$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa File: 70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa (raw, json) Hash identifier: dSSoLUe24X+NPwyStZTT1rEO91CDKM6ZK9kDGqRL0uk= Subject key identifier: 4D:89:98:66:49:FD:54:F0:96:92:8B:16:9D:33:DF:79:FF:02:53:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584AD3A1264A45C05FEEBD767060 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:26:4a:45:c0:5f:ee:bd:76:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=5fb9caee-3430-43e5-84e9-2e456856a3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:66:6e:2d:9f:fb:2c:93:13:54:32:b6:16: 6f:47:6e:31:5e:53:4d:e6:fd:f3:44:70:1e:17:bd: 2d:48:63:ad:32:fc:22:c0:4a:26:ad:72:83:e5:e4: c4:45:a8:f2:b5:8b:e5:8b:c8:99:72:5d:4a:0b:9e: 80:1d:9b:07:06:45:15:05:ba:f1:2b:72:2a:a1:de: b7:73:83:d7:bf:fd:aa:0f:26:15:6d:8e:e8:6f:35: 3e:7a:d8:6a:70:75:d6:5c:f8:81:73:ae:5a:5a:18: 59:ce:61:e9:b4:c7:1f:a0:4d:df:ff:0f:c5:ba:1e: 1f:83:a2:c0:54:d4:09:40:66:5f:63:61:34:80:4f: d1:7f:61:d0:2f:c2:3d:5b:38:4b:71:08:58:84:e4: 68:64:bf:da:bb:fc:b7:56:8e:7e:fb:2c:27:a5:79: af:23:04:91:e4:29:28:d6:f5:68:fc:47:5d:9a:d7: 7e:94:12:82:3c:a9:e5:ae:46:ba:41:0f:2e:ae:c4: ee:cd:6b:d6:94:65:6e:a0:3b:a5:56:07:93:db:13: a6:0b:6c:9f:74:f7:e9:04:8e:0c:b5:d8:f8:24:9d: 2b:17:e5:d8:68:35:4d:b2:f4:5a:d0:d9:40:12:be: 92:35:e5:d4:cf:d2:01:d7:16:8a:d8:7d:24:04:f8: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:98:66:49:FD:54:F0:96:92:8B:16:9D:33:DF:79:FF:02:53:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2e:92:a2:1c:85:4c:09:10:f9:6e:7f:32:fd:fe:86:b4:ac: ef:63:e9:61:20:af:61:6a:72:d9:95:a3:d7:ef:f3:1b:4d:04: 69:e7:99:75:94:e9:fe:28:2c:26:94:63:c8:eb:6e:23:5b:f6: 58:04:fc:1c:67:d6:c2:eb:4c:2c:4b:b4:1a:93:eb:b8:c1:23: 61:d0:25:fa:66:96:7f:bb:83:9e:7b:a1:70:f8:aa:09:7d:89: 4b:ad:5e:bb:a7:7e:70:b7:62:d6:3f:e7:9c:db:98:cb:d4:60: d6:1c:16:11:f3:ff:79:b0:a8:7b:4b:aa:24:53:70:4b:e1:6d: 4c:17:fa:7f:e2:aa:02:12:60:f0:9f:bc:1a:3a:94:c1:79:41: dd:ea:b4:d1:ec:3a:54:f9:4f:17:53:fe:9c:28:1e:bf:1d:9b: bd:91:8e:44:cf:2c:90:f0:35:ad:67:ea:05:24:96:10:99:62: c4:16:c9:e4:20:8b:87:a8:27:b7:60:f3:30:be:d7:f9:7e:a8: 29:6b:36:64:f6:5c:5d:4a:58:b7:55:c7:81:a6:c7:79:d9:2d: 0a:29:74:f2:8c:4a:b9:17:c2:8f:7b:5b:25:9e:ef:f1:5d:a6: e9:dd:49:51:f6:0f:b5:fe:8f:53:e4:e0:cb:0f:4a:cd:90:b4: 98:1a:72:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSZKRcBf7r12cGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NWZiOWNhZWUtMzQzMC00M2U1LTg0ZTktMmU0NTY4NTZhM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BBmbi2f+yyTE1QythZvR24xXlNN5v3zRHAe F70tSGOtMvwiwEomrXKD5eTERajytYvli8iZcl1KC56AHZsHBkUVBbrxK3Iqod63 c4PXv/2qDyYVbY7obzU+ethqcHXWXPiBc65aWhhZzmHptMcfoE3f/w/Fuh4fg6LA VNQJQGZfY2E0gE/Rf2HQL8I9WzhLcQhYhORoZL/au/y3Vo5++ywnpXmvIwSR5Cko 1vVo/Eddmtd+lBKCPKnlrka6QQ8ursTuzWvWlGVuoDulVgeT2xOmC2yfdPfpBI4M tdj4JJ0rF+XYaDVNsvRa0NlAEr6SNeXUz9IB1xaK2H0kBPgISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2JmGZJ/VTwlpKLFp0z33n/AlNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBkN2E1NDktMWI3ZS0z MTU4LTg0YjEtMzc2ZGJmYzIwYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0ukqIchUwJEPlufzL9/oa0rO9j6WEgr2FqctmVo9fv8xtNBGnnmXWU 6f4oLCaUY8jrbiNb9lgE/Bxn1sLrTCxLtBqT67jBI2HQJfpmln+7g557oXD4qgl9 iUutXrunfnC3YtY/55zbmMvUYNYcFhHz/3mwqHtLqiRTcEvhbUwX+n/iqgISYPCf vBo6lMF5Qd3qtNHsOlT5TxdT/pwoHr8dm72RjkTPLJDwNa1n6gUklhCZYsQWyeQg i4eoJ7dg8zC+1/l+qClrNmT2XF1KWLdVx4Gmx3nZLQopdPKMSrkXwo97WyWe7/Fd pundSVH2D7X+j1Pk4MsPSs2QtJgachw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:33 2025 by rpki-client