bd:9c:37:43:9e:14:8b:b3:1f:1d:3d:b2:70:2d: 8b:1a:fb:70:bc:54:a0:01:ae:83:f3:9e:a1:4c:18: 83:90:5d:05:1d:b5:ce:7d:97:bd:40:b3:a4:ca:d8: 97:87:30:83:a4:17:76:0e:2c:7e:33:5d:cb:92:81: 20:c2:fa:a1:23:b9:fa:b6:45:fc:a7:f8:b2:94:c8: 05:ff:e0:c4:3e:19:9b:bb:8b:e9:6e:95:3b:c6:29: 62:6a:ef:0a:f6:58:30:dd:08:71:78:c6:ea:c3:d3: 8a:52:5d:c4:c0:3a:d3:8e:c4:92:83:37:a4:f0:4f: 28:a3:7f:05:07:e4:94:9f:a1:79:bb:ec:4d:e9:7e: aa:e7:b7:d6:04:04:04:47:51:bd:25:7c:4e:53:5e: 9c:2d:fc:8a:09:72:c1:64:76:8e:5b:e3:34:60:ef: f2:7a:79:d8:47:46:26:0d:b0:85:70:be:51:d4:2c: 3b:12:d9:1c:ac:2b:8e:b0:68:de:de:e3:9b:86:d8: aa:8c:3e:af:33:f0:36:f9:23:50:cf:b8:4e:53:b1: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:35:BB:8D:17:5B:33:4E:A5:80:FA:4C:B7:86:EB:4F:53:DB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:93:4f:fc:8b:06:28:49:6e:0a:cb:e5:e2:c9:36:e4:43:c9: ba:4b:c9:3f:d4:25:6f:8b:9e:ef:6b:c1:de:b0:d6:22:c3:3e: 29:dd:80:a7:8d:e7:c8:0b:2c:a8:d6:31:98:6e:0d:ca:2a:1b: c1:78:3c:d8:94:42:2d:36:c2:a8:04:37:49:d5:81:b4:01:d0: 1e:d3:e0:16:2a:22:53:6a:55:4a:8e:44:c8:f1:ef:66:27:8e: aa:4d:73:b8:93:98:93:b7:10:8e:88:d0:d3:68:cc:e7:42:b9: 63:30:ab:0c:0c:c8:b5:29:ad:68:ed:45:87:45:3d:5c:01:1c: 48:7d:62:22:c9:7c:90:1c:39:70:5e:18:58:1a:c5:0a:4f:61: d7:14:14:c0:d2:d7:5e:65:72:75:45:f8:6c:61:6e:5d:2d:79: 82:70:9b:56:3d:fb:2b:ae:08:98:d0:ab:ee:8c:00:1c:eb:64: b2:b0:75:55:04:83:09:2f:4f:b8:91:b3:a8:4f:fd:2b:69:0d: ad:1e:13:f1:52:61:6b:8e:51:25:06:36:ee:6d:d0:fc:e5:54: 51:6b:7a:5d:9f:25:59:f8:cd:8e:68:37:d9:6d:9b:ed:d7:18: 79:02:3a:0f:04:3f:15:31:fc:91:4e:e9:32:36:56:c6:43:e4: bb:13:58:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku202CgrDoVGkccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTNkYWVmYTQtMzA0Yi00ODgwLTkyMWUtNjBjMmI5ZjlkOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziPHms6TaJo0ix65oWWvZv+GFGHJULzARGT4 Kj3Dze64wzhW6NPpFKZ5V0gFvZw3Q54Ui7MfHT2ycC2LGvtwvFSgAa6D856hTBiD kF0FHbXOfZe9QLOkytiXhzCDpBd2Dix+M13LkoEgwvqhI7n6tkX8p/iylMgF/+DE Phmbu4vpbpU7xiliau8K9lgw3QhxeMbqw9OKUl3EwDrTjsSSgzek8E8oo38FB+SU n6F5u+xN6X6q57fWBAQER1G9JXxOU16cLfyKCXLBZHaOW+M0YO/yennYR0YmDbCF cL5R1Cw7EtkcrCuOsGje3uObhtiqjD6vM/A2+SNQz7hOU7HhtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRbNbuNF1szTqWA+ky3hutPU9tuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTMxYTQyMjctY2I4My0z NjRkLTg1NmItNGY1Y2M5ZWU3ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+TT/yLBihJbgrL5eLJNuRDybpLyT/UJW+Lnu9rwd6w1iLDPindgKeN 58gLLKjWMZhuDcoqG8F4PNiUQi02wqgEN0nVgbQB0B7T4BYqIlNqVUqORMjx72Yn jqpNc7iTmJO3EI6I0NNozOdCuWMwqwwMyLUprWjtRYdFPVwBHEh9YiLJfJAcOXBe GFgaxQpPYdcUFMDS115lcnVF+Gxhbl0teYJwm1Y9+yuuCJjQq+6MABzrZLKwdVUE gwkvT7iRs6hP/StpDa0eE/FSYWuOUSUGNu5t0PzlVFFrel2fJVn4zY5oN9ltm+3X GHkCOg8EPxUx/JFO6TI2VsZD5LsTWLY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:59 2025 by rpki-client