$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: qkxHIHyop18Ep2JeFPk/w31F24/i7rk+mNEbz8A8pz0= Subject key identifier: 8B:47:0E:96:DF:7A:38:52:27:90:FA:08:F0:96:D9:C7:DA:BF:FF:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12E8EB07FFB5EB24AC380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2e:8e:b0:7f:fb:5e:b2:4a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1fc85095-905a-404d-ab06-1840127f0836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:88:a1:1c:81:f0:bc:33:51:a0:f7:a7:29: f2:d3:19:e8:2d:d9:18:0c:8e:bc:77:1e:61:90:e7: 4c:75:94:d8:3b:88:57:1f:cd:55:57:d6:3c:04:3e: 06:14:23:0a:f9:05:c3:ce:cb:58:75:bd:65:81:23: d8:6d:11:41:86:a7:85:37:07:52:78:e2:5b:10:68: 0c:5e:82:23:9a:db:7b:28:82:13:9e:4b:cc:23:d6: 04:dd:8a:35:83:18:f4:c5:78:b5:1d:99:a9:c6:ff: 49:0a:fc:d7:bb:18:f1:f7:d1:26:e5:87:b8:20:00: d8:e0:1d:6d:d1:83:75:d3:0a:93:03:77:db:f4:58: 8a:62:65:16:ab:17:bf:8e:18:a9:41:9e:3e:84:f7: bb:97:1f:46:1a:69:e7:bb:99:31:1d:9d:09:0f:ba: 1d:99:41:7b:0f:31:80:25:2e:57:d7:d3:11:a1:ab: 70:b1:60:3e:d1:8b:3d:83:d4:c0:2a:19:ec:59:8e: 59:d1:43:00:f9:41:a3:66:3d:d0:77:bc:6b:43:b6: cc:5c:b6:de:4a:c1:a4:98:8f:05:cf:14:07:ca:fc: 96:5b:c8:09:77:10:c0:14:4a:bb:3c:77:16:ca:68: 7f:d0:3c:49:b3:37:3b:93:a5:4f:f9:c9:c7:f8:7e: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:0E:96:DF:7A:38:52:27:90:FA:08:F0:96:D9:C7:DA:BF:FF:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:67:3d:a6:9d:51:f9:b5:55:6d:9d:9c:26:27:2c:f9:6d:43: 24:41:be:33:41:0e:90:51:b2:a0:55:61:35:b8:e6:52:e6:f3: 1e:f1:cf:7d:3e:a8:8c:4a:a2:b0:b0:76:ac:36:27:f7:bb:4f: 47:da:ce:f1:55:2e:31:96:65:51:9c:70:94:7d:b6:48:79:cc: 24:82:73:31:28:7c:68:52:7e:b2:a5:77:2e:0b:eb:51:23:3e: 17:70:80:b3:7e:9e:5d:fd:31:fd:03:ab:72:10:66:f8:2e:78: 07:22:24:ce:4f:70:9c:56:1c:9b:de:a8:54:23:69:72:6f:5f: 15:81:87:ae:75:04:0b:11:02:ac:43:10:cf:45:96:c6:16:4a: 06:59:dd:a7:c7:50:bb:58:1a:df:16:9c:fa:03:47:ea:a5:e6: ce:d9:58:2e:76:27:8a:7a:01:4b:e0:97:2a:5d:c3:b2:c2:70: d4:a6:e8:1e:ca:0e:76:21:a3:08:20:2c:38:2a:5d:6b:09:b9: 36:7d:d0:2a:81:fa:e2:e8:1c:e4:3c:b8:71:7b:d1:5d:07:6e: 2f:17:c1:bb:4e:64:a1:01:6e:fe:06:59:a1:75:40:d3:2b:aa: a2:bc:3f:f1:ad:b0:49:bb:88:e3:93:9d:ca:c1:80:b0:fc:de: 08:8d:e0:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS6OsH/7XrJKw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWZjODUwOTUtOTA1YS00MDRkLWFiMDYtMTg0MDEyN2YwODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcuIoRyB8LwzUaD3pyny0xnoLdkYDI68dx5h kOdMdZTYO4hXH81VV9Y8BD4GFCMK+QXDzstYdb1lgSPYbRFBhqeFNwdSeOJbEGgM XoIjmtt7KIITnkvMI9YE3Yo1gxj0xXi1HZmpxv9JCvzXuxjx99Em5Ye4IADY4B1t 0YN10wqTA3fb9FiKYmUWqxe/jhipQZ4+hPe7lx9GGmnnu5kxHZ0JD7odmUF7DzGA JS5X19MRoatwsWA+0Ys9g9TAKhnsWY5Z0UMA+UGjZj3Qd7xrQ7bMXLbeSsGkmI8F zxQHyvyWW8gJdxDAFEq7PHcWymh/0DxJszc7k6VP+cnH+H67bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItHDpbfejhSJ5D6CPCW2cfav/8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlnPaadUfm1VW2dnCYnLPltQyRBvjNBDpBRsqBVYTW45lLm8x7xz30+ qIxKorCwdqw2J/e7T0fazvFVLjGWZVGccJR9tkh5zCSCczEofGhSfrKldy4L61Ej PhdwgLN+nl39Mf0Dq3IQZvgueAciJM5PcJxWHJveqFQjaXJvXxWBh651BAsRAqxD EM9FlsYWSgZZ3afHULtYGt8WnPoDR+ql5s7ZWC52J4p6AUvglypdw7LCcNSm6B7K DnYhowggLDgqXWsJuTZ90CqB+uLoHOQ8uHF70V0Hbi8XwbtOZKEBbv4GWaF1QNMr qqK8P/GtsEm7iOOTncrBgLD83giN4LY= -----END CERTIFICATE-----Generated at Sun May 4 10:46:47 2025 by rpki-client