$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa File: 8b62f499-9b92-390a-9385-a2c9502ca293.roa (raw, json) Hash identifier: 5RSVEqFOh0o3EI6ZCVc/m0bS2gXkmK+8NNnVj8M3evM= Subject key identifier: 14:D7:9B:AF:B1:78:75:47:1E:F2:DC:28:DD:F8:79:8D:A0:AC:F2:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4BB90F60012937B812486900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa Signing time: Tue 24 Jun 2025 08:39:16 +0000 ROA not before: Tue 24 Jun 2025 08:39:16 +0000 ROA not after: Mon 22 Sep 2025 08:39:16 +0000 asID: 15169 IP address blocks: 172.253.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4b:b9:0f:60:01:29:37:b8:12:48:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 24 08:39:16 2025 GMT Not After : Sep 22 08:39:16 2025 GMT Subject: CN=6801b1b8-d7b7-4da0-811b-a8e85f57ca82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:79:38:fb:62:33:d6:28:72:d0:49:b7:82: 30:87:fd:34:8b:94:4a:da:0a:16:1a:36:f0:3d:22: bd:40:59:5d:24:9b:f7:d1:88:c3:73:a8:2b:9f:5d: fe:27:ac:d1:0d:5d:05:92:b9:0c:31:d4:09:48:01: 67:0a:29:2a:c2:d9:8d:c2:35:90:fd:f1:46:cd:e1: 86:1f:b9:52:3c:8c:67:b2:b2:96:06:97:0b:3b:f3: da:c1:bc:4b:de:a4:f8:d6:cc:c1:69:2b:1f:da:8d: 43:f8:ed:de:ee:0c:26:25:0f:ca:ad:c6:77:d3:d6: cd:0f:77:18:a3:36:87:39:8e:5a:d1:0e:ad:db:72: 6a:37:1f:fb:54:8d:eb:38:c0:29:be:71:ec:48:ff: 19:ad:04:98:83:12:13:bd:d8:5b:3d:53:54:3a:84: a0:32:41:ff:e1:32:96:4d:0d:7b:19:20:52:87:0a: 64:7b:c2:29:34:2d:b2:99:59:49:4b:cc:16:2a:35: 96:55:2b:39:7c:44:2d:b0:8d:a6:59:6e:97:c0:99: e2:57:e1:f2:99:c3:b4:4b:1a:4c:38:bc:f5:b1:8d: a2:85:a6:85:e8:85:f4:a8:66:fe:e7:4a:38:84:0f: cd:76:e6:e0:07:1d:c8:bc:de:12:da:d1:4a:53:f2: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:9B:AF:B1:78:75:47:1E:F2:DC:28:DD:F8:79:8D:A0:AC:F2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:92:fa:30:3a:4b:4f:9e:77:b0:65:c5:68:21:c7:ab:51:3b: 5d:6a:7c:a6:a1:1b:25:fb:b7:89:21:63:55:9d:11:6b:c9:29: d7:f9:39:8a:c6:0a:ee:e4:67:ef:1c:2f:b9:fa:9f:a4:dd:f6: 7e:30:5b:87:f0:be:cb:77:63:e3:9e:93:9d:1a:7d:10:b8:10: 1e:9a:67:8a:3a:3a:92:7f:fa:d6:4f:d8:c3:44:57:a2:1b:a1: ac:4b:16:6d:61:3f:d8:38:ed:d1:85:08:e6:6f:de:21:72:1b: 42:a4:2e:e3:41:ca:15:93:74:9b:c7:5c:7e:13:23:06:c1:a7: d5:02:db:45:4d:6c:6d:3e:88:20:90:3b:2a:3e:31:5e:e2:fc: 73:6a:d2:1d:89:09:0f:dc:7e:e4:79:f0:ba:ff:ff:ac:5f:7e: 0a:f8:a5:ad:81:e7:3e:72:75:3b:7f:9a:72:47:bb:70:45:8a: af:cb:cb:5f:e1:a0:4f:3d:a2:79:62:1a:1f:f8:e1:7c:ff:01: 29:d2:81:09:cc:41:fa:cc:a5:9a:7c:22:85:01:70:eb:fa:35: 29:80:4b:4e:80:9f:1c:65:33:54:58:54:14:28:17:52:6c:b8: e2:a0:c9:f9:96:f6:cb:87:2c:0e:90:a0:6a:62:fb:09:aa:9d: b5:7c:5e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpLuQ9gASk3uBJIaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyNDA4MzkxNloXDTI1MDkyMjA4MzkxNlowLzEtMCsGA1UEAxMk NjgwMWIxYjgtZDdiNy00ZGEwLTgxMWItYThlODVmNTdjYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK15OPtiM9YoctBJt4Iwh/00i5RK2goWGjbw PSK9QFldJJv30YjDc6grn13+J6zRDV0FkrkMMdQJSAFnCikqwtmNwjWQ/fFGzeGG H7lSPIxnsrKWBpcLO/PawbxL3qT41szBaSsf2o1D+O3e7gwmJQ/KrcZ309bND3cY ozaHOY5a0Q6t23JqNx/7VI3rOMApvnHsSP8ZrQSYgxITvdhbPVNUOoSgMkH/4TKW TQ17GSBShwpke8IpNC2ymVlJS8wWKjWWVSs5fEQtsI2mWW6XwJniV+HymcO0SxpM OLz1sY2ihaaF6IX0qGb+50o4hA/NdubgBx3IvN4S2tFKU/LsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTXm6+xeHVHHvLcKN34eY2grPJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGI2MmY0OTktOWI5Mi0z OTBhLTkzODUtYTJjOTUwMmNhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWS+jA6S0+ed7BlxWghx6tRO11qfKahGyX7t4khY1WdEWvJKdf5OYrG Cu7kZ+8cL7n6n6Td9n4wW4fwvst3Y+Oek50afRC4EB6aZ4o6OpJ/+tZP2MNEV6Ib oaxLFm1hP9g47dGFCOZv3iFyG0KkLuNByhWTdJvHXH4TIwbBp9UC20VNbG0+iCCQ Oyo+MV7i/HNq0h2JCQ/cfuR58Lr//6xffgr4pa2B5z5ydTt/mnJHu3BFiq/Ly1/h oE89onliGh/44Xz/ASnSgQnMQfrMpZp8IoUBcOv6NSmAS06AnxxlM1RYVBQoF1Js uOKgyfmW9suHLA6QoGpi+wmqnbV8Xhg= -----END CERTIFICATE-----Generated at Mon Jun 30 09:38:53 2025 by rpki-client