$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa File: b9223ba9-c001-3f64-a368-a9d91e996b1c.roa (raw, json) Hash identifier: scQZxNWvJFUFQorvNSdXCqonHO7oF8ExkdTU6Plmgwc= Subject key identifier: FD:BB:84:51:BA:25:D1:68:3B:00:91:C4:67:11:1C:AC:A4:BD:57:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7FE08F1637DB925F7A680360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 15169 IP address blocks: 172.253.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:8f:16:37:db:92:5f:7a:68:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=985dca4f-943b-4b6e-bf6d-5cd669f87801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:92:10:70:92:cc:68:10:6e:04:84:38:08: a4:44:c4:08:68:09:97:17:37:4c:0c:e4:e0:3e:fe: d0:c2:32:00:f5:be:02:34:0b:a4:e6:7e:bb:7f:86: 21:ef:14:7a:66:ed:f3:3b:8e:5a:8d:6e:c4:e7:dc: 79:ff:ef:19:11:fe:13:e3:74:dc:be:01:d2:8c:c9: 54:37:a3:cb:b4:a5:84:b9:80:ca:a3:b8:7f:da:8f: 24:1b:23:ad:c8:77:75:63:7c:38:62:8b:73:58:86: 39:93:11:67:ec:cd:b5:0b:f0:aa:4d:68:c0:21:57: 7a:d6:da:a4:86:5e:a6:db:d8:66:5f:8c:86:41:72: 2d:4e:df:0d:a7:56:7d:e3:35:9f:3f:e0:20:37:a7: 4f:81:4d:e0:48:1f:b9:7f:3d:53:20:f0:ed:e9:37: 18:c3:90:e5:e8:9b:12:db:2f:a2:fd:37:06:fa:c1: 8d:e5:54:73:4d:5d:02:54:d9:86:55:ea:90:ba:f9: 49:c2:60:d7:47:f7:fb:39:17:3f:11:fb:5d:5c:5b: 48:9a:79:76:d8:e9:ba:29:e8:3e:1b:c2:0b:4b:0e: 7d:45:98:c7:d4:d8:04:95:65:ec:fb:ac:f6:af:8d: f0:e7:d3:5c:f9:35:80:98:01:66:c3:e2:bc:2b:99: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:84:51:BA:25:D1:68:3B:00:91:C4:67:11:1C:AC:A4:BD:57:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:71:be:2a:7b:8f:0a:93:60:c0:e6:0c:e7:b6:11:88:43:35: c1:8b:49:9e:eb:fc:87:41:f2:b0:bd:02:fc:9d:7f:b6:28:92: 98:33:b0:e2:27:d3:d3:99:d0:64:7f:cd:90:d7:fe:91:20:8f: f2:88:cf:95:00:0c:43:b5:1a:50:55:80:e6:f1:ee:7c:3f:e6: f0:ec:b9:a9:e8:9e:ab:77:49:d0:dd:1a:bc:a7:4c:72:d9:ba: e7:69:c1:31:91:e6:cc:b5:33:d0:8f:f7:ff:cc:c4:e1:a9:48: 06:a8:b4:23:64:0b:bf:43:74:bd:97:27:67:3a:79:7f:3b:ab: c6:0c:13:89:55:3c:c4:27:aa:81:2e:86:84:72:d2:80:4e:c4: 04:79:e5:9b:3b:6c:51:1c:dc:32:b2:26:98:66:0d:6f:b0:f6: 7d:60:a8:52:92:94:4d:99:00:f0:71:7f:d4:fe:4a:ee:e4:ed: 54:b9:4e:35:c1:ce:18:2a:40:a6:f2:28:b8:53:69:a5:d4:35: b9:3b:a4:d6:c5:b0:db:03:70:ce:6b:03:d0:4d:c8:e4:f2:60: 99:12:04:fb:c2:35:71:f9:56:d9:b4:51:49:18:7e:5c:70:f5: 0b:b5:67:90:f1:7a:db:8c:28:1b:e2:30:4a:8f:9e:44:a1:58: d9:e5:0b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4I8WN9uSX3poA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk OTg1ZGNhNGYtOTQzYi00YjZlLWJmNmQtNWNkNjY5Zjg3ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJaSEHCSzGgQbgSEOAikRMQIaAmXFzdMDOTg Pv7QwjIA9b4CNAuk5n67f4Yh7xR6Zu3zO45ajW7E59x5/+8ZEf4T43TcvgHSjMlU N6PLtKWEuYDKo7h/2o8kGyOtyHd1Y3w4YotzWIY5kxFn7M21C/CqTWjAIVd61tqk hl6m29hmX4yGQXItTt8Np1Z94zWfP+AgN6dPgU3gSB+5fz1TIPDt6TcYw5Dl6JsS 2y+i/TcG+sGN5VRzTV0CVNmGVeqQuvlJwmDXR/f7ORc/EftdXFtImnl22Om6Keg+ G8ILSw59RZjH1NgElWXs+6z2r43w59Nc+TWAmAFmw+K8K5nVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP27hFG6JdFoOwCRxGcRHKykvVc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjkyMjNiYTktYzAwMS0z ZjY0LWEzNjgtYTlkOTFlOTk2YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhxvip7jwqTYMDmDOe2EYhDNcGLSZ7r/IdB8rC9Avydf7YokpgzsOIn 09OZ0GR/zZDX/pEgj/KIz5UADEO1GlBVgObx7nw/5vDsuanonqt3SdDdGrynTHLZ uudpwTGR5sy1M9CP9//MxOGpSAaotCNkC79DdL2XJ2c6eX87q8YME4lVPMQnqoEu hoRy0oBOxAR55Zs7bFEc3DKyJphmDW+w9n1gqFKSlE2ZAPBxf9T+Su7k7VS5TjXB zhgqQKbyKLhTaaXUNbk7pNbFsNsDcM5rA9BNyOTyYJkSBPvCNXH5Vtm0UUkYflxw 9Qu1Z5DxetuMKBviMEqPnkShWNnlCx8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:47 2025 by rpki-client