$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa File: 70760a5b-5593-3ea2-8ec7-9240632ace5d.roa (raw, json) Hash identifier: FfV1sbOSin+r5WER3nwUvD+6S71fVBEgFkKn82zLSx0= Subject key identifier: 6A:B1:F6:F5:24:05:63:03:8E:07:39:C7:FE:49:CF:FC:2E:FB:F7:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858498DE0C5832A761F1499EEC280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa Signing time: Thu 17 Apr 2025 08:35:41 +0000 ROA not before: Thu 17 Apr 2025 08:35:41 +0000 ROA not after: Wed 16 Jul 2025 08:35:41 +0000 asID: 15169 IP address blocks: 172.253.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8d:e0:c5:83:2a:76:1f:14:99:ee:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 17 08:35:41 2025 GMT Not After : Jul 16 08:35:41 2025 GMT Subject: CN=71da8c86-da38-47ab-ae95-b1b3cf512a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:0a:df:b0:8c:c9:42:96:77:56:a0:3f:60: f7:f4:80:5d:d5:f8:bb:02:cc:68:f8:b0:d9:aa:3a: f5:6a:d7:11:57:da:66:f4:e1:b6:7a:c2:aa:50:a4: f7:3d:49:f6:8d:a6:ec:3b:1a:2b:cc:c8:12:da:e3: d3:7e:7b:0b:4d:a3:8a:ce:dc:fc:8c:da:3b:2c:fb: 0d:2b:20:d2:11:8f:c2:cd:2a:74:1a:2c:4a:c1:1c: 2f:c9:f8:74:83:f5:b7:63:e5:dd:88:c1:65:f4:d3: b9:a6:c6:4a:89:39:f1:cd:dc:b0:58:cb:ae:67:32: cf:bf:79:69:1c:17:f5:9c:c2:98:3c:3f:94:c4:52: aa:08:ee:34:39:54:5e:da:49:e8:4a:d1:b4:cf:05: c8:66:b8:8d:26:fa:15:d0:bc:0d:2d:9c:7b:59:d2: 77:06:04:b2:ea:16:e6:1b:ea:50:db:9c:7e:6a:48: 78:c1:f0:fd:e6:00:b2:b5:10:7c:03:ba:44:b4:b8: 8d:d1:b0:60:10:3e:46:32:30:26:f3:73:0e:65:19: f4:06:21:62:91:57:d3:e0:ed:6c:77:78:72:8d:ff: 13:29:f8:77:3a:ce:0f:2b:07:e2:05:c7:64:c5:3a: f4:18:0d:c9:b9:c5:62:aa:03:81:ed:ae:20:4a:7c: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:F6:F5:24:05:63:03:8E:07:39:C7:FE:49:CF:FC:2E:FB:F7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:38:d3:fc:34:6c:15:59:9c:16:ef:74:7b:4d:9e:b4:b9:df: 0e:c6:5d:47:2a:46:4f:df:0f:e0:72:26:ed:99:90:a3:bd:cf: 58:ed:07:18:9d:28:52:a7:a7:66:a0:7d:09:eb:e0:49:1e:a9: 22:22:1a:28:ea:7d:b4:27:0a:20:5b:15:59:22:ed:a1:fe:6a: 9c:6f:a8:f6:6b:80:15:62:45:1e:55:1f:03:4e:df:25:0d:a6: 3a:d4:b3:a8:f5:47:c8:09:08:80:4a:55:49:0d:97:3c:bf:16: ea:78:98:1f:34:48:75:eb:e0:79:a1:76:4b:86:74:e6:19:0c: cd:fc:05:0d:2f:a8:1b:c1:fd:76:e8:6f:36:ea:1c:ce:1f:6b: 75:a8:8a:d7:68:ec:37:8c:4f:f2:00:98:97:50:f0:27:ee:fb: 89:ca:8a:87:fc:04:2f:9c:82:a7:81:72:20:a7:4b:a8:21:25: eb:db:09:25:de:02:10:9d:30:f4:90:71:0d:ed:3c:74:2b:3b: 1d:aa:5c:db:06:9d:9a:a6:6c:fe:5e:fc:65:b6:61:c4:65:dd: 3d:3c:e8:f0:43:48:2a:ee:02:50:15:db:af:42:76:15:28:b7: de:ee:b0:32:b8:96:82:ae:9f:48:4e:73:95:2d:25:e6:1c:18: f3:e0:85:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmN4MWDKnYfFJnuwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQxNzA4MzU0MVoXDTI1MDcxNjA4MzU0MVowLzEtMCsGA1UEAxMk NzFkYThjODYtZGEzOC00N2FiLWFlOTUtYjFiM2NmNTEyYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPoK37CMyUKWd1agP2D39IBd1fi7Asxo+LDZ qjr1atcRV9pm9OG2esKqUKT3PUn2jabsOxorzMgS2uPTfnsLTaOKztz8jNo7LPsN KyDSEY/CzSp0GixKwRwvyfh0g/W3Y+XdiMFl9NO5psZKiTnxzdywWMuuZzLPv3lp HBf1nMKYPD+UxFKqCO40OVRe2knoStG0zwXIZriNJvoV0LwNLZx7WdJ3BgSy6hbm G+pQ25x+akh4wfD95gCytRB8A7pEtLiN0bBgED5GMjAm83MOZRn0BiFikVfT4O1s d3hyjf8TKfh3Os4PKwfiBcdkxTr0GA3JucViqgOB7a4gSny0ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqx9vUkBWMDjgc5x/5Jz/wu+/clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA3NjBhNWItNTU5My0z ZWEyLThlYzctOTI0MDYzMmFjZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE40/w0bBVZnBbvdHtNnrS53w7GXUcqRk/fD+ByJu2ZkKO9z1jtBxid KFKnp2agfQnr4EkeqSIiGijqfbQnCiBbFVki7aH+apxvqPZrgBViRR5VHwNO3yUN pjrUs6j1R8gJCIBKVUkNlzy/Fup4mB80SHXr4HmhdkuGdOYZDM38BQ0vqBvB/Xbo bzbqHM4fa3Woitdo7DeMT/IAmJdQ8Cfu+4nKiof8BC+cgqeBciCnS6ghJevbCSXe AhCdMPSQcQ3tPHQrOx2qXNsGnZqmbP5e/GW2YcRl3T086PBDSCruAlAV269CdhUo t97usDK4loKun0hOc5UtJeYcGPPghRI= -----END CERTIFICATE-----Generated at Sun May 4 11:46:56 2025 by rpki-client