$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa File: 0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa (raw, json) Hash identifier: 5gDNEiZzQwJsqUHeGSIXnV0PjVZmtpg5gV8GoWpMkyM= Subject key identifier: DA:C9:F2:CF:69:3D:38:37:5A:CF:C1:87:77:2C:2B:3E:A2:06:88:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A46A5A25847FE4020AFA95140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a2:58:47:fe:40:20:af:a9:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=f38657e3-880b-4854-a913-930d11afb7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:8b:06:36:65:e5:9a:cd:fa:dc:3d:20:02: de:03:73:7f:1e:d7:df:e4:f2:da:1b:fb:35:a0:8d: bf:97:99:31:7b:0c:83:0f:b4:21:a7:2b:a7:c3:9d: 68:2a:a4:3f:bc:25:00:f0:dd:cd:00:77:94:ab:8a: 90:a2:d4:c1:87:a7:c7:fc:c5:43:1d:08:06:74:7c: 72:a5:34:60:3b:eb:82:c3:66:26:47:54:19:be:03: 2a:f1:ee:1b:53:5e:a5:6f:63:c0:c1:ef:07:26:ef: 92:b9:63:5d:54:ef:ce:e3:ae:97:20:98:4f:0f:f7: 22:9b:68:67:c8:36:52:cb:08:53:8f:4e:f7:e6:ea: db:06:3d:c7:7e:5a:9a:34:5a:de:7c:cb:c3:2b:7d: ad:30:c7:e7:0d:e0:ab:4f:ca:dd:6d:ca:c2:f3:a6: ee:5d:1e:fb:e6:e8:8d:0d:fc:05:10:7a:18:c2:c4: b5:b2:d9:b7:02:63:6c:5b:fb:69:aa:53:56:34:97: 90:52:6b:fc:ee:31:4f:10:64:3f:4a:55:36:01:15: 79:fd:08:3f:5a:fc:c7:2e:64:c8:68:4c:86:c7:d4: d5:51:b3:8b:7d:b4:95:4b:37:7c:b2:66:13:8c:a9: 64:9c:9b:91:d2:52:4f:9a:dd:31:11:fc:0a:61:83: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C9:F2:CF:69:3D:38:37:5A:CF:C1:87:77:2C:2B:3E:A2:06:88:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:86:76:18:5d:79:a1:51:01:f2:6d:a7:2d:b7:77:b3:07:da: 21:42:c8:d3:9b:46:99:7d:16:64:ce:0f:79:8f:b6:65:96:3c: 3e:7d:f4:bb:b7:04:5d:8e:f2:98:ed:8e:57:e5:5c:7e:69:b3: 7d:a7:a2:6e:7f:f1:c1:cb:ce:71:d2:bc:2b:94:ac:b5:ca:c2: e1:3d:93:d5:62:5a:be:3c:7f:6a:7a:4d:98:d2:95:5e:d7:8a: 95:eb:07:83:d0:fa:ff:2e:32:8f:ed:06:f8:88:0c:a6:71:09: 73:63:fa:4a:97:54:57:b0:ab:b2:65:5f:c3:6e:5c:e0:e5:5f: f8:a5:6a:fd:ae:c1:63:34:4c:54:18:d2:12:58:0b:cd:aa:04: 38:47:e8:f9:97:75:73:ca:b7:18:79:77:9c:94:88:94:0e:95: 9c:2a:c3:84:10:85:f7:ac:2c:2b:95:da:b8:46:ea:3d:e5:50: 68:b1:6f:e6:90:30:b4:7b:29:a3:d0:2d:b3:13:eb:50:11:dd: d2:ae:06:6a:bf:a5:bf:61:bd:2d:d6:e0:3e:06:53:5a:37:01: 52:8f:f0:46:32:3b:69:64:82:fa:3d:8e:9d:2e:1f:f1:a2:8d: 1e:89:ee:96:3b:3d:ab:49:5b:ee:20:14:ca:bb:eb:f9:bc:93: a7:fd:f0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpaJYR/5AIK+pUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjM4NjU3ZTMtODgwYi00ODU0LWE5MTMtOTMwZDExYWZiN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LaLBjZl5ZrN+tw9IALeA3N/Htff5PLaG/s1 oI2/l5kxewyDD7Qhpyunw51oKqQ/vCUA8N3NAHeUq4qQotTBh6fH/MVDHQgGdHxy pTRgO+uCw2YmR1QZvgMq8e4bU16lb2PAwe8HJu+SuWNdVO/O466XIJhPD/cim2hn yDZSywhTj0735urbBj3HflqaNFrefMvDK32tMMfnDeCrT8rdbcrC86buXR775uiN DfwFEHoYwsS1stm3AmNsW/tpqlNWNJeQUmv87jFPEGQ/SlU2ARV5/Qg/WvzHLmTI aEyGx9TVUbOLfbSVSzd8smYTjKlknJuR0lJPmt0xEfwKYYPVLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrJ8s9pPTg3Ws/Bh3csKz6iBohqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0ZmIxMGMtOTk5Mi0z YTdhLThhNTAtOTRiOGMyMWFjZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmGdhhdeaFRAfJtpy23d7MH2iFCyNObRpl9FmTOD3mPtmWWPD599Lu3 BF2O8pjtjlflXH5ps32nom5/8cHLznHSvCuUrLXKwuE9k9ViWr48f2p6TZjSlV7X ipXrB4PQ+v8uMo/tBviIDKZxCXNj+kqXVFewq7JlX8NuXODlX/ilav2uwWM0TFQY 0hJYC82qBDhH6PmXdXPKtxh5d5yUiJQOlZwqw4QQhfesLCuV2rhG6j3lUGixb+aQ MLR7KaPQLbMT61AR3dKuBmq/pb9hvS3W4D4GU1o3AVKP8EYyO2lkgvo9jp0uH/Gi jR6J7pY7PatJW+4gFMq76/m8k6f98HA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:31:26 2025 by rpki-client