$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa File: 12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa (raw, json) Hash identifier: brzbhkWFylYKtup994ddkKJZWxYj3Dk8s+q/dFjPzkY= Subject key identifier: 93:54:76:EB:E0:6C:6D:8B:96:CE:21:D2:45:79:BA:74:5D:E0:3A:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858493D9E7DF7B2B18403F2C81A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa Signing time: Wed 19 Mar 2025 14:37:29 +0000 ROA not before: Wed 19 Mar 2025 14:37:29 +0000 ROA not after: Tue 17 Jun 2025 14:37:29 +0000 asID: 15169 IP address blocks: 172.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3d:9e:7d:f7:b2:b1:84:03:f2:c8:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 19 14:37:29 2025 GMT Not After : Jun 17 14:37:29 2025 GMT Subject: CN=29c5668c-4b29-4e67-af85-316dc4a7d767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:df:b3:68:5c:7d:3a:6a:06:70:42:b8:bc: 91:c5:3a:e5:6d:e2:3a:b1:91:83:ea:40:b7:29:a0: 39:29:5c:5b:1d:2e:45:e6:29:b6:2d:5b:3f:ac:bc: 0a:1c:d6:ec:ae:18:97:e9:27:6d:91:e8:79:1e:d3: a6:e0:8a:c2:65:89:f9:b9:81:bd:30:6f:95:98:5c: 9d:37:93:21:26:f2:ff:05:13:8c:c2:d2:ed:aa:ff: f7:1b:03:35:ae:e3:25:4a:a1:df:50:79:87:11:a5: 33:9a:b3:81:18:9c:15:bc:2a:b1:2a:e8:76:60:19: 7a:4c:8a:48:b9:d6:eb:1c:13:86:b2:63:9f:b8:81: 8f:87:a5:b7:e1:da:d4:6b:a1:8d:2c:15:e1:9f:70: c3:f6:e7:49:c1:d7:ca:82:12:5c:58:14:fa:af:bd: a3:27:f1:ff:c9:d8:8c:a2:2d:1a:d3:7b:92:02:30: a7:cd:4b:6b:dc:f0:08:63:1b:e0:6c:95:e3:53:6a: b9:48:61:97:b6:51:4a:b2:c0:5a:3d:c8:ce:c0:5f: 4f:78:f8:dd:ff:47:3f:d5:94:7e:f7:1b:2e:29:e7: 24:35:a4:c7:f0:de:d3:f6:76:a7:c7:16:38:84:1d: 83:6f:d0:2c:42:c0:e9:a2:6f:2a:c1:6b:3f:21:ee: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:54:76:EB:E0:6C:6D:8B:96:CE:21:D2:45:79:BA:74:5D:E0:3A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:87:a8:64:97:b6:2b:0b:f6:cc:dd:35:2d:b8:18:74:a8:92: 74:6a:a2:ce:95:f9:ee:d0:00:82:a3:91:f0:c3:05:ed:9d:98: 20:46:f4:03:9d:d0:c8:d1:c2:12:24:6c:1d:18:9b:49:f4:a9: 0f:88:4d:95:89:d4:38:94:32:c5:96:ee:eb:89:30:4d:67:65: d3:19:e0:f4:bd:16:68:60:c4:11:8c:4b:ed:96:b8:33:e4:20: 64:1e:ea:bb:4a:52:4c:47:3a:84:e2:92:72:de:01:e5:7a:0c: 1c:29:a9:a5:9a:69:ba:e2:65:0f:ea:95:81:14:2e:1f:4d:6e: fc:fe:5e:0c:12:5f:23:8a:bc:74:ca:f1:df:bb:63:f0:09:ad: 56:14:41:3f:7c:16:32:77:51:b5:2f:7a:fd:a1:bb:ff:c6:12: 3f:c9:75:49:3a:7a:0b:dc:1d:27:db:7b:08:d3:ae:9a:59:4c: 68:13:2e:b4:5e:c1:75:d7:62:f2:ba:e3:0c:8f:00:84:08:a8: 0f:c9:e0:b3:56:02:81:db:02:6f:44:d8:28:d4:23:01:32:ea: 0c:2f:b3:a1:a5:48:4b:26:50:25:a0:d0:c6:64:0c:da:0a:44: c6:25:1d:8b:71:fc:70:62:63:05:7e:13:83:47:6b:33:5c:c2: 2a:e3:09:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk9nn33srGEA/LIGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDMxOTE0MzcyOVoXDTI1MDYxNzE0MzcyOVowLzEtMCsGA1UEAxMk MjljNTY2OGMtNGIyOS00ZTY3LWFmODUtMzE2ZGM0YTdkNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaPfs2hcfTpqBnBCuLyRxTrlbeI6sZGD6kC3 KaA5KVxbHS5F5im2LVs/rLwKHNbsrhiX6Sdtkeh5HtOm4IrCZYn5uYG9MG+VmFyd N5MhJvL/BROMwtLtqv/3GwM1ruMlSqHfUHmHEaUzmrOBGJwVvCqxKuh2YBl6TIpI udbrHBOGsmOfuIGPh6W34drUa6GNLBXhn3DD9udJwdfKghJcWBT6r72jJ/H/ydiM oi0a03uSAjCnzUtr3PAIYxvgbJXjU2q5SGGXtlFKssBaPcjOwF9PePjd/0c/1ZR+ 9xsuKeckNaTH8N7T9nanxxY4hB2Db9AsQsDpom8qwWs/Ie5NZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNUduvgbG2Lls4h0kV5unRd4Dp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJkNjQwMGMtNGVmMC0z ZTk2LThlYWEtNzFmNTBmMjY2YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGHqGSXtisL9szdNS24GHSoknRqos6V+e7QAIKjkfDDBe2dmCBG9AOd 0MjRwhIkbB0Ym0n0qQ+ITZWJ1DiUMsWW7uuJME1nZdMZ4PS9FmhgxBGMS+2WuDPk IGQe6rtKUkxHOoTiknLeAeV6DBwpqaWaabriZQ/qlYEULh9Nbvz+XgwSXyOKvHTK 8d+7Y/AJrVYUQT98FjJ3UbUvev2hu//GEj/JdUk6egvcHSfbewjTrppZTGgTLrRe wXXXYvK64wyPAIQIqA/J4LNWAoHbAm9E2CjUIwEy6gwvs6GlSEsmUCWg0MZkDNoK RMYlHYtx/HBiYwV+E4NHazNcwirjCdc= -----END CERTIFICATE-----Generated at Fri Apr 4 08:34:35 2025 by rpki-client