$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: SzdUuphs10CtGEqn9pA5jwpKseHiff5bgpGIJze9Buw= Subject key identifier: E9:EB:B3:F6:DE:76:AC:CD:C1:F0:C1:5B:52:83:5D:96:94:59:E0:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841185702E035D725CA8C8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:85:70:2e:03:5d:72:5c:a8:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6cef1a03-adb3-4d98-8b8d-705d7e573663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:9a:29:be:7b:d1:e4:e8:b5:91:71:54:fa: 68:2f:b4:bb:96:7c:8c:60:13:2f:f4:a5:e1:3a:e0: be:fb:f6:89:da:90:7b:a1:6c:03:76:b9:0e:56:16: 7f:a4:48:2c:1f:a7:79:fe:a5:77:62:60:2d:c6:13: e3:f8:1a:4e:11:80:f0:ad:29:91:f3:a9:75:5c:e0: c1:fb:4f:81:53:36:7d:f7:22:33:22:cc:4d:f6:0c: 9a:90:39:d9:14:a5:18:d0:f2:9e:63:32:f3:93:02: 0b:fd:4b:33:00:ee:ec:ea:e7:97:b4:2c:69:bb:2f: 34:9e:20:e9:29:12:e8:63:cd:10:a5:23:58:d2:ff: a3:3b:84:94:5a:d8:13:7d:65:c0:66:87:b5:42:68: ad:c4:79:56:22:29:10:97:a9:13:25:74:06:e5:81: f6:e6:5a:3b:20:11:ea:2d:22:0b:e7:a2:43:f5:74: 41:25:ce:7d:c3:c3:34:88:1e:91:d1:05:66:9a:de: 4d:5b:52:78:23:ea:8b:89:88:a5:25:75:c4:a4:b1: 6a:36:13:22:d4:6b:44:d8:e7:b2:05:f2:ca:01:6c: e9:e0:2d:b6:01:6c:04:2f:2c:73:ff:3f:af:b6:93: 4d:e6:a1:21:9f:9c:0d:1e:98:51:65:95:9f:cd:ac: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EB:B3:F6:DE:76:AC:CD:C1:F0:C1:5B:52:83:5D:96:94:59:E0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b2:8e:96:4e:8e:83:d7:3d:f7:f8:2f:df:b4:8f:84:15:de: 37:da:60:11:97:61:c5:9d:3a:f3:f1:9f:44:17:cb:e2:18:cb: 72:90:22:d6:dd:f1:ff:db:0a:48:58:89:75:8f:d0:f4:d7:17: 57:1c:2f:4b:93:31:51:96:09:3c:b6:6f:cb:26:7d:13:13:a9: fc:c0:60:36:4a:17:01:21:e9:eb:dd:22:bf:ad:5f:69:9c:c2: 37:77:f2:1f:73:0b:85:fd:28:e5:70:c1:11:63:d9:33:62:f3: 18:1a:d4:35:98:e2:e9:7f:74:6f:e3:c9:08:ea:6a:fd:43:4a: f1:b0:33:ee:ae:d9:c9:4c:5a:63:8f:b8:d1:50:9a:93:d9:3f: ee:68:ea:46:a3:ba:c6:c6:75:fe:65:a3:97:3c:87:6a:ad:d9: 4f:3e:35:5b:6d:d0:be:34:5f:c2:2b:4c:06:31:fe:34:c4:33: bf:f3:26:80:bc:df:f5:7b:57:25:91:33:0d:ab:8e:b7:fe:b3: 6b:7a:63:c3:3a:69:b2:d6:64:22:4b:b8:29:b0:4c:65:21:b7: 14:1d:d1:9a:93:86:c6:aa:a0:e2:ea:ef:5b:53:f7:a3:09:41: e8:7b:fa:76:03:71:0f:37:03:d3:3f:88:39:4f:b0:ee:1c:15: 84:b3:c0:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYVwLgNdclyoyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmNlZjFhMDMtYWRiMy00ZDk4LThiOGQtNzA1ZDdlNTczNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWqaKb570eTotZFxVPpoL7S7lnyMYBMv9KXh OuC++/aJ2pB7oWwDdrkOVhZ/pEgsH6d5/qV3YmAtxhPj+BpOEYDwrSmR86l1XODB +0+BUzZ99yIzIsxN9gyakDnZFKUY0PKeYzLzkwIL/UszAO7s6ueXtCxpuy80niDp KRLoY80QpSNY0v+jO4SUWtgTfWXAZoe1QmitxHlWIikQl6kTJXQG5YH25lo7IBHq LSIL56JD9XRBJc59w8M0iB6R0QVmmt5NW1J4I+qLiYilJXXEpLFqNhMi1GtE2Oey BfLKAWzp4C22AWwELyxz/z+vtpNN5qEhn5wNHphRZZWfzax09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnrs/bedqzNwfDBW1KDXZaUWeDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2yjpZOjoPXPff4L9+0j4QV3jfaYBGXYcWdOvPxn0QXy+IYy3KQItbd 8f/bCkhYiXWP0PTXF1ccL0uTMVGWCTy2b8smfRMTqfzAYDZKFwEh6evdIr+tX2mc wjd38h9zC4X9KOVwwRFj2TNi8xga1DWY4ul/dG/jyQjqav1DSvGwM+6u2clMWmOP uNFQmpPZP+5o6kajusbGdf5lo5c8h2qt2U8+NVtt0L40X8IrTAYx/jTEM7/zJoC8 3/V7VyWRMw2rjrf+s2t6Y8M6abLWZCJLuCmwTGUhtxQd0ZqThsaqoOLq71tT96MJ Qeh7+nYDcQ83A9M/iDlPsO4cFYSzwLY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:42 2025 by rpki-client