$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa File: 43fcbd39-43d3-3172-b7a6-7940907cf086.roa (raw, json) Hash identifier: b/dK+oh3lkhGE1YUx+PMeIsLTS3vquvPcQi4U3UXpuE= Subject key identifier: AE:B3:12:09:FD:6C:E7:F0:75:08:B4:5A:12:67:79:A1:4D:C2:58:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A66C0664E03A6FAE12CE7CE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 15169 IP address blocks: 172.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:66:4e:03:a6:fa:e1:2c:e7:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=81a90f25-7364-4666-b362-0bc91f6718ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:1f:2f:fb:9f:15:63:62:a9:9f:52:62:43: 5a:b7:07:f2:c6:ae:f5:d1:8f:4d:d7:1e:9d:81:52: 3b:34:b2:da:b9:fe:c3:89:64:82:eb:84:5a:85:1f: 8c:39:5b:17:2e:62:90:75:5b:b9:df:66:48:bd:99: ef:f6:2d:fe:3e:c6:a7:75:67:27:de:4b:d5:c5:69: 83:0b:08:e0:ca:2e:19:fb:1e:b0:67:fe:3b:a2:66: 8a:0f:50:fc:a3:ba:a9:f3:fe:af:4c:19:c5:6f:97: 0b:0e:29:76:a5:66:3d:6b:94:df:0c:06:42:3d:ef: f9:88:0f:c2:40:c0:17:22:b0:e7:f1:2a:8a:93:0c: 73:75:a0:f5:c4:89:5c:c4:7b:59:76:30:f1:59:b3: ab:1c:8a:0f:b2:49:38:a3:15:0a:56:6c:45:65:91: c3:66:b0:5f:e6:8f:c2:d2:cc:e2:87:8e:bb:8b:19: be:9d:d3:3f:02:43:0c:36:2f:d2:a0:2a:74:15:08: 82:e5:dc:47:76:f8:69:88:11:58:34:14:64:d8:1e: 88:ab:54:fa:39:e2:53:e7:85:23:5c:e9:65:6b:f7: e8:56:c6:50:99:3e:2b:ba:a9:e5:2c:c8:c6:87:a2: 2d:47:65:8f:a9:7d:fe:dc:db:2d:c4:33:8e:d7:b1: 16:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B3:12:09:FD:6C:E7:F0:75:08:B4:5A:12:67:79:A1:4D:C2:58:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:30:16:34:9a:dd:3e:7a:bb:89:43:a8:dd:90:95:7f:94:a3: 76:99:e2:8b:18:a2:31:9c:3b:80:6b:3d:d3:56:01:4e:bb:92: d6:48:14:16:a7:cd:41:42:61:4c:70:c4:2d:23:06:53:93:de: ca:4e:98:5a:0a:77:db:f0:c3:df:63:5c:dc:7a:09:b1:54:2a: 77:1b:d2:98:14:c4:13:1d:27:c2:49:ec:f9:0c:11:a9:64:1f: 8c:fb:73:30:14:71:79:76:53:13:b1:e4:5a:31:27:07:71:59: 7c:95:3f:65:a6:9c:d7:56:f6:2d:8e:f1:59:6c:79:7d:58:7e: cb:f6:e5:82:50:87:0b:1e:96:66:b0:8e:e0:c5:68:7b:8f:f8: 82:a2:5d:02:0e:a3:51:96:80:d3:12:ab:d0:f9:7a:0b:88:61: 87:d1:07:18:f0:89:36:3d:30:c2:30:8e:5f:c8:cb:11:f4:f1: 33:f1:5c:dc:9c:ba:b8:b8:47:be:a5:12:cb:09:f4:8d:96:98: a0:87:bf:95:9e:9b:41:a4:20:a5:50:fa:9f:51:73:f2:df:e3: 97:32:c9:1e:94:59:fe:dd:3f:df:b6:b9:19:1f:a2:92:d3:9d: f2:29:e7:77:a4:5c:4a:15:2f:8b:34:6f:e5:ed:56:8c:8e:62: 5c:e2:a7:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGZOA6b64SznzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ODFhOTBmMjUtNzM2NC00NjY2LWIzNjItMGJjOTFmNjcxOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpsfL/ufFWNiqZ9SYkNatwfyxq710Y9N1x6d gVI7NLLauf7DiWSC64RahR+MOVsXLmKQdVu532ZIvZnv9i3+PsandWcn3kvVxWmD Cwjgyi4Z+x6wZ/47omaKD1D8o7qp8/6vTBnFb5cLDil2pWY9a5TfDAZCPe/5iA/C QMAXIrDn8SqKkwxzdaD1xIlcxHtZdjDxWbOrHIoPskk4oxUKVmxFZZHDZrBf5o/C 0szih467ixm+ndM/AkMMNi/SoCp0FQiC5dxHdvhpiBFYNBRk2B6Iq1T6OeJT54Uj XOlla/foVsZQmT4ruqnlLMjGh6ItR2WPqX3+3NstxDOO17EWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6zEgn9bOfwdQi0WhJneaFNwlhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNmY2JkMzktNDNkMy0z MTcyLWI3YTYtNzk0MDkwN2NmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcwFjSa3T56u4lDqN2QlX+Uo3aZ4osYojGcO4BrPdNWAU67ktZIFBan zUFCYUxwxC0jBlOT3spOmFoKd9vww99jXNx6CbFUKncb0pgUxBMdJ8JJ7PkMEalk H4z7czAUcXl2UxOx5FoxJwdxWXyVP2WmnNdW9i2O8VlseX1Yfsv25YJQhwselmaw juDFaHuP+IKiXQIOo1GWgNMSq9D5eguIYYfRBxjwiTY9MMIwjl/IyxH08TPxXNyc uri4R76lEssJ9I2WmKCHv5Wem0GkIKVQ+p9Rc/Lf45cyyR6UWf7dP9+2uRkfopLT nfIp53ekXEoVL4s0b+XtVoyOYlzip1o= -----END CERTIFICATE-----Generated at Thu Jul 10 10:07:13 2025 by rpki-client