$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: ZWR+78FpeORTXMEXPEIhcDlwBPpHmsgd7V3/K6Ld1d0= Subject key identifier: 25:5C:2E:A2:6E:86:9B:5B:1A:FE:47:F0:38:F2:B2:5E:24:D7:50:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581779BA3E760C8FCF4B680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:77:9b:a3:e7:60:c8:fc:f4:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7c5842f2-be13-4477-86b9-dd65f6f40386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:73:f6:84:ca:08:dc:79:7e:e1:71:00:14: 66:62:a8:2a:8a:88:8c:29:53:e1:58:7c:cb:11:9c: e8:75:8a:b9:b0:5d:6a:3b:cf:11:41:57:06:65:e1: ec:63:61:f6:0c:02:ee:5e:cf:be:4f:68:18:51:a1: c2:ac:2f:4a:45:21:23:d7:8c:2c:49:b8:fc:fe:88: f6:83:85:f5:eb:1f:3f:f0:53:20:fb:e9:dc:c2:14: ad:c1:bb:ed:98:18:0c:66:4c:e3:0a:cd:d6:33:33: 23:85:80:1c:6e:94:53:cd:3b:53:ad:61:7a:d3:ed: a8:18:33:ad:ff:89:ea:71:a3:2c:2b:b2:f4:07:e0: 14:bb:6e:7c:15:5c:7a:f9:36:0c:f0:05:ac:6e:29: 11:ea:bf:62:9a:a1:f3:63:c8:91:ca:c5:c7:1b:b2: b0:2b:1b:53:4b:d8:84:79:16:ce:fb:50:54:86:3f: cf:4e:b0:6d:7d:18:ca:15:31:77:1d:f8:20:9b:53: 2b:35:17:36:7e:40:0b:8f:6a:12:3f:78:4a:a7:eb: 09:22:4b:a4:aa:b2:13:fe:2e:18:49:c5:43:19:05: a2:d7:6c:65:f6:ab:b9:a0:bf:b6:48:ec:df:44:7b: 39:98:1e:7a:f5:96:e7:48:3c:38:38:b3:db:74:e6: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5C:2E:A2:6E:86:9B:5B:1A:FE:47:F0:38:F2:B2:5E:24:D7:50:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:d4:94:7d:3d:0a:c6:86:09:8f:a9:aa:9f:22:30:eb:12: 40:6d:98:64:4a:90:39:5c:1b:26:fb:ca:5c:b4:cc:34:9b:bc: df:ca:47:aa:f7:e8:f9:90:10:2d:ca:34:1a:45:d5:ee:61:5f: eb:ef:3e:b9:a6:84:3c:0b:d9:49:57:41:16:ff:42:43:d0:50: d7:18:00:6f:0c:27:b4:a3:e8:cd:e0:9a:3f:8d:8d:b3:79:7a: c0:38:3a:eb:c0:59:af:7c:df:14:34:15:7b:0a:86:bd:39:d8: 7d:77:05:17:4d:3e:3e:2d:20:b6:cc:b4:89:d0:40:eb:f5:72: a8:f8:2f:8e:60:10:22:d6:23:c8:5d:e6:e4:21:3c:02:09:e0: a1:be:e0:3d:4a:b2:60:dd:f9:57:d9:6f:2f:24:55:0d:be:e1: 14:f1:cd:ff:43:de:5c:0f:c3:d4:4c:86:3e:44:e0:58:15:f9: 5a:3c:60:c3:f7:ca:68:c5:cf:03:a5:7d:76:13:73:15:85:0e: 10:ef:da:9c:92:50:73:f2:c2:37:0e:60:be:07:5f:56:84:36: da:f4:6a:55:93:92:f6:18:a9:e3:98:96:f1:59:1e:29:18:f6: 18:22:93:d5:27:3c:0b:2a:79:d1:7c:74:70:98:38:4b:0b:54: ff:2e:4a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXebo+dgyPz0toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2M1ODQyZjItYmUxMy00NDc3LTg2YjktZGQ2NWY2ZjQwMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps9z9oTKCNx5fuFxABRmYqgqioiMKVPhWHzL EZzodYq5sF1qO88RQVcGZeHsY2H2DALuXs++T2gYUaHCrC9KRSEj14wsSbj8/oj2 g4X16x8/8FMg++ncwhStwbvtmBgMZkzjCs3WMzMjhYAcbpRTzTtTrWF60+2oGDOt /4nqcaMsK7L0B+AUu258FVx6+TYM8AWsbikR6r9imqHzY8iRysXHG7KwKxtTS9iE eRbO+1BUhj/PTrBtfRjKFTF3Hfggm1MrNRc2fkALj2oSP3hKp+sJIkukqrIT/i4Y ScVDGQWi12xl9qu5oL+2SOzfRHs5mB569ZbnSDw4OLPbdOaQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVcLqJuhptbGv5H8Djysl4k11DWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbt1JR9PQrGhgmPqaqfIjDrEkBtmGRKkDlcGyb7yly0zDSbvN/KR6r3 6PmQEC3KNBpF1e5hX+vvPrmmhDwL2UlXQRb/QkPQUNcYAG8MJ7Sj6M3gmj+NjbN5 esA4OuvAWa983xQ0FXsKhr052H13BRdNPj4tILbMtInQQOv1cqj4L45gECLWI8hd 5uQhPAIJ4KG+4D1KsmDd+VfZby8kVQ2+4RTxzf9D3lwPw9RMhj5E4FgV+Vo8YMP3 ymjFzwOlfXYTcxWFDhDv2pySUHPywjcOYL4HX1aENtr0alWTkvYYqeOYlvFZHikY 9hgik9UnPAsqedF8dHCYOEsLVP8uSnk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:10 2025 by rpki-client