$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: 9DIL+UTfUJVaqp/NtpZ2sM9967ZdjVhkGXEJQjS07lo= Subject key identifier: 87:AE:87:42:45:0F:34:03:9B:46:81:67:09:00:FE:D9:FF:25:10:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58179604740719AA99CB640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:79:60:47:40:71:9a:a9:9c:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=37dd7422-2128-4a59-8277-4cdf714b9537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:75:1e:2b:ef:31:0a:1e:5d:3a:63:9f:87: 14:3c:8f:0e:c1:88:f3:1d:22:b8:7a:dc:be:df:e8: 4a:21:a0:2d:ee:5f:a5:19:40:fa:6e:1f:d6:5a:49: 2e:b9:81:db:02:30:c1:9e:89:29:e8:fc:71:1f:91: 88:13:c1:a6:0b:5b:fe:e2:20:0b:fa:c8:cc:fc:a5: bb:59:9b:d6:c4:55:94:a5:73:e8:f5:61:8f:e3:4e: 58:37:6b:66:53:fb:a8:31:39:73:db:29:f9:c9:f4: e7:3b:28:70:6b:e8:62:8f:76:2a:8e:57:a3:bd:cb: ab:97:04:ab:d5:69:c4:16:2b:9f:4c:00:c0:e2:ed: 55:c6:9b:b5:b8:cb:e3:6f:f2:94:b0:0c:33:8a:f4: 6f:b1:9c:83:ba:2e:be:d5:4d:e2:33:12:9b:d5:ba: 22:c2:e6:7b:6c:be:81:0d:14:ed:6d:48:67:5b:31: 13:d0:e2:b4:42:d0:b9:02:b7:16:d5:bf:71:87:5a: ba:bc:ba:3a:d2:ef:1f:dd:cc:18:59:81:ee:21:1b: 39:0c:7a:d5:a1:fa:d1:46:2c:6b:71:73:e2:d8:4a: 4b:f4:ff:3d:4a:02:81:f4:20:23:10:93:32:1f:81: 80:97:f1:ae:d0:56:dd:16:62:63:03:2d:3b:0c:b2: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:87:42:45:0F:34:03:9B:46:81:67:09:00:FE:D9:FF:25:10:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:05:64:b8:bd:d7:60:3e:9f:fe:81:37:b7:19:9d:e5:f5: 55:5b:ba:24:54:c9:2d:54:88:d9:3c:7c:94:6c:34:92:18:3d: d2:44:53:b4:5c:53:7d:8c:7a:e3:a3:8d:e4:a9:b7:ea:41:50: a5:84:ab:d6:fa:c1:14:79:f1:ee:84:d4:14:46:91:a8:ca:73: 9d:d6:f3:48:92:79:a4:10:7a:d1:cb:f9:ee:17:e0:22:5e:f9: ea:0d:37:b2:01:93:8a:cc:84:66:a0:6b:5a:e7:29:68:a1:7d: e4:25:85:c4:e8:49:c2:10:d8:16:3c:6e:eb:94:73:76:f3:c9: 26:a3:2c:1f:55:fc:1a:13:4e:e7:67:a4:cd:15:4a:f4:cc:cf: 26:f2:21:1e:1c:fb:ca:6b:a9:6d:60:c2:06:6e:b2:f7:84:36: ad:15:03:63:ae:56:cb:3a:7c:c0:30:af:fa:51:0a:74:0e:b7: 95:bc:cc:8f:ce:be:af:33:09:38:15:8e:6c:9f:56:7d:b1:10: a8:8c:16:a0:db:ec:4c:62:b5:11:e4:93:8f:e7:7b:8b:96:12: 05:ad:e5:73:11:9d:2c:72:b6:cb:34:24:c5:f7:76:d6:d1:3f: 9d:ce:56:a5:ca:fa:ff:9e:db:98:75:0b:7e:24:5a:db:db:8d: 79:62:77:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXlgR0BxmqmctkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzdkZDc0MjItMjEyOC00YTU5LTgyNzctNGNkZjcxNGI5NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr91HivvMQoeXTpjn4cUPI8OwYjzHSK4ety+ 3+hKIaAt7l+lGUD6bh/WWkkuuYHbAjDBnokp6PxxH5GIE8GmC1v+4iAL+sjM/KW7 WZvWxFWUpXPo9WGP405YN2tmU/uoMTlz2yn5yfTnOyhwa+hij3YqjlejvcurlwSr 1WnEFiufTADA4u1Vxpu1uMvjb/KUsAwzivRvsZyDui6+1U3iMxKb1boiwuZ7bL6B DRTtbUhnWzET0OK0QtC5ArcW1b9xh1q6vLo60u8f3cwYWYHuIRs5DHrVofrRRixr cXPi2EpL9P89SgKB9CAjEJMyH4GAl/Gu0FbdFmJjAy07DLKxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeuh0JFDzQDm0aBZwkA/tn/JRBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4cBWS4vddgPp/+gTe3GZ3l9VVbuiRUyS1UiNk8fJRsNJIYPdJEU7Rc U32MeuOjjeSpt+pBUKWEq9b6wRR58e6E1BRGkajKc53W80iSeaQQetHL+e4X4CJe +eoNN7IBk4rMhGaga1rnKWihfeQlhcToScIQ2BY8buuUc3bzySajLB9V/BoTTudn pM0VSvTMzybyIR4c+8prqW1gwgZusveENq0VA2OuVss6fMAwr/pRCnQOt5W8zI/O vq8zCTgVjmyfVn2xEKiMFqDb7ExitRHkk4/ne4uWEgWt5XMRnSxytss0JMX3dtbR P53OVqXK+v+e25h1C34kWtvbjXlid28= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:50 2025 by rpki-client