$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json) Hash identifier: PQaLvRZJ7WdYzg/PArv4ITAXvy7F/Df/D1WE6AKfu7s= Subject key identifier: 53:5D:5A:4C:C3:6B:20:F7:38:D6:B9:BF:CC:08:9C:96:1F:17:5A:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F2E373054A4262D15300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:e3:73:05:4a:42:62:d1:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6600e2d9-439f-4375-a1a2-a58a2146d0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:ff:fa:d4:65:2c:b2:21:42:4a:79:5a:bf: fa:22:5a:57:28:9c:76:03:f4:9c:4f:04:36:fe:37: ac:f0:27:69:ac:cc:f0:7f:aa:c4:a9:f8:e8:d3:92: 07:ec:d0:b7:2e:af:8e:d7:8a:10:07:fb:6c:5d:6c: 9c:bb:0e:20:0a:39:5f:5d:52:b6:b7:d2:60:98:3f: 6b:df:57:7b:44:f0:41:f8:f6:be:d9:33:92:7e:fe: e0:67:6d:77:53:eb:1f:65:aa:39:fd:b5:6f:2d:f7: e6:95:90:1e:6e:89:c4:97:51:6d:ce:04:a0:07:ef: ad:13:c2:79:dd:8f:a7:a5:a2:1f:ca:21:2a:b7:77: 36:09:e5:76:ec:f8:e4:64:b4:b3:f9:0a:52:06:ed: a1:e5:48:0a:c6:de:da:a5:07:c7:a6:5f:3d:c7:40: 87:ef:18:6c:61:72:60:4d:90:fd:7b:b0:4e:26:82: d1:7e:f7:ca:96:cf:c3:f0:70:7c:6e:84:71:a1:5b: dd:64:ff:fa:d0:9d:4d:f5:97:80:dc:4d:1c:82:91: 92:37:db:84:ac:53:c1:de:ba:95:40:4b:a2:28:b6: fb:11:7b:7e:aa:d6:ad:4c:30:7f:a1:92:2c:13:c9: 11:32:22:6a:74:1c:39:ef:37:4d:2f:3d:0b:16:d6: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:5A:4C:C3:6B:20:F7:38:D6:B9:BF:CC:08:9C:96:1F:17:5A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ba:95:85:e5:66:03:c9:5e:b5:63:1d:7c:e5:42:05:7a:2f: f7:59:35:5d:6f:5f:74:55:93:71:0b:99:b2:99:f5:0a:c6:0d: c9:76:96:ff:c5:6d:b5:3f:0d:85:d0:1f:95:f4:af:76:79:27: 2b:7b:d8:1f:2c:4f:f7:1e:eb:be:7c:db:2d:37:35:84:4b:54: 23:81:84:be:af:ec:d9:02:9e:4f:a1:ad:dc:8f:a2:f0:44:e9: 68:15:19:e2:59:f6:8d:b4:54:aa:87:4f:29:dd:0d:ed:d6:dd: 24:b9:1b:bd:c9:49:22:5e:21:6f:30:2c:31:e5:5b:1b:0f:77: ea:cd:a4:d8:b3:ce:fd:3c:b1:61:7d:9b:0d:f0:1b:0e:fe:53: 12:5e:f4:9c:50:ca:70:48:70:ac:ac:17:a1:d1:b7:04:c5:80: 80:de:0f:e6:2f:6c:15:00:b4:c8:c2:6a:fe:20:d3:28:36:7f: 9c:84:a5:58:42:39:85:6f:0b:7e:49:22:38:98:81:4a:58:71: 03:0c:16:b9:f6:26:f9:db:16:44:7e:7d:af:e5:d0:90:87:6d: 22:78:3f:d7:d1:c1:85:f4:01:fd:09:49:4c:98:30:60:53:5d: 0a:a7:5c:6e:72:f2:e1:74:55:92:2d:ef:a5:30:16:75:83:2b: 85:a1:aa:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPLjcwVKQmLRUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NjYwMGUyZDktNDM5Zi00Mzc1LWExYTItYTU4YTIxNDZkMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG7/+tRlLLIhQkp5Wr/6IlpXKJx2A/ScTwQ2 /jes8CdprMzwf6rEqfjo05IH7NC3Lq+O14oQB/tsXWycuw4gCjlfXVK2t9JgmD9r 31d7RPBB+Pa+2TOSfv7gZ213U+sfZao5/bVvLffmlZAebonEl1FtzgSgB++tE8J5 3Y+npaIfyiEqt3c2CeV27PjkZLSz+QpSBu2h5UgKxt7apQfHpl89x0CH7xhsYXJg TZD9e7BOJoLRfvfKls/D8HB8boRxoVvdZP/60J1N9ZeA3E0cgpGSN9uErFPB3rqV QEuiKLb7EXt+qtatTDB/oZIsE8kRMiJqdBw57zdNLz0LFtbT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNdWkzDayD3ONa5v8wInJYfF1pNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDkxNWE3OGMtZTMzOS0z NGVkLWJjZGQtYzhjMTQxZmViYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO6lYXlZgPJXrVjHXzlQgV6L/dZNV1vX3RVk3ELmbKZ9QrGDcl2lv/F bbU/DYXQH5X0r3Z5Jyt72B8sT/ce67582y03NYRLVCOBhL6v7NkCnk+hrdyPovBE 6WgVGeJZ9o20VKqHTyndDe3W3SS5G73JSSJeIW8wLDHlWxsPd+rNpNizzv08sWF9 mw3wGw7+UxJe9JxQynBIcKysF6HRtwTFgIDeD+YvbBUAtMjCav4g0yg2f5yEpVhC OYVvC35JIjiYgUpYcQMMFrn2JvnbFkR+fa/l0JCHbSJ4P9fRwYX0Af0JSUyYMGBT XQqnXG5y8uF0VZIt76UwFnWDK4Whqr4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:12 2025 by rpki-client