$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa File: 73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa (raw, json) Hash identifier: +qAKak9y0KaP2i8cQ9gTZe64BUri3xOlUsX96hKsPow= Subject key identifier: FA:97:33:3B:AD:34:C4:84:A9:96:BB:53:C3:19:73:0B:96:D4:C9:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6DA30055D605A59C4840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6d:a3:00:55:d6:05:a5:9c:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2405de03-3a33-4895-9aff-4fc7da5d3fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:87:e2:08:44:f5:e9:6b:4a:19:09:b4:4d:7f: 07:c6:64:93:73:76:61:6f:e1:3c:7c:15:c0:37:28: 13:59:1a:44:ca:29:15:de:aa:8a:06:6b:b4:2b:53: 12:28:bf:71:b5:ff:7d:f6:13:32:6c:48:02:6f:53: f1:a3:29:9e:dc:36:34:ae:70:ff:dc:9f:e5:13:a4: 77:3f:fa:5a:f6:18:b2:20:66:a5:7c:9b:65:1c:39: 28:ab:c1:fe:05:56:50:18:dd:86:70:0c:b6:62:d3: fb:2b:23:a7:91:fa:4f:af:54:07:5c:2c:86:a2:b7: 22:a9:9b:0c:80:82:ba:c3:8d:2b:c2:a3:1e:45:95: 14:79:3e:3a:86:18:e8:b8:63:63:a7:ec:14:69:b4: 75:a8:51:08:50:73:7f:29:75:cf:a2:99:86:b0:04: 97:46:7e:12:65:35:4d:63:ff:3a:92:96:c3:71:bb: 17:a3:1b:b2:2b:12:68:76:9a:9a:15:09:4f:4a:2f: 5c:4d:98:f2:b8:42:d0:78:d5:64:c8:23:44:39:24: d0:86:8a:6b:6c:d2:f0:1f:9b:5e:1b:aa:b0:f7:2e: 35:ea:c1:f9:69:b3:71:50:04:8f:02:78:cc:02:46: ac:07:13:90:99:78:1c:b6:72:58:1f:7d:f6:12:ee: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:33:3B:AD:34:C4:84:A9:96:BB:53:C3:19:73:0B:96:D4:C9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a8:e0:58:fb:9b:8a:73:83:b8:fa:ad:b9:56:b2:ae:88:1e: d9:46:f7:b5:25:8e:79:e7:b2:2c:75:54:f3:98:d2:53:bb:4b: 88:07:4b:a6:89:4f:aa:4d:88:ef:11:4c:13:0b:60:48:75:05: 5f:2e:12:55:81:79:98:13:cd:7d:40:0e:b6:01:a8:35:05:a1: 96:20:e1:5a:33:76:7b:68:5d:a9:0d:a6:c1:3b:29:f8:ef:55: f9:bd:21:c3:84:cd:a2:eb:3f:88:16:0b:50:5f:0f:b2:77:57: 1e:6f:82:d4:39:08:46:02:8c:bd:f9:56:f1:ec:6f:48:e3:09: 15:d1:0f:db:e5:46:f2:da:32:1f:97:53:17:dc:a9:d1:85:4f: 0e:fe:83:ba:94:d5:83:8c:86:8f:af:1a:b1:c2:a9:2e:41:2a: 09:69:bd:02:0d:b3:a1:e0:34:7d:7b:41:8f:3e:36:3c:38:73: 45:48:61:00:b0:1b:2b:68:31:b3:e5:78:e9:68:ff:91:03:49: 62:40:5c:32:8c:6e:39:7c:52:38:29:e2:f7:06:3f:76:07:85: 61:c2:d5:ad:12:7e:5d:62:14:d8:56:65:5c:b9:21:35:a5:93: e3:4e:1a:b5:2d:1b:96:41:d8:8e:d3:3f:1b:8f:dc:70:50:71: c6:a8:b2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku22jAFXWBaWcSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjQwNWRlMDMtM2EzMy00ODk1LTlhZmYtNGZjN2RhNWQzZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ofiCET16WtKGQm0TX8HxmSTc3Zhb+E8fBXA NygTWRpEyikV3qqKBmu0K1MSKL9xtf999hMybEgCb1Pxoyme3DY0rnD/3J/lE6R3 P/pa9hiyIGalfJtlHDkoq8H+BVZQGN2GcAy2YtP7KyOnkfpPr1QHXCyGorciqZsM gIK6w40rwqMeRZUUeT46hhjouGNjp+wUabR1qFEIUHN/KXXPopmGsASXRn4SZTVN Y/86kpbDcbsXoxuyKxJodpqaFQlPSi9cTZjyuELQeNVkyCNEOSTQhoprbNLwH5te G6qw9y416sH5abNxUASPAnjMAkasBxOQmXgctnJYH332Eu7iLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqXMzutNMSEqZa7U8MZcwuW1MkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzNlNzhkZWUtMWI5My0z YjVjLWJjYzEtMTkzNDFlMWYyMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESo4Fj7m4pzg7j6rblWsq6IHtlG97Uljnnnsix1VPOY0lO7S4gHS6aJ T6pNiO8RTBMLYEh1BV8uElWBeZgTzX1ADrYBqDUFoZYg4VozdntoXakNpsE7Kfjv Vfm9IcOEzaLrP4gWC1BfD7J3Vx5vgtQ5CEYCjL35VvHsb0jjCRXRD9vlRvLaMh+X UxfcqdGFTw7+g7qU1YOMho+vGrHCqS5BKglpvQINs6HgNH17QY8+Njw4c0VIYQCw GytoMbPleOlo/5EDSWJAXDKMbjl8Ujgp4vcGP3YHhWHC1a0Sfl1iFNhWZVy5ITWl k+NOGrUtG5ZB2I7TPxuP3HBQccaosv8= -----END CERTIFICATE-----Generated at Sun May 4 10:28:24 2025 by rpki-client