$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa File: 7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa (raw, json) Hash identifier: wRLVmyGzHO6OAs+hpZynBaex+28TPneFqsNQ6ue12FA= Subject key identifier: C4:5A:31:8F:45:0F:67:8B:CE:EE:62:4A:2E:F5:BB:32:52:42:58:65 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858492960C734A77DF25C6E66D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa Signing time: Wed 12 Mar 2025 08:36:58 +0000 ROA not before: Wed 12 Mar 2025 08:36:58 +0000 ROA not after: Tue 10 Jun 2025 08:36:58 +0000 asID: 15169 IP address blocks: 172.253.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:60:c7:34:a7:7d:f2:5c:6e:66:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 08:36:58 2025 GMT Not After : Jun 10 08:36:58 2025 GMT Subject: CN=eac7ca05-ab86-41d7-b31a-b0fbdb9c7f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:5e:a5:88:41:d1:2f:02:6b:6d:fe:fc:3f: b4:2c:3b:08:75:b5:40:09:c6:16:dd:9a:87:5d:ab: e8:fa:0f:d4:a0:e1:44:76:ce:e5:b7:fb:41:9c:55: ad:af:df:83:cd:69:b3:64:72:e5:e7:07:88:08:ab: f7:37:c6:9b:93:f8:70:5a:97:6c:64:55:19:a1:ee: 4d:ce:5d:e8:07:bf:c7:50:d6:4c:e7:92:f0:f3:8a: 77:25:30:3a:71:47:22:ae:4a:26:d2:b6:0b:64:42: f7:30:e6:cc:b5:36:f6:79:61:41:fd:ee:07:2b:dc: 18:50:69:03:87:06:d2:d4:3e:21:9d:a0:70:40:7f: a6:e0:73:8b:51:e4:65:aa:27:3f:32:ed:71:fe:18: 5b:ac:96:e6:7a:99:db:fb:4e:d0:f2:83:57:78:88: a8:d5:7d:1a:fe:74:8d:13:f8:32:ef:9a:f6:05:ce: ae:e9:fe:ff:c2:f4:62:a8:2e:e2:0f:d6:e2:95:61: da:5d:68:db:dc:2f:d1:06:e3:24:c7:cb:96:80:a9: c6:aa:84:c4:f4:b9:7f:1a:27:e9:4f:0c:28:ae:f6: 2b:23:34:dc:ae:b0:7e:23:bb:52:95:09:d8:38:6e: 90:2b:58:dd:2c:91:df:fd:54:d1:1c:e6:66:90:8b: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:31:8F:45:0F:67:8B:CE:EE:62:4A:2E:F5:BB:32:52:42:58:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d1:25:62:2d:20:c0:2b:0a:f2:07:50:03:68:8a:48:b1:0d: 49:07:15:2d:29:38:42:26:75:ba:ba:d1:ce:c3:01:52:3e:35: 58:e2:e2:57:df:b6:e1:6d:c7:de:49:cb:cd:59:60:59:3d:51: 76:dd:25:ff:79:38:a0:9f:6a:00:30:3f:57:be:7a:49:09:57: 24:4d:93:81:b0:c6:4e:f1:8b:d8:d2:f1:a9:c8:62:6b:d1:72: 01:d1:b7:17:eb:78:7f:25:39:8a:9e:88:4a:b9:45:27:f4:72: 71:e6:10:95:33:f0:83:b0:14:15:b0:b2:cb:5b:b8:54:b8:a9: 7b:bd:86:3f:58:5d:16:6a:ee:db:26:ab:21:23:54:d0:41:05: 76:01:14:47:49:23:05:3a:c9:ee:36:57:0f:3d:89:96:f4:e4: a8:44:96:9e:a6:7d:62:3a:b3:41:0e:47:1c:cc:4b:b3:5c:df: c2:95:c6:50:12:b9:17:3c:0f:b2:29:28:96:92:7b:fd:7a:3b: ba:1c:d2:fb:7a:9f:06:65:90:70:6e:39:3b:ab:d4:21:57:e7: 35:ee:85:90:c3:eb:0d:d4:08:70:4a:18:c3:53:ec:d9:9c:5c: 40:75:f4:a0:a7:c2:61:1e:d4:45:ca:ee:e8:e1:c2:ef:0f:29: 48:8b:97:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkpYMc0p33yXG5m2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDMxMjA4MzY1OFoXDTI1MDYxMDA4MzY1OFowLzEtMCsGA1UEAxMk ZWFjN2NhMDUtYWI4Ni00MWQ3LWIzMWEtYjBmYmRiOWM3ZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit5epYhB0S8Ca23+/D+0LDsIdbVACcYW3ZqH Xavo+g/UoOFEds7lt/tBnFWtr9+DzWmzZHLl5weICKv3N8abk/hwWpdsZFUZoe5N zl3oB7/HUNZM55Lw84p3JTA6cUcirkom0rYLZEL3MObMtTb2eWFB/e4HK9wYUGkD hwbS1D4hnaBwQH+m4HOLUeRlqic/Mu1x/hhbrJbmepnb+07Q8oNXeIio1X0a/nSN E/gy75r2Bc6u6f7/wvRiqC7iD9bilWHaXWjb3C/RBuMkx8uWgKnGqoTE9Ll/Gifp TwworvYrIzTcrrB+I7tSlQnYOG6QK1jdLJHf/VTRHOZmkIuwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRaMY9FD2eLzu5iSi71uzJSQlhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhOWRiMGEtMWI2Yy0z NzI4LWJkNTgtZDFmZGQ5NTg0OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHRJWItIMArCvIHUANoikixDUkHFS0pOEImdbq60c7DAVI+NVji4lff tuFtx95Jy81ZYFk9UXbdJf95OKCfagAwP1e+ekkJVyRNk4Gwxk7xi9jS8anIYmvR cgHRtxfreH8lOYqeiEq5RSf0cnHmEJUz8IOwFBWwsstbuFS4qXu9hj9YXRZq7tsm qyEjVNBBBXYBFEdJIwU6ye42Vw89iZb05KhElp6mfWI6s0EORxzMS7Nc38KVxlAS uRc8D7IpKJaSe/16O7oc0vt6nwZlkHBuOTur1CFX5zXuhZDD6w3UCHBKGMNT7Nmc XEB19KCnwmEe1EXK7ujhwu8PKUiLl6Q= -----END CERTIFICATE-----Generated at Fri Apr 4 08:30:33 2025 by rpki-client