$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa File: b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json) Hash identifier: 6UdPoXLGRJGRHsNf4uCSJUjzIlGfQGelGkSqxR3g2Do= Subject key identifier: BF:A3:28:2B:87:56:37:75:68:AD:24:72:08:23:6E:2C:57:9F:42:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB694AA2150B8151837A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 172.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:69:4a:a2:15:0b:81:51:83:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2e86de43-a48b-41cb-b07a-d275b0945d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:68:ef:cb:e6:72:54:26:ca:4c:71:ee:ee: 8c:68:18:8c:8b:af:dd:50:ad:35:0d:05:dc:7c:c1: cc:aa:30:03:c9:80:17:db:14:5a:74:48:e7:f2:b5: bc:7b:4f:67:26:b1:4d:19:84:bc:ef:0a:ec:0c:0e: cc:b8:2c:32:b1:2b:bb:92:db:57:77:48:76:60:53: df:f7:51:f5:d1:19:54:2c:cd:ba:2d:07:56:54:74: 75:20:d1:a8:e6:49:55:ca:f1:83:f8:d7:09:14:2f: de:ea:bb:85:45:ca:9f:6e:51:f9:31:53:9a:15:e8: c6:5a:7b:5e:72:56:20:4c:ca:cc:43:7b:b4:db:c8: 05:31:1d:19:5e:83:e9:96:b6:ee:ab:7e:04:fe:0e: ea:5f:f8:bc:4e:5d:e5:87:04:a3:d4:84:fa:2a:19: e4:70:a7:0c:57:b8:57:9a:1d:bb:f8:52:2b:58:83: 9d:bc:7c:fa:01:41:67:62:09:df:5e:c4:13:de:4d: 8d:e0:bb:2f:ee:d1:b5:be:35:15:84:1d:e2:b7:df: 3f:04:14:d7:4a:11:c8:28:d5:5f:bf:d9:ca:4e:32: 3d:db:c3:b0:38:32:f1:1b:4f:5e:d4:07:3e:96:96: 32:cb:9c:e9:ae:e1:bb:d0:10:75:a6:73:66:dc:d8: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A3:28:2B:87:56:37:75:68:AD:24:72:08:23:6E:2C:57:9F:42:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:34:13:c3:76:41:f9:3f:3a:c3:37:6d:22:5c:47:4d:29:3e: fe:5f:48:5a:14:46:a2:af:6d:fd:4f:ef:69:df:f5:3e:e0:04: 2f:34:83:aa:c0:6a:16:37:6e:a6:e1:f7:65:97:2c:24:6e:16: 1e:74:d1:fe:41:d4:5c:a1:51:f0:75:f0:1b:29:3c:e7:78:b8: 72:18:bc:e1:e8:8c:a1:88:18:9c:77:01:7b:5e:ca:da:f5:7d: 80:db:86:01:8e:02:23:a6:6f:de:3c:c5:37:87:f3:6c:ad:51: 83:e6:8d:70:a3:69:63:c5:e0:16:1b:ba:f8:e6:14:64:d5:04: 8d:b1:0c:6f:4b:73:a4:f7:e5:52:b5:b7:ae:0f:77:07:d5:ec: 5d:be:87:0d:e8:23:ca:56:55:22:2c:69:d7:96:7e:35:16:71: a7:a6:b0:b1:94:eb:87:d7:18:59:9d:87:37:79:ab:b8:6b:2d: b5:a7:02:87:ee:10:90:ab:4f:ec:b9:3c:31:b8:ae:f0:13:8b: 76:01:f3:2b:89:a1:89:a2:73:84:b2:f4:79:ae:86:59:0e:1e: 9b:32:a3:59:d0:79:a3:c0:5c:36:79:ff:b9:c6:4d:4c:db:51: c3:31:54:8b:e9:84:8f:92:4d:3f:70:a8:c4:f6:f6:c3:a6:d7: 9b:07:84:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2lKohULgVGDegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmU4NmRlNDMtYTQ4Yi00MWNiLWIwN2EtZDI3NWIwOTQ1ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiupo78vmclQmykxx7u6MaBiMi6/dUK01DQXc fMHMqjADyYAX2xRadEjn8rW8e09nJrFNGYS87wrsDA7MuCwysSu7kttXd0h2YFPf 91H10RlULM26LQdWVHR1INGo5klVyvGD+NcJFC/e6ruFRcqfblH5MVOaFejGWnte clYgTMrMQ3u028gFMR0ZXoPplrbuq34E/g7qX/i8Tl3lhwSj1IT6KhnkcKcMV7hX mh27+FIrWIOdvHz6AUFnYgnfXsQT3k2N4Lsv7tG1vjUVhB3it98/BBTXShHIKNVf v9nKTjI928OwODLxG09e1Ac+lpYyy5zpruG70BB1pnNm3NjmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+jKCuHVjd1aK0kcggjbixXn0LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJjMWYxYTItMjRlNi0z ODQwLWExZWEtNDUxZjA2MjVhMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo0E8N2Qfk/OsM3bSJcR00pPv5fSFoURqKvbf1P72nf9T7gBC80g6rA ahY3bqbh92WXLCRuFh500f5B1FyhUfB18BspPOd4uHIYvOHojKGIGJx3AXteytr1 fYDbhgGOAiOmb948xTeH82ytUYPmjXCjaWPF4BYbuvjmFGTVBI2xDG9Lc6T35VK1 t64PdwfV7F2+hw3oI8pWVSIsadeWfjUWcaemsLGU64fXGFmdhzd5q7hrLbWnAofu EJCrT+y5PDG4rvATi3YB8yuJoYmic4Sy9HmuhlkOHpsyo1nQeaPAXDZ5/7nGTUzb UcMxVIvphI+STT9wqMT29sOm15sHhGo= -----END CERTIFICATE-----Generated at Sun May 4 16:43:26 2025 by rpki-client