$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa File: 0793e06c-647d-3a3a-a20c-4a207460adb8.roa (raw, json) Hash identifier: ybOEYKfRT1YNUo6QUtBgyAu2fxH/TwWyM+TWlZRwWGo= Subject key identifier: 26:7D:BE:CB:76:C0:2B:8F:85:F4:3B:B3:67:CF:0F:69:92:F1:41:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816D3FAA2FEAB691061180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 172.253.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6d:3f:aa:2f:ea:b6:91:06:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7d53b78a-cbb8-4d6a-ad5d-e487deadabc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6b:d2:5a:29:50:f3:db:25:56:10:fb:19:a7: 2f:10:8e:40:33:72:26:2e:7d:ca:e2:2a:50:64:e3: 82:6d:3a:b2:b1:c7:3b:91:6d:b3:68:0e:fb:4b:98: de:1c:fa:c7:d4:de:58:c7:4c:7b:24:7d:44:c8:52: 31:57:b1:03:75:cc:cf:cd:c4:e0:20:ff:21:04:bc: 2b:e1:3b:c3:a6:9e:72:a4:e8:29:87:ae:32:73:72: 85:05:d8:13:c2:86:67:d9:5a:71:6e:13:15:17:86: c1:c5:8e:77:c4:06:7b:2e:da:f8:b5:f9:6d:b5:b1: 4e:57:bd:ce:20:46:2e:4b:98:bd:83:46:d6:f0:d7: 92:24:b0:3d:e3:09:7f:a0:61:58:64:4e:df:60:43: d8:68:e8:70:0d:71:1a:e4:8d:bd:54:c3:bd:01:90: 99:92:a1:3f:af:2e:b2:7a:71:7f:26:12:45:69:5e: 40:b1:76:a3:3b:f4:c9:ee:ae:d1:c0:59:9e:76:3e: a7:e9:0a:9e:04:23:08:e1:6e:aa:c2:62:b4:b1:5f: 82:b3:5f:36:18:e3:09:be:ba:61:46:a0:9a:8b:3d: c6:26:f4:18:dc:de:b4:0f:a3:48:0d:49:fd:b7:cd: 89:4f:55:f6:b2:36:d9:be:c9:a2:17:75:38:c3:a8: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7D:BE:CB:76:C0:2B:8F:85:F4:3B:B3:67:CF:0F:69:92:F1:41:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:55:98:81:d0:42:a0:be:a4:30:b9:ce:0e:af:b9:7c:4f:61: 26:26:34:ae:79:0a:3a:d1:b4:26:f3:c3:b0:a9:28:f7:20:16: 40:60:5e:cc:11:5a:c3:a8:8e:f1:26:91:43:1d:82:82:45:51: 61:1b:f2:c9:ad:ea:e0:43:35:34:73:62:39:1f:83:40:3c:b0: 42:93:96:cb:54:37:ab:67:c9:4b:ec:01:0d:ec:95:07:8f:23: 36:66:ff:6b:9c:15:cb:2d:74:b2:9f:15:6a:97:89:3f:ff:7d: d1:1c:4c:4e:3a:bd:c0:c8:77:a0:11:5f:91:0f:f3:58:5f:b2: 83:3d:35:b6:a5:c8:54:75:4a:e7:c6:e3:53:0d:88:99:99:ca: 2f:61:9e:da:44:45:e3:af:ab:00:cf:70:f1:10:b0:6b:d1:de: 86:a9:a3:14:da:e6:f1:aa:a5:4b:ce:8d:a9:cc:88:de:c7:83: e3:b1:25:3e:52:0c:30:06:ce:4c:03:c3:b2:8e:6e:4a:fa:df: 10:dc:39:1d:28:74:d8:40:70:9c:17:ae:9e:2a:0b:5d:0d:64: 8d:93:57:3c:4a:c6:a3:0d:78:e0:f7:2f:db:a2:2a:f9:34:91: a3:02:0d:2b:61:7d:e6:20:7e:87:0e:2c:aa:6a:c1:ba:89:4e: 22:d7:a0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW0/qi/qtpEGEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2Q1M2I3OGEtY2JiOC00ZDZhLWFkNWQtZTQ4N2RlYWRhYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WvSWilQ89slVhD7GacvEI5AM3ImLn3K4ipQ ZOOCbTqyscc7kW2zaA77S5jeHPrH1N5Yx0x7JH1EyFIxV7EDdczPzcTgIP8hBLwr 4TvDpp5ypOgph64yc3KFBdgTwoZn2VpxbhMVF4bBxY53xAZ7Ltr4tflttbFOV73O IEYuS5i9g0bW8NeSJLA94wl/oGFYZE7fYEPYaOhwDXEa5I29VMO9AZCZkqE/ry6y enF/JhJFaV5AsXajO/TJ7q7RwFmedj6n6QqeBCMI4W6qwmK0sV+Cs182GOMJvrph RqCaiz3GJvQY3N60D6NIDUn9t82JT1X2sjbZvsmiF3U4w6jb6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ9vst2wCuPhfQ7s2fPD2mS8UH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc5M2UwNmMtNjQ3ZC0z YTNhLWEyMGMtNGEyMDc0NjBhZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhVmIHQQqC+pDC5zg6vuXxPYSYmNK55CjrRtCbzw7CpKPcgFkBgXswR WsOojvEmkUMdgoJFUWEb8smt6uBDNTRzYjkfg0A8sEKTlstUN6tnyUvsAQ3slQeP IzZm/2ucFcstdLKfFWqXiT//fdEcTE46vcDId6ARX5EP81hfsoM9NbalyFR1SufG 41MNiJmZyi9hntpEReOvqwDPcPEQsGvR3oapoxTa5vGqpUvOjanMiN7Hg+OxJT5S DDAGzkwDw7KObkr63xDcOR0odNhAcJwXrp4qC10NZI2TVzxKxqMNeOD3L9uiKvk0 kaMCDSthfeYgfocOLKpqwbqJTiLXoBE= -----END CERTIFICATE-----Generated at Fri Apr 4 09:50:55 2025 by rpki-client