$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa File: e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa (raw, json) Hash identifier: iJl5lCxvCY7AQnLzHxM8YidF5THa1KFzwWJZnX3RVk0= Subject key identifier: 88:57:B4:21:AB:2E:29:02:8F:D8:A5:FF:4C:DD:55:B5:8A:A2:D7:5E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB70BDB3D530D46ABD87B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:70:bd:b3:d5:30:d4:6a:bd:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=892261aa-3a32-4248-bd87-f32fa3422909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:f3:78:89:04:05:8a:88:81:2b:16:96:25: 60:44:2f:90:1c:b3:1d:1d:13:b7:5d:fe:0c:61:e9: 73:4c:94:2f:fc:e6:40:ca:50:3c:64:52:68:9a:3a: ef:93:ad:33:8e:e7:7c:35:72:55:bb:11:b3:3e:9a: 5a:df:0b:20:6e:44:f9:13:3c:55:be:bb:91:8a:c3: c8:8a:d8:d0:2d:8e:8d:61:01:26:16:6c:09:81:9b: 05:db:5c:be:a7:1b:78:51:ea:76:58:f2:09:be:6c: 19:2f:10:de:bd:95:22:97:07:0b:cb:80:99:52:64: 52:dd:4f:a0:b9:45:98:e4:70:e3:ef:a2:70:0e:af: b1:26:8b:87:59:8b:6b:5c:2d:b4:cf:a3:e7:e5:80: c5:0c:43:e8:67:4a:98:4a:53:b3:51:a7:1a:e5:9a: 0a:f2:16:e5:10:b3:6d:b2:a7:e5:1c:df:62:9b:f5: 1f:40:3c:6a:a3:36:6b:ba:9b:65:57:54:4d:44:f9: 30:65:06:4d:84:6c:97:83:83:e5:0e:75:e1:67:ee: 11:86:f6:b7:8d:b4:f4:5c:b4:d8:56:14:0a:27:21: f9:8d:91:84:1d:94:92:40:1a:8a:ac:82:3d:c2:d1: 79:1d:b6:6d:73:a7:13:5b:fa:5f:9d:d9:7a:cf:e5: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:B4:21:AB:2E:29:02:8F:D8:A5:FF:4C:DD:55:B5:8A:A2:D7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:27:80:8b:3a:f3:59:68:e4:d1:87:71:eb:a5:5a:1e:55:4f: c4:89:87:75:32:4b:44:61:73:04:af:46:3b:aa:0e:ff:fa:79: 2f:9d:33:51:97:97:07:b6:31:e3:56:27:9e:62:3d:65:9a:b6: de:eb:2f:d9:5c:af:3a:1f:67:e5:d7:ff:65:8d:32:dd:03:60: 2d:72:e4:c8:8c:f4:7e:fc:1f:4e:64:81:10:ba:1f:10:19:40: 08:7c:98:60:09:38:e7:61:4f:9d:d2:0c:33:f2:7c:62:fb:db: 8c:5f:cc:73:f8:93:ee:93:e9:3f:d2:2a:a6:da:d3:ce:72:98: 2f:3a:cd:85:e8:c6:0f:1d:97:e4:67:d5:e6:af:d2:46:86:6e: 06:ba:11:da:c9:cf:5d:67:af:74:68:f2:15:d9:30:17:1f:6d: 14:ea:6d:a7:59:c7:8c:99:72:f5:f7:cc:e9:33:20:36:b8:0e: 70:7f:3f:4c:62:83:d0:e9:7e:5c:e2:60:13:f4:86:d4:28:fc: 84:07:a2:76:78:99:59:27:44:dc:10:a8:45:7e:c2:5e:53:5b: 13:fe:d6:44:49:74:01:6d:54:f0:17:dc:3c:3c:44:3c:8e:99: 5c:25:e4:9b:ee:3e:90:da:ae:92:b6:d5:a7:18:56:91:3f:43: 94:12:99:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3C9s9Uw1Gq9h7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODkyMjYxYWEtM2EzMi00MjQ4LWJkODctZjMyZmEzNDIyOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vnzeIkEBYqIgSsWliVgRC+QHLMdHRO3Xf4M YelzTJQv/OZAylA8ZFJomjrvk60zjud8NXJVuxGzPppa3wsgbkT5EzxVvruRisPI itjQLY6NYQEmFmwJgZsF21y+pxt4Uep2WPIJvmwZLxDevZUilwcLy4CZUmRS3U+g uUWY5HDj76JwDq+xJouHWYtrXC20z6Pn5YDFDEPoZ0qYSlOzUaca5ZoK8hblELNt sqflHN9im/UfQDxqozZruptlV1RNRPkwZQZNhGyXg4PlDnXhZ+4Rhva3jbT0XLTY VhQKJyH5jZGEHZSSQBqKrII9wtF5HbZtc6cTW/pfndl6z+XoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhXtCGrLikCj9il/0zdVbWKotdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTkxZWYzYTktZTdhMi0z NTA3LTlmMzMtMjRiMDA1M2VhM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsngIs681lo5NGHceulWh5VT8SJh3UyS0RhcwSvRjuqDv/6eS+dM1GX lwe2MeNWJ55iPWWatt7rL9lcrzofZ+XX/2WNMt0DYC1y5MiM9H78H05kgRC6HxAZ QAh8mGAJOOdhT53SDDPyfGL724xfzHP4k+6T6T/SKqba085ymC86zYXoxg8dl+Rn 1eav0kaGbga6EdrJz11nr3Ro8hXZMBcfbRTqbadZx4yZcvX3zOkzIDa4DnB/P0xi g9DpflziYBP0htQo/IQHonZ4mVknRNwQqEV+wl5TWxP+1kRJdAFtVPAX3Dw8RDyO mVwl5JvuPpDarpK21acYVpE/Q5QSmbw= -----END CERTIFICATE-----Generated at Mon Jun 16 12:24:48 2025 by rpki-client