$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: b0lsyyPQi8RITaH5gYJxbTXl6oAKz1dnoLz59ILqH0Y= Subject key identifier: 6F:74:07:59:82:CE:FC:31:39:2A:2E:D0:7F:FE:10:33:EF:40:AE:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821635E7EA802BB0DE15C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:16:35:e7:ea:80:2b:b0:de:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=aa78be4b-5693-4c89-9513-1b421881a873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:3e:67:43:ae:31:06:ff:37:17:69:6b:02: cc:63:cb:40:01:2f:1f:fe:1c:a8:0b:a6:88:7a:f3: 77:60:af:49:be:89:50:80:49:ff:9d:57:6f:48:07: cb:89:d4:89:0f:9e:21:0c:1a:0c:15:6c:98:c3:11: 11:1e:cb:97:92:69:93:ff:16:86:bd:0e:b7:e3:d8: 28:49:a2:27:d9:b3:53:e4:9b:d8:ee:08:46:66:62: 50:af:90:c2:bd:da:8b:72:db:ee:16:bf:65:e2:ec: 55:44:32:db:7d:70:b7:0c:5e:05:03:cb:8d:46:f3: 85:fe:13:2f:74:45:f7:7d:ea:41:23:5e:2d:e6:a1: 2e:08:42:fd:39:93:7a:c8:f1:bf:4b:98:ae:81:93: f3:a2:0c:99:64:30:42:d2:11:a4:7a:53:52:27:f1: 02:a4:42:85:48:d8:8f:08:d1:f5:87:9f:54:80:83: 46:52:dc:52:a1:61:94:80:eb:f0:52:2d:2a:1e:42: a3:3e:d1:aa:de:c5:9b:21:45:7e:2f:6b:50:cd:a5: 52:8f:4b:96:94:91:5f:6c:71:4d:4e:d0:18:8a:d9: 1d:0f:8b:60:c2:d5:61:e4:64:05:de:12:05:63:b5: ac:93:52:6c:1b:c3:6b:71:65:4f:09:c2:c2:95:04: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:74:07:59:82:CE:FC:31:39:2A:2E:D0:7F:FE:10:33:EF:40:AE:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:da:57:d6:5d:62:9e:6d:fc:c1:b4:50:6a:15:d7:40:5f:cb: 8f:39:e0:7e:1b:46:5e:d3:0f:80:dc:01:82:16:76:de:d4:08: 78:f8:88:09:bf:81:e7:45:9a:48:66:aa:5b:f5:e2:ba:77:f5: b2:3d:ce:17:88:e8:59:74:a5:9c:98:20:bd:26:ae:be:c1:16: fe:65:5c:5b:db:4f:94:b5:c2:84:83:84:85:70:31:5e:e6:91: 2a:9c:a3:03:78:69:3c:c2:10:8f:c5:b4:8b:54:2e:31:ef:1d: a0:28:97:64:43:f7:bd:f4:24:f2:ac:87:22:2a:bc:e3:9b:d3: 87:a8:fe:23:49:9e:15:f4:55:52:42:f1:f1:e8:9d:02:e9:ed: 0b:7e:82:41:f2:b5:34:91:76:1f:7b:f4:26:15:c2:69:32:eb: 49:b2:be:49:71:ec:ef:5b:73:d0:13:23:bd:63:19:5d:9d:c7: 5d:06:cf:a6:d4:ee:ee:22:d3:e8:22:ca:0d:be:a8:13:0b:04: 4c:22:6e:59:a1:20:32:90:ff:9f:53:88:73:13:43:ef:55:a8: e2:72:8b:dd:f9:7f:e9:90:55:67:72:ec:b1:79:0a:1b:b3:f1: a2:44:e1:69:4c:d1:09:1c:eb:f1:d9:49:88:e1:11:6a:8f:6c: 3a:be:35:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghY15+qAK7DeFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWE3OGJlNGItNTY5My00Yzg5LTk1MTMtMWI0MjE4ODFhODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzg+Z0OuMQb/NxdpawLMY8tAAS8f/hyoC6aI evN3YK9JvolQgEn/nVdvSAfLidSJD54hDBoMFWyYwxERHsuXkmmT/xaGvQ6349go SaIn2bNT5JvY7ghGZmJQr5DCvdqLctvuFr9l4uxVRDLbfXC3DF4FA8uNRvOF/hMv dEX3fepBI14t5qEuCEL9OZN6yPG/S5iugZPzogyZZDBC0hGkelNSJ/ECpEKFSNiP CNH1h59UgINGUtxSoWGUgOvwUi0qHkKjPtGq3sWbIUV+L2tQzaVSj0uWlJFfbHFN TtAYitkdD4tgwtVh5GQF3hIFY7Wsk1JsG8NrcWVPCcLClQTFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG90B1mCzvwxOSou0H/+EDPvQK7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzaV9ZdYp5t/MG0UGoV10Bfy4854H4bRl7TD4DcAYIWdt7UCHj4iAm/ gedFmkhmqlv14rp39bI9zheI6Fl0pZyYIL0mrr7BFv5lXFvbT5S1woSDhIVwMV7m kSqcowN4aTzCEI/FtItULjHvHaAol2RD9730JPKshyIqvOOb04eo/iNJnhX0VVJC 8fHonQLp7Qt+gkHytTSRdh979CYVwmky60myvklx7O9bc9ATI71jGV2dx10Gz6bU 7u4i0+giyg2+qBMLBEwiblmhIDKQ/59TiHMTQ+9VqOJyi935f+mQVWdy7LF5Chuz 8aJE4WlM0Qkc6/HZSYjhEWqPbDq+Nak= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:11 2025 by rpki-client