$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa File: 2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json) Hash identifier: GQFDbln95GDV5U23e2OgEK8WbATbv0H8zmLPieQH6ag= Subject key identifier: E7:AC:B8:01:46:84:07:D3:F2:D9:35:87:AA:65:3E:BA:72:CA:4D:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820FD972EF305F4B3E4900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.253.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0f:d9:72:ef:30:5f:4b:3e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0609e812-c201-4037-b45c-b20b9d52ca47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:e0:11:94:05:02:c5:b5:8c:c9:7c:fa:e9: 25:9b:a1:0a:e4:90:57:16:26:fa:ee:f0:b6:f5:f0: 39:58:cf:fe:99:50:b5:2d:08:f2:d4:af:36:11:03: a9:d4:92:1a:a6:a5:16:d4:65:b9:ed:47:c7:d7:49: 80:7c:17:48:cc:85:7a:56:9f:98:dd:e0:53:34:7e: 58:c9:c8:0e:58:8f:43:89:31:8f:0b:66:9e:5d:e4: 13:8a:cb:a5:18:af:17:e4:ef:67:eb:4a:c7:8b:3c: 66:e1:82:eb:72:9a:07:bf:f6:b9:5b:23:d4:0d:49: 95:5e:a7:6d:88:ac:4b:c2:8c:ec:56:59:4e:66:e5: 17:40:7e:9b:ca:f8:a8:34:80:56:0d:2d:0e:39:62: 3a:de:80:0a:86:86:21:26:36:7a:e7:cc:16:37:03: 98:25:40:ff:96:3f:15:0c:e7:9d:af:3e:b3:61:97: 20:8c:3e:68:1c:b1:51:fd:9b:cd:bb:4f:4e:13:da: ab:68:74:16:87:57:e1:28:3e:62:3b:bf:98:1c:8c: 19:dc:d4:d3:59:97:b9:a9:56:96:d4:27:23:c5:a0: 63:3e:9c:3a:e4:52:4d:21:cf:95:48:ec:d5:90:97: ca:4f:e3:3c:e8:c7:c7:03:5c:62:cd:84:ec:89:fc: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AC:B8:01:46:84:07:D3:F2:D9:35:87:AA:65:3E:BA:72:CA:4D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:94:65:cc:f0:91:c8:96:da:bd:61:68:6b:ba:ea:5c:30:8f: f3:07:f6:58:5e:34:d0:9e:5c:55:54:25:86:5f:68:28:ca:7c: 79:65:59:5b:03:97:2a:bd:32:c2:f0:01:76:b8:a7:bc:ff:55: fb:b4:22:35:17:0e:e3:dd:86:28:fd:6d:48:66:fa:37:4d:fa: 2f:a8:5a:02:8e:01:a3:41:78:02:2d:da:7a:d1:b3:b4:70:1e: 57:5f:7b:a4:cb:17:b8:f2:5f:01:e8:2c:f0:ce:2f:6f:43:f3: 19:d2:44:93:4c:99:2e:57:f4:8f:72:75:9e:15:20:95:97:16: 95:0f:02:79:a1:08:de:9a:db:74:1e:4b:71:06:2b:09:0c:5c: 2b:73:54:9a:70:97:7e:ef:42:02:2e:48:82:07:cd:a6:a9:61: a1:cf:b8:bf:28:0d:3f:8c:50:bb:3a:5b:6c:08:98:98:a6:7e: 77:cb:bf:ef:86:16:eb:38:de:d3:ca:a5:10:83:0a:cc:6b:07: f4:b6:69:16:c9:b4:0f:39:de:57:f9:50:59:9c:ba:72:9f:6e: e0:ce:e8:70:5c:a7:5c:71:ae:c8:dc:e6:7a:e8:0f:8c:43:05: 3c:56:98:fc:9d:1a:2e:5c:5c:5e:46:a3:b7:58:43:9f:d5:9c: 34:f5:04:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg/Zcu8wX0s+SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDYwOWU4MTItYzIwMS00MDM3LWI0NWMtYjIwYjlkNTJjYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI3gEZQFAsW1jMl8+uklm6EK5JBXFib67vC2 9fA5WM/+mVC1LQjy1K82EQOp1JIapqUW1GW57UfH10mAfBdIzIV6Vp+Y3eBTNH5Y ycgOWI9DiTGPC2aeXeQTisulGK8X5O9n60rHizxm4YLrcpoHv/a5WyPUDUmVXqdt iKxLwozsVllOZuUXQH6byvioNIBWDS0OOWI63oAKhoYhJjZ658wWNwOYJUD/lj8V DOedrz6zYZcgjD5oHLFR/ZvNu09OE9qraHQWh1fhKD5iO7+YHIwZ3NTTWZe5qVaW 1CcjxaBjPpw65FJNIc+VSOzVkJfKT+M86MfHA1xizYTsifyQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOesuAFGhAfT8tk1h6plPrpyyk39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MmE5NTEtMDU4Yi0z YjdiLTg5YjYtMDEwNzg2YzE2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiUZczwkciW2r1haGu66lwwj/MH9lheNNCeXFVUJYZfaCjKfHllWVsD lyq9MsLwAXa4p7z/Vfu0IjUXDuPdhij9bUhm+jdN+i+oWgKOAaNBeAIt2nrRs7Rw Hldfe6TLF7jyXwHoLPDOL29D8xnSRJNMmS5X9I9ydZ4VIJWXFpUPAnmhCN6a23Qe S3EGKwkMXCtzVJpwl37vQgIuSIIHzaapYaHPuL8oDT+MULs6W2wImJimfnfLv++G Fus43tPKpRCDCsxrB/S2aRbJtA853lf5UFmcunKfbuDO6HBcp1xxrsjc5nroD4xD BTxWmPydGi5cXF5Go7dYQ5/VnDT1BM0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:30 2025 by rpki-client