$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: n53nHggo46zNlFXP7E1K8jcyBzDOopQ0EEvZCuXpjOs= Subject key identifier: D3:5B:5D:B8:0F:07:1F:B2:DD:12:54:DC:37:25:17:A4:7E:82:D1:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822C4476F3EC49FD51DA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2c:44:76:f3:ec:49:fd:51:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0f0fac1e-ba5f-42ed-bf68-c48debcfa3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:f4:01:d3:c2:d8:b1:17:8c:c5:0d:fd:f1: 16:b2:ba:55:1a:86:9d:e3:e8:c9:06:30:91:5e:e6: 84:3a:1b:12:e1:73:ac:99:c8:73:00:8c:7d:16:03: 8e:11:7d:ea:77:10:2d:79:26:7c:86:e8:86:16:72: 3d:2a:08:c8:95:74:ad:73:d9:50:48:8b:d5:d3:67: 9d:24:fe:b5:70:2b:4a:df:c0:5f:9a:df:63:1e:46: 59:91:ce:41:41:58:3c:c8:7d:7b:a0:77:45:ac:d9: 64:30:dc:75:6d:72:3d:22:36:ee:fb:0b:59:ec:48: 8d:98:cf:84:fd:11:e2:87:99:6a:bc:0e:29:d1:3f: dd:bb:d6:89:74:61:0a:60:92:4b:e0:8f:40:0f:d1: 89:ce:0b:39:f8:10:59:9f:5a:fa:bc:0d:10:31:7f: 91:e1:f8:37:f4:6d:40:90:93:d1:11:98:6e:45:ee: d5:97:38:7a:62:b1:5a:81:cd:61:9c:c7:3c:64:e6: 3c:e9:2e:98:ea:0f:fa:ef:22:dd:20:85:51:c8:20: 2c:a1:e4:c9:2d:f1:a7:f6:3f:5e:45:48:ef:5d:14: ce:68:83:dd:06:bc:67:bf:b3:17:e2:2b:d6:31:2e: 40:60:4c:43:d6:64:00:a0:ed:95:4e:b1:6f:02:f0: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:5D:B8:0F:07:1F:B2:DD:12:54:DC:37:25:17:A4:7E:82:D1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c4:5d:61:00:d3:d4:07:49:6c:c9:3a:83:76:3b:9e:1e:f2: d5:c3:43:3e:f0:bb:71:e2:d4:20:d1:52:05:fd:da:6b:75:91: 24:37:b8:dc:ba:83:a3:e1:a7:6d:78:9d:8e:94:35:47:66:af: 2a:a7:c9:b0:fe:40:c6:0c:4c:0a:83:07:ea:eb:b8:e8:23:b1: 08:c9:7b:7c:9b:b4:18:db:e2:e9:c9:30:4f:24:d0:28:fa:78: d8:eb:42:65:d7:22:65:f1:0c:86:22:d3:30:32:c9:96:47:9d: 65:b7:cc:53:57:12:11:6e:8c:d2:69:64:85:fe:73:f8:f6:ab: d2:70:c4:b0:8f:d4:1b:69:0b:47:c7:4f:c9:48:d0:b6:71:1d: 12:f0:2d:08:a6:97:0d:07:6e:83:e3:39:26:5a:6a:f4:b3:1c: b4:21:2c:fa:55:06:68:19:5b:d5:66:ef:bb:49:fb:ab:93:1b: b8:2f:1b:41:37:35:23:19:8a:6f:46:6b:9a:89:75:9d:21:e4: ad:4a:03:42:72:d9:5a:a2:a1:86:1f:59:27:cc:8f:a2:a8:0b: 83:4b:25:27:b8:54:72:bf:91:3a:7d:7e:98:a1:f1:52:0f:f4: eb:fa:98:13:d0:93:1b:2a:60:96:8f:e4:58:16:03:00:ab:c7: b8:31:77:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgixEdvPsSf1R2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGYwZmFjMWUtYmE1Zi00MmVkLWJmNjgtYzQ4ZGViY2ZhM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Gf0AdPC2LEXjMUN/fEWsrpVGoad4+jJBjCR XuaEOhsS4XOsmchzAIx9FgOOEX3qdxAteSZ8huiGFnI9KgjIlXStc9lQSIvV02ed JP61cCtK38Bfmt9jHkZZkc5BQVg8yH17oHdFrNlkMNx1bXI9Ijbu+wtZ7EiNmM+E /RHih5lqvA4p0T/du9aJdGEKYJJL4I9AD9GJzgs5+BBZn1r6vA0QMX+R4fg39G1A kJPREZhuRe7Vlzh6YrFagc1hnMc8ZOY86S6Y6g/67yLdIIVRyCAsoeTJLfGn9j9e RUjvXRTOaIPdBrxnv7MX4ivWMS5AYExD1mQAoO2VTrFvAvBbFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNbXbgPBx+y3RJU3DclF6R+gtHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvEXWEA09QHSWzJOoN2O54e8tXDQz7wu3Hi1CDRUgX92mt1kSQ3uNy6 g6Php214nY6UNUdmryqnybD+QMYMTAqDB+rruOgjsQjJe3ybtBjb4unJME8k0Cj6 eNjrQmXXImXxDIYi0zAyyZZHnWW3zFNXEhFujNJpZIX+c/j2q9JwxLCP1BtpC0fH T8lI0LZxHRLwLQimlw0HboPjOSZaavSzHLQhLPpVBmgZW9Vm77tJ+6uTG7gvG0E3 NSMZim9Ga5qJdZ0h5K1KA0Jy2VqioYYfWSfMj6KoC4NLJSe4VHK/kTp9fpih8VIP 9Ov6mBPQkxsqYJaP5FgWAwCrx7gxd1Q= -----END CERTIFICATE-----Generated at Fri Apr 4 10:03:56 2025 by rpki-client