$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json) Hash identifier: iq0AEPy3Kgb0b0A6EAkftimZfUZzptGgWdWkO9DtV7g= Subject key identifier: 06:71:C6:55:74:4C:CB:0C:43:BD:09:FA:1D:EE:D7:21:83:D1:DF:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1279D217004B5C29F7B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:27:9d:21:70:04:b5:c2:9f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=362c11c2-c84a-48f8-bd61-34c1b707c562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:7d:ba:9f:c8:7e:f9:51:ab:ef:8e:45:e5: ff:31:68:d7:a5:8f:2d:7e:4a:05:87:d6:1f:5e:69: e4:7c:91:34:10:a3:f6:5a:9a:c8:50:a4:62:4b:0b: 19:44:85:eb:8c:ed:fd:42:18:d2:fc:31:2b:3b:16: 5d:49:c1:26:44:13:f8:a9:9b:ba:80:f8:e9:03:1c: d4:96:d3:77:ea:77:9d:e2:06:a1:46:78:32:fc:0b: 4d:2f:65:56:da:c5:28:93:de:ce:e0:a5:46:a2:53: a6:64:db:c8:7c:8d:ab:ff:f3:08:e5:fb:57:9f:33: 66:a6:29:a3:3e:9a:aa:e4:19:00:cc:ec:0b:37:18: 5e:e4:42:56:4d:c7:90:1d:d6:34:df:2a:36:93:6c: b6:9e:df:d8:da:84:47:01:b2:55:ba:ff:08:08:d5: 27:00:e5:b1:ab:80:73:49:22:6a:c7:09:2c:c6:d8: f6:ed:13:05:79:29:22:83:db:60:c3:a0:db:cb:79: 1c:d8:ef:51:0c:42:c8:87:ec:be:af:1b:34:0e:d0: 3f:bb:b9:49:30:57:68:18:eb:e8:60:3b:fb:60:4a: 01:f9:79:27:11:72:2c:df:f2:44:69:68:5e:ac:69: 4c:62:f1:32:f2:13:4e:20:2e:63:bb:6c:aa:74:bb: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:C6:55:74:4C:CB:0C:43:BD:09:FA:1D:EE:D7:21:83:D1:DF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:52:f6:3d:7b:1b:73:ab:3b:af:d9:bd:ba:89:f7:6a:63:fc: 1a:79:f7:48:39:8e:49:53:03:c9:ab:9d:e1:c8:52:6a:36:68: f7:06:d5:70:a0:d1:53:c9:fd:d7:84:60:2b:a1:5f:51:9e:d0: be:93:73:16:f3:0b:a5:e5:1d:0b:df:11:a1:96:c3:5b:fd:6f: 47:18:c2:b1:09:68:b9:1b:51:bc:66:94:96:56:ba:c3:bb:97: 80:b2:20:cf:3e:17:ec:f5:53:4d:0d:70:9e:f8:0b:28:a3:01: 21:4b:9e:80:0a:8f:9b:d1:05:7a:30:e7:f7:5f:f6:37:61:98: a2:40:78:e3:bd:57:14:00:56:67:e2:13:b3:e4:cf:f2:2a:53: 90:3e:56:3f:0d:a7:83:4c:f2:66:6a:74:12:3f:b0:78:72:94: 0f:40:9d:d8:de:e4:dc:46:2d:41:55:5d:65:ff:66:3d:5c:eb: 5c:f7:29:d5:fc:38:01:57:68:a4:ea:43:84:28:c3:5f:33:9e: 14:8e:8a:36:7f:c9:85:c6:54:b2:10:81:0f:ea:80:0c:e6:7b: af:ab:d2:37:92:51:4f:df:43:3c:b5:7d:eb:a1:3d:af:a8:83: 97:4f:eb:9d:57:53:a7:07:b5:96:05:88:8a:2b:e4:06:41:b0: 56:fd:67:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSedIXAEtcKfewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MzYyYzExYzItYzg0YS00OGY4LWJkNjEtMzRjMWI3MDdjNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoml9up/IfvlRq++OReX/MWjXpY8tfkoFh9Yf XmnkfJE0EKP2WprIUKRiSwsZRIXrjO39QhjS/DErOxZdScEmRBP4qZu6gPjpAxzU ltN36ned4gahRngy/AtNL2VW2sUok97O4KVGolOmZNvIfI2r//MI5ftXnzNmpimj Ppqq5BkAzOwLNxhe5EJWTceQHdY03yo2k2y2nt/Y2oRHAbJVuv8ICNUnAOWxq4Bz SSJqxwksxtj27RMFeSkig9tgw6Dby3kc2O9RDELIh+y+rxs0DtA/u7lJMFdoGOvo YDv7YEoB+XknEXIs3/JEaWherGlMYvEy8hNOIC5ju2yqdLtCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZxxlV0TMsMQ70J+h3u1yGD0d/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDkxNWE3OGMtZTMzOS0z NGVkLWJjZGQtYzhjMTQxZmViYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBS9j17G3OrO6/ZvbqJ92pj/Bp590g5jklTA8mrneHIUmo2aPcG1XCg 0VPJ/deEYCuhX1Ge0L6TcxbzC6XlHQvfEaGWw1v9b0cYwrEJaLkbUbxmlJZWusO7 l4CyIM8+F+z1U00NcJ74CyijASFLnoAKj5vRBXow5/df9jdhmKJAeOO9VxQAVmfi E7Pkz/IqU5A+Vj8Np4NM8mZqdBI/sHhylA9Andje5NxGLUFVXWX/Zj1c61z3KdX8 OAFXaKTqQ4Qow18znhSOijZ/yYXGVLIQgQ/qgAzme6+r0jeSUU/fQzy1feuhPa+o g5dP651XU6cHtZYFiIor5AZBsFb9Z2U= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:36 2025 by rpki-client