$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa File: eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json) Hash identifier: FK0XaqDtkmmaY8Nrtw+CbdVgZiE5QfiMwwxrlP6Ygg8= Subject key identifier: A6:15:2E:7C:42:38:E4:EB:15:45:BE:AA:A7:56:01:DD:66:94:21:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5E0FDBD62428B5DA7780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5e:0f:db:d6:24:28:b5:da:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=329cadec-a7df-4978-ba72-4deecfa3c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:fb:9a:8b:b5:c7:77:e1:4d:3f:c8:95:b5: a4:bb:c7:3e:8b:8c:a8:77:5c:b3:4a:1e:55:5f:fe: c5:ae:06:4c:3f:76:c1:c3:ae:89:e8:73:f1:29:f9: da:bb:21:08:9a:5c:ef:75:3c:cf:db:ff:cd:c8:8e: bb:ae:8b:7f:8b:ce:b5:35:0e:bb:0f:72:d9:9c:37: 8f:3e:5e:de:c9:78:11:54:39:d6:96:d9:b1:7d:9d: f2:3e:a7:da:7c:09:bd:0c:f4:37:f8:73:29:ec:3b: 52:db:b9:43:02:20:84:a5:b7:22:97:24:c2:e1:fc: eb:d4:4b:20:ac:07:31:de:dd:a2:a1:ca:5a:5f:47: ef:5b:ae:5f:60:4b:aa:81:9d:af:2d:07:b9:07:75: e2:8e:21:7f:68:84:7d:f6:94:0b:1e:65:ad:f2:ff: 24:30:08:95:85:be:2b:5f:05:93:bc:e6:6c:a6:d5: 8f:9f:ca:66:66:da:40:90:e0:4e:7f:39:ec:d6:ad: d8:6d:c1:4d:7e:14:e8:d3:e0:aa:c6:cc:ac:90:1b: b1:86:b2:a7:bc:2b:f9:7d:f2:2d:fe:a7:ed:0b:57: 55:96:37:9e:69:dc:ca:39:57:a0:2f:44:27:4b:4b: e8:b3:20:32:4b:d5:06:bf:d8:3a:83:77:93:0e:c9: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:2E:7C:42:38:E4:EB:15:45:BE:AA:A7:56:01:DD:66:94:21:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:73:fc:f1:73:10:2c:59:a7:9a:47:56:2a:72:5c:a3:c8:2c: 3d:1d:9e:2a:21:ee:b8:6a:53:a3:4b:bf:2c:71:5e:5d:56:f8: 4f:a4:d5:50:89:17:8e:26:6b:f9:7b:48:e4:20:b1:65:50:05: c7:bb:75:c7:5a:91:86:ce:22:63:ce:cb:70:87:42:a0:bb:05: e9:6b:99:d2:0e:33:a0:a4:ea:fb:2d:33:ac:25:cd:ba:e6:c5: e3:0f:f0:16:21:c8:4f:cd:b8:72:ea:1a:19:01:bd:ee:97:64: d7:8f:90:79:84:08:b7:28:38:50:cb:03:87:68:00:c5:da:27: 60:f4:a3:21:2e:72:52:dd:44:25:94:92:ae:3b:1a:2f:2a:9a: 56:e3:b5:6f:7e:41:05:52:20:85:91:38:46:dc:2f:4a:5f:b1: 61:c5:30:32:f3:24:12:89:6c:5f:ca:fb:6f:f3:19:2a:70:08: ff:2e:91:e5:1a:c8:d7:05:8c:4f:8a:e8:6f:f8:51:25:e2:05: e4:3c:32:86:04:c8:05:44:bb:f7:26:a5:0d:59:e2:02:91:f5: 8c:02:d4:37:d9:68:3a:25:48:cf:52:03:22:d4:f7:79:93:44: b5:bb:06:98:14:49:7e:4c:e5:10:2a:c8:72:63:a2:58:c9:e7: 89:bf:d8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku14P29YkKLXad4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzI5Y2FkZWMtYTdkZi00OTc4LWJhNzItNGRlZWNmYTNjOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q/7mou1x3fhTT/IlbWku8c+i4yod1yzSh5V X/7FrgZMP3bBw66J6HPxKfnauyEImlzvdTzP2//NyI67rot/i861NQ67D3LZnDeP Pl7eyXgRVDnWltmxfZ3yPqfafAm9DPQ3+HMp7DtS27lDAiCEpbcilyTC4fzr1Esg rAcx3t2iocpaX0fvW65fYEuqgZ2vLQe5B3XijiF/aIR99pQLHmWt8v8kMAiVhb4r XwWTvOZsptWPn8pmZtpAkOBOfzns1q3YbcFNfhTo0+CqxsyskBuxhrKnvCv5ffIt /qftC1dVljeeadzKOVegL0QnS0vosyAyS9UGv9g6g3eTDsnz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYVLnxCOOTrFUW+qqdWAd1mlCFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJz/PFzECxZp5pHVipyXKPILD0dnioh7rhqU6NLvyxxXl1W+E+k1VCJ F44ma/l7SOQgsWVQBce7dcdakYbOImPOy3CHQqC7BelrmdIOM6Ck6vstM6wlzbrm xeMP8BYhyE/NuHLqGhkBve6XZNePkHmECLcoOFDLA4doAMXaJ2D0oyEuclLdRCWU kq47Gi8qmlbjtW9+QQVSIIWROEbcL0pfsWHFMDLzJBKJbF/K+2/zGSpwCP8ukeUa yNcFjE+K6G/4USXiBeQ8MoYEyAVEu/cmpQ1Z4gKR9YwC1DfZaDolSM9SAyLU93mT RLW7BpgUSX5M5RAqyHJjoljJ54m/2Cs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:01 2025 by rpki-client