$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa File: 1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa (raw, json) Hash identifier: aUshWFcBPe/70QqLAzN2XZFtNH3XooCkeDO+0CUEiYQ= Subject key identifier: A4:E6:BD:8C:00:4B:D6:28:75:D0:00:D7:BE:D9:59:6A:8D:74:C4:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC616DCD17D5A3CA68F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c6:16:dc:d1:7d:5a:3c:a6:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8e03d49b-9867-409e-b85d-ef34d6dd65cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:05:30:a7:23:a7:ee:cd:c7:d5:94:66:f1: 7a:64:16:90:11:f2:e9:ee:9a:8f:0b:1c:f4:74:dd: 4d:bb:81:63:7d:04:44:cb:92:30:0b:77:43:22:45: 29:2a:cf:6f:c2:b5:71:7d:9f:5f:e5:07:37:b3:8b: 17:55:55:8a:c1:8d:a7:cf:f4:0a:97:96:6b:1d:ca: 1f:bd:3a:fb:7c:a9:ab:07:15:b3:79:31:e7:a2:89: 93:46:5e:dc:57:39:6b:6c:a4:ce:a2:2b:4c:e3:53: cd:22:e4:67:f1:9e:a8:36:69:6b:c5:29:8a:38:bd: a2:0e:6c:9f:1c:d8:23:d5:57:b8:80:0b:34:8b:7b: 55:79:ab:47:1f:3c:e1:58:bb:7e:60:76:1c:f8:c2: ee:07:a2:85:91:30:bc:71:07:25:48:43:8a:be:8a: c0:5a:d3:1c:28:bc:c6:3e:1f:f5:b1:7c:1b:f1:8a: fa:5e:61:f2:83:96:22:95:d7:20:6c:4e:15:b1:91: cb:32:0d:fe:be:85:47:06:34:68:5d:14:b9:83:89: de:dd:23:ae:dd:46:43:68:72:aa:25:6e:22:bf:52: a1:cb:07:5f:ab:9b:46:80:33:dd:17:7e:13:39:8e: 6c:e9:d1:56:78:7b:3d:af:f2:a6:b7:6c:4a:98:42: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:BD:8C:00:4B:D6:28:75:D0:00:D7:BE:D9:59:6A:8D:74:C4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1c:17:5b:cd:d5:7b:14:33:74:c0:c1:5e:db:00:fc:a3:45: c6:cc:37:a7:d9:25:e5:94:49:cf:25:92:11:40:13:0c:44:1e: 8e:61:7a:17:dc:3e:f0:8c:2e:59:9d:33:95:22:c8:dc:51:ff: 5f:50:49:57:57:d7:63:b1:0a:64:d4:a9:00:b6:df:95:a0:1b: 88:ca:b3:a1:ef:58:4f:1c:8b:1a:33:d3:64:fa:ba:8c:26:4f: fa:b0:91:84:1b:27:aa:df:f7:a8:c7:96:08:f9:a1:b7:fd:ec: 54:ff:70:96:5e:06:1a:c1:ce:a3:68:1d:79:fa:8a:dc:8a:d6: 34:10:68:a2:f3:19:ff:1f:86:20:3a:f6:0e:d9:ae:79:b2:d1: a0:da:df:0e:00:7e:aa:43:0c:cf:f8:ff:c2:e7:89:e9:44:66: b2:38:ed:2d:c8:27:53:2c:99:d4:1c:5b:ed:ba:10:f6:4e:98: 53:2a:c6:55:08:1a:a9:b1:1d:d8:8f:40:e8:5f:bf:8f:99:9a: aa:aa:b0:25:32:63:cc:fa:28:1a:20:e3:ed:6d:b0:e3:53:b6: 92:5b:30:3e:36:ad:20:34:0f:ad:b1:c8:ab:94:71:c6:12:b8: d0:4d:63:9e:84:9c:90:7a:fa:45:96:b0:9e:fb:8e:f6:3c:3d: 76:e1:3f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusYW3NF9Wjymj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGUwM2Q0OWItOTg2Ny00MDllLWI4NWQtZWYzNGQ2ZGQ2NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vEFMKcjp+7Nx9WUZvF6ZBaQEfLp7pqPCxz0 dN1Nu4FjfQREy5IwC3dDIkUpKs9vwrVxfZ9f5Qc3s4sXVVWKwY2nz/QKl5ZrHcof vTr7fKmrBxWzeTHnoomTRl7cVzlrbKTOoitM41PNIuRn8Z6oNmlrxSmKOL2iDmyf HNgj1Ve4gAs0i3tVeatHHzzhWLt+YHYc+MLuB6KFkTC8cQclSEOKvorAWtMcKLzG Ph/1sXwb8Yr6XmHyg5YildcgbE4VsZHLMg3+voVHBjRoXRS5g4ne3SOu3UZDaHKq JW4iv1Khywdfq5tGgDPdF34TOY5s6dFWeHs9r/Kmt2xKmELBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTmvYwAS9YoddAA177ZWWqNdMTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWMyNDhhZmQtNjJjZi0z NmI1LThhYjYtNjViMjBjMGEwOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8cF1vN1XsUM3TAwV7bAPyjRcbMN6fZJeWUSc8lkhFAEwxEHo5hehfc PvCMLlmdM5UiyNxR/19QSVdX12OxCmTUqQC235WgG4jKs6HvWE8cixoz02T6uowm T/qwkYQbJ6rf96jHlgj5obf97FT/cJZeBhrBzqNoHXn6ityK1jQQaKLzGf8fhiA6 9g7Zrnmy0aDa3w4AfqpDDM/4/8LnielEZrI47S3IJ1MsmdQcW+26EPZOmFMqxlUI GqmxHdiPQOhfv4+ZmqqqsCUyY8z6KBog4+1tsONTtpJbMD42rSA0D62xyKuUccYS uNBNY56EnJB6+kWWsJ77jvY8PXbhP6U= -----END CERTIFICATE-----Generated at Sun May 4 10:55:25 2025 by rpki-client