$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa File: 9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa (raw, json) Hash identifier: cAjcit3eZt6xNbB2l2kLbO1wqgHqsrnL1LRrkxMg5uc= Subject key identifier: B8:ED:7D:5A:F3:6E:B8:F5:3F:43:B8:9F:3D:A4:28:6D:D4:48:AB:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC2F490DD8D59A5F7BC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.253.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c2:f4:90:dd:8d:59:a5:f7:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5b40d88c-0c4e-4cbf-9261-fa75d340ac58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:c9:a7:49:2a:02:51:f7:81:82:c6:c8:5e: 9d:dc:26:92:bb:fd:54:b7:b5:f1:72:66:91:86:3f: 25:70:73:a1:3d:15:25:55:26:cd:65:8f:d8:a7:56: 35:16:76:7b:38:07:fe:68:23:b4:b3:69:e8:9e:97: 1a:71:13:3c:71:79:0f:b8:ac:12:80:91:c2:e9:f3: 76:f8:b2:b9:20:10:05:a0:74:2d:f2:26:ca:7a:35: 52:20:4d:5d:17:cc:70:2e:14:7f:4e:f0:6e:0b:53: ac:ea:ae:b6:93:a9:b1:13:de:a5:e9:d4:3d:db:d3: f2:bf:d2:a6:da:a9:6a:78:ef:a4:eb:cb:38:d2:86: e4:8b:1a:dc:8e:cc:0d:4f:4e:bc:8a:6f:93:e6:1e: c6:b8:b6:12:46:55:d8:46:2c:0c:8e:f1:03:e2:4b: 5e:f8:24:c0:ed:29:26:a0:77:cb:d1:cf:c3:e3:de: 5b:94:a2:a8:27:0e:28:5c:f1:38:9d:16:27:b4:93: 33:71:54:f5:a8:23:26:7b:cc:ba:e2:ed:44:4b:59: 11:87:82:56:dd:cd:78:77:ba:eb:4e:9a:76:f1:31: 93:be:44:6d:36:fe:93:1e:a2:36:01:85:49:e9:d6: 61:5a:1c:b2:59:4b:de:b7:bf:27:aa:55:45:60:56: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:7D:5A:F3:6E:B8:F5:3F:43:B8:9F:3D:A4:28:6D:D4:48:AB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a0:0c:de:dd:96:b1:4c:2e:f3:b2:9c:fa:fa:43:ab:b4:6a: a0:7f:f0:96:d0:20:be:cb:55:d8:22:35:36:ef:c9:c3:97:48: 6e:75:55:d7:97:96:83:16:57:54:6c:3b:4d:13:71:26:89:29: c2:1c:5f:fb:17:0e:2b:ba:a4:52:76:aa:7d:9f:91:0a:d5:bf: 4c:35:97:c8:87:25:17:b3:d3:a8:55:fc:ce:bd:a6:fd:5f:98: 81:cc:61:58:82:99:06:bf:4d:9b:9a:d4:2c:ae:4a:4b:e0:34: e3:90:85:bd:03:3d:38:26:6b:23:6b:ac:0d:5c:c8:ee:72:53: 79:8a:a0:cc:b3:79:27:a9:71:a5:3c:92:dd:84:89:9a:99:6d: 3f:af:d6:e8:a5:25:57:8b:67:1a:13:12:ec:a7:2e:76:26:b9: dc:44:cd:15:13:05:00:ae:45:59:6a:ad:98:de:fd:12:38:1e: 0d:6c:ce:d2:68:05:a2:fb:68:1e:2e:8a:34:ce:3d:d8:1e:a0: 09:9b:fb:42:65:1f:6f:81:35:b0:63:e6:98:a3:f6:6d:57:3a: 96:a0:c9:ee:f2:71:27:d4:2c:7b:58:e4:b9:6f:c9:dd:26:20: 65:d9:3d:4f:00:da:be:91:cf:af:a1:63:22:bc:0c:19:ed:99: a1:d7:00:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusL0kN2NWaX3vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWI0MGQ4OGMtMGM0ZS00Y2JmLTkyNjEtZmE3NWQzNDBhYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7LJp0kqAlH3gYLGyF6d3CaSu/1Ut7XxcmaR hj8lcHOhPRUlVSbNZY/Yp1Y1FnZ7OAf+aCO0s2nonpcacRM8cXkPuKwSgJHC6fN2 +LK5IBAFoHQt8ibKejVSIE1dF8xwLhR/TvBuC1Os6q62k6mxE96l6dQ929Pyv9Km 2qlqeO+k68s40obkixrcjswNT068im+T5h7GuLYSRlXYRiwMjvED4kte+CTA7Skm oHfL0c/D495blKKoJw4oXPE4nRYntJMzcVT1qCMme8y64u1ES1kRh4JW3c14d7rr Tpp28TGTvkRtNv6THqI2AYVJ6dZhWhyyWUvet78nqlVFYFadcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjtfVrzbrj1P0O4nz2kKG3USKvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1NjhkMTEtYmMxZS0z NGQ4LWE3ZGItMGRmYWI5MDAxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKigDN7dlrFMLvOynPr6Q6u0aqB/8JbQIL7LVdgiNTbvycOXSG51VdeX loMWV1RsO00TcSaJKcIcX/sXDiu6pFJ2qn2fkQrVv0w1l8iHJRez06hV/M69pv1f mIHMYViCmQa/TZua1CyuSkvgNOOQhb0DPTgmayNrrA1cyO5yU3mKoMyzeSepcaU8 kt2EiZqZbT+v1uilJVeLZxoTEuynLnYmudxEzRUTBQCuRVlqrZje/RI4Hg1sztJo BaL7aB4uijTOPdgeoAmb+0JlH2+BNbBj5pij9m1XOpagye7ycSfULHtY5Llvyd0m IGXZPU8A2r6Rz6+hYyK8DBntmaHXAEs= -----END CERTIFICATE-----Generated at Sun May 4 10:19:26 2025 by rpki-client