$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa File: 52603226-b4de-3bb1-a725-54436b999c2e.roa (raw, json) Hash identifier: EfYOpWOhFWJZYDOuXxvX2V6uWBpIi3DvFUVSlRa38Hw= Subject key identifier: 67:A8:06:DD:D4:D5:8D:BC:F1:8B:9E:DE:0E:1E:0B:8D:13:4D:AB:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA35CFD0A5E1EE23D73A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:35:cf:d0:a5:e1:ee:23:d7:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=df3a7bba-35f5-4b57-90c5-520c1475292a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a9:e6:fd:a9:77:33:60:69:31:a0:25:17:34: 4a:21:72:68:b7:46:ba:60:36:4c:06:28:7e:bc:fa: 50:1a:0c:1e:e7:b4:cf:26:36:63:4e:9a:bb:ff:b3: 06:07:45:3c:60:49:9b:63:5e:14:93:35:c6:d1:50: 35:3a:26:c7:68:3d:9b:69:37:d6:a5:cf:73:6f:0f: ba:37:3f:ae:e3:8a:49:4f:54:a8:06:4a:52:30:a8: f9:74:a4:fa:73:ff:86:28:d4:9e:2e:5f:cd:18:cf: 10:3d:06:a7:17:f8:52:7e:9f:43:9b:cb:9a:04:3a: 40:96:45:aa:fe:ab:77:4f:a1:7d:50:50:86:dc:96: 6d:6d:c5:86:95:60:a4:79:8c:e8:60:18:1f:08:12: 52:9a:fa:e6:b9:d7:93:2b:80:43:2c:a1:0d:c8:0c: 1b:9b:a9:60:bf:f1:74:eb:32:a3:7c:c1:7d:7e:9f: f3:b9:44:52:f7:0b:a4:6c:78:20:75:33:98:87:e1: c4:c4:42:d0:13:6e:e0:ad:27:0d:ec:c6:ca:9e:80: 60:a8:13:71:bb:de:48:86:e0:01:7f:94:be:99:42: 0a:60:aa:d6:ff:7a:bd:2d:07:f2:74:f1:05:78:91: 1d:5e:d5:cf:1d:12:2b:b0:bf:74:6a:aa:af:92:cc: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A8:06:DD:D4:D5:8D:BC:F1:8B:9E:DE:0E:1E:0B:8D:13:4D:AB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a1:87:fb:2a:fb:00:cc:1a:79:95:f7:95:d6:05:c4:b3:02: ec:60:fc:d1:86:1d:68:22:af:2a:81:c5:37:1c:75:58:43:0b: a6:95:33:29:24:8b:a9:cc:50:4c:64:93:71:fe:ae:53:6e:f4: fc:58:95:71:f9:2b:cb:52:e0:b4:ef:c3:c6:c8:1d:47:2d:11: 3e:e1:44:4b:6d:31:1c:5e:1e:c5:b9:43:72:d9:2c:ad:24:23: 80:13:4f:25:59:84:08:0f:48:43:fc:ff:8a:1f:87:bd:52:91: 3e:cc:b3:10:9b:93:f9:07:ca:ba:19:a9:80:28:60:1f:14:63: b6:cd:ef:3c:b3:e0:17:ff:b0:a5:b9:bc:c7:0f:0d:3a:16:5a: 78:6a:c6:71:9d:40:cf:ec:62:65:37:4f:50:92:af:1e:4d:7e: ad:77:8e:c3:50:d3:e1:5c:a7:90:50:ed:f2:49:75:54:34:32: 03:64:e3:e7:58:c9:f6:84:ac:0c:05:98:9e:88:5a:81:51:69: 02:72:ea:30:46:68:72:15:8e:a1:b0:f1:b5:72:52:ef:94:a9: bc:d1:ff:11:7c:0b:15:95:43:9d:4d:70:a2:18:2c:29:70:a9: eb:ac:b2:0c:b9:de:bf:64:bb:fb:5a:60:af:99:ed:78:21:38: ec:c6:b6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jXP0KXh7iPXOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZGYzYTdiYmEtMzVmNS00YjU3LTkwYzUtNTIwYzE0NzUyOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Knm/al3M2BpMaAlFzRKIXJot0a6YDZMBih+ vPpQGgwe57TPJjZjTpq7/7MGB0U8YEmbY14UkzXG0VA1OibHaD2baTfWpc9zbw+6 Nz+u44pJT1SoBkpSMKj5dKT6c/+GKNSeLl/NGM8QPQanF/hSfp9Dm8uaBDpAlkWq /qt3T6F9UFCG3JZtbcWGlWCkeYzoYBgfCBJSmvrmudeTK4BDLKENyAwbm6lgv/F0 6zKjfMF9fp/zuURS9wukbHggdTOYh+HExELQE27grScN7MbKnoBgqBNxu95IhuAB f5S+mUIKYKrW/3q9LQfydPEFeJEdXtXPHRIrsL90aqqvkszbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeoBt3U1Y288Yue3g4eC40TTasXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTI2MDMyMjYtYjRkZS0z YmIxLWE3MjUtNTQ0MzZiOTk5YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmhh/sq+wDMGnmV95XWBcSzAuxg/NGGHWgiryqBxTccdVhDC6aVMykk i6nMUExkk3H+rlNu9PxYlXH5K8tS4LTvw8bIHUctET7hREttMRxeHsW5Q3LZLK0k I4ATTyVZhAgPSEP8/4ofh71SkT7MsxCbk/kHyroZqYAoYB8UY7bN7zyz4Bf/sKW5 vMcPDToWWnhqxnGdQM/sYmU3T1CSrx5Nfq13jsNQ0+Fcp5BQ7fJJdVQ0MgNk4+dY yfaErAwFmJ6IWoFRaQJy6jBGaHIVjqGw8bVyUu+UqbzR/xF8CxWVQ51NcKIYLClw qeussgy53r9ku/taYK+Z7XghOOzGtrM= -----END CERTIFICATE-----Generated at Mon Jun 30 16:02:11 2025 by rpki-client