$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa File: 70760a5b-5593-3ea2-8ec7-9240632ace5d.roa (raw, json) Hash identifier: myXppxkqeRZ9XuBcFMKyf28voXF800MwdxnFRxf8isY= Subject key identifier: 00:05:EE:56:A8:A1:B1:21:F4:FE:A3:E6:7A:87:C6:0C:D6:17:2B:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A6DBB372229CC525DAF2723E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.253.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:37:22:29:cc:52:5d:af:27:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=824320e4-135d-4467-b031-2a14cf7ffa25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:48:f2:3c:ca:4a:36:fa:f9:e7:37:ff:ce: ca:14:82:a0:87:32:ff:7c:7c:b3:df:24:65:7c:20: 93:db:0b:c0:41:12:db:06:3c:ca:18:58:fe:55:50: db:51:29:ff:b6:9d:66:3c:46:d3:d8:c7:a4:54:e5: e1:39:77:3d:51:44:ce:b5:df:0d:ed:12:58:91:07: 8b:f0:f5:0d:0f:a8:c8:19:2b:3a:1d:3d:b3:1e:4c: 2a:08:c0:9a:0f:aa:97:a5:20:38:30:56:d3:8e:3a: 1c:f8:65:c3:61:50:27:14:6a:44:4f:fe:38:a6:6a: 28:28:b6:3f:cb:fb:21:43:d1:9a:fd:66:fc:fe:fc: df:e9:95:37:d9:e6:97:78:52:b4:60:aa:38:08:08: ce:22:6b:ee:06:be:b6:0e:98:05:68:ce:b3:ec:23: 52:a5:7d:d8:8b:9e:32:ba:4a:a4:9f:55:34:cb:16: 7f:86:1d:27:8a:99:67:27:f7:04:86:5e:ac:be:a5: a4:da:96:df:37:b4:3d:d6:dd:b7:7c:7a:34:00:36: 42:98:fc:2e:26:7d:b7:b7:10:6a:ea:39:38:e2:64: 58:1f:95:40:63:dc:8f:8f:dd:3a:d1:e2:a6:6c:13: b0:c2:83:31:49:6f:b8:d8:cb:56:8a:4e:0a:b2:38: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:05:EE:56:A8:A1:B1:21:F4:FE:A3:E6:7A:87:C6:0C:D6:17:2B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b2:ba:ec:ca:a3:53:ef:dc:d2:bb:73:81:57:4d:64:cc:fd: b2:59:a5:58:98:46:30:83:d7:d9:10:f8:3e:d5:1a:ca:8a:9d: 5b:d3:89:89:82:a3:15:5c:b8:a4:eb:e2:72:5b:be:fb:5e:01: 82:f8:68:88:92:f5:80:2b:f1:82:57:ac:1d:61:fd:2a:ed:f1: 19:ed:f1:64:1b:f0:82:73:81:91:9f:5e:9c:67:c0:6f:64:0e: 52:a0:67:c9:0e:02:e7:92:37:e4:16:8e:20:d8:b8:e0:cf:b3: 99:bf:e8:04:48:9b:f9:71:a6:80:12:a4:bf:1f:a6:3d:c4:8b: 67:99:12:a1:ad:de:37:ea:42:ca:44:8c:75:15:4e:f4:6b:42: 85:b2:3c:46:8b:8c:a3:5d:c4:8c:41:25:25:4d:d7:5c:11:07: a4:1a:dc:9c:bd:5e:2f:39:f2:2a:74:b2:b0:02:2f:6a:1c:07: 88:90:9a:3d:6e:cc:31:6c:93:3c:f9:7c:cc:54:fb:f2:fc:73: 7a:67:3e:3c:af:66:e7:c6:de:20:a6:92:a2:77:56:0d:e2:72: e1:d1:2b:40:44:f2:25:4e:f6:1b:fd:09:b2:be:94:dc:ee:8a: ad:b4:96:2d:84:78:04:5b:56:bc:ed:49:c5:b7:26:c7:dd:ae: 62:11:d0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuzciKcxSXa8nI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ODI0MzIwZTQtMTM1ZC00NDY3LWIwMzEtMmExNGNmN2ZmYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRI8jzKSjb6+ec3/87KFIKghzL/fHyz3yRl fCCT2wvAQRLbBjzKGFj+VVDbUSn/tp1mPEbT2MekVOXhOXc9UUTOtd8N7RJYkQeL 8PUND6jIGSs6HT2zHkwqCMCaD6qXpSA4MFbTjjoc+GXDYVAnFGpET/44pmooKLY/ y/shQ9Ga/Wb8/vzf6ZU32eaXeFK0YKo4CAjOImvuBr62DpgFaM6z7CNSpX3Yi54y ukqkn1U0yxZ/hh0niplnJ/cEhl6svqWk2pbfN7Q91t23fHo0ADZCmPwuJn23txBq 6jk44mRYH5VAY9yPj9060eKmbBOwwoMxSW+42MtWik4KsjhArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAF7laoobEh9P6j5nqHxgzWFysYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA3NjBhNWItNTU5My0z ZWEyLThlYzctOTI0MDYzMmFjZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWyuuzKo1Pv3NK7c4FXTWTM/bJZpViYRjCD19kQ+D7VGsqKnVvTiYmC oxVcuKTr4nJbvvteAYL4aIiS9YAr8YJXrB1h/Srt8Rnt8WQb8IJzgZGfXpxnwG9k DlKgZ8kOAueSN+QWjiDYuODPs5m/6ARIm/lxpoASpL8fpj3Ei2eZEqGt3jfqQspE jHUVTvRrQoWyPEaLjKNdxIxBJSVN11wRB6Qa3Jy9Xi858ip0srACL2ocB4iQmj1u zDFskzz5fMxU+/L8c3pnPjyvZufG3iCmkqJ3Vg3icuHRK0BE8iVO9hv9CbK+lNzu iq20li2EeARbVrztScW3JsfdrmIR0KM= -----END CERTIFICATE-----Generated at Thu Jul 10 03:27:42 2025 by rpki-client