$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa File: e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa (raw, json) Hash identifier: JY6V3y6CQVakW3MIZAP1dhJ/711HpisibC+KwgItI70= Subject key identifier: 0F:C9:71:DA:1C:0C:A1:5B:53:7B:BB:3E:0F:72:72:A4:B5:0F:B0:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822583AB599179B5F8BB20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.253.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:83:ab:59:91:79:b5:f8:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=467667ae-a35f-4b49-bae5-a50ad4d5b1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:0b:6e:cd:13:d0:c8:36:80:43:4f:db:44: e6:22:41:61:9a:61:05:3c:a1:26:95:6d:00:3f:0f: dd:8c:0b:a1:fc:77:75:a6:b6:8b:c4:45:7b:aa:87: 2c:b5:96:90:f5:6f:3e:ea:88:00:8a:f1:a6:2e:35: 67:13:25:e7:72:f8:a7:eb:0d:c2:65:8a:f8:ad:a7: ed:f1:52:f7:1a:a2:b6:91:f0:38:fb:b8:c8:01:ed: 3d:63:06:05:54:74:67:23:e3:04:61:e4:7d:71:76: 3b:9f:ad:2b:99:5c:e5:95:c1:59:bb:3c:08:68:c8: ff:92:b1:3d:2d:34:5f:9e:a7:5b:07:d8:ed:37:3b: 9d:42:95:74:93:41:c0:78:76:6d:cf:dc:a3:10:23: 11:46:46:3d:11:56:2e:0b:f7:11:a0:47:d7:50:7f: 05:18:e5:ba:d9:d6:5f:d9:9f:23:97:11:0f:d3:52: 4b:85:5e:aa:71:9d:88:db:35:e5:98:d6:00:2b:30: cf:03:aa:2b:76:0f:32:e3:b1:18:61:06:71:00:b7: 59:07:05:c5:a5:6e:e8:09:2b:17:8c:a4:12:62:87: f2:ab:63:1e:b6:a4:c8:53:cd:59:f2:66:3a:6c:65: 2a:d4:fb:cb:fb:86:86:ef:af:07:e7:eb:de:46:8a: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:71:DA:1C:0C:A1:5B:53:7B:BB:3E:0F:72:72:A4:B5:0F:B0:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8c:e6:cb:7f:87:41:5e:32:c0:c7:8f:af:a5:67:e8:a9:7d: 8d:2b:8e:9c:20:d9:61:2b:c2:42:f6:e1:76:5f:22:a8:0a:a4: 54:21:6a:9f:64:7b:f3:e1:02:8e:b5:01:39:4f:0c:85:ea:07: 4b:92:11:5e:71:f0:2b:1a:6d:0d:ed:35:e2:9d:b8:8d:d4:5e: a6:a6:84:77:e2:eb:bb:a9:17:01:c4:60:55:be:4b:0d:14:dc: 5b:a8:ed:0c:ce:ce:a0:b9:5f:79:9e:81:22:07:6e:c0:63:48: 0f:9a:8e:a3:e8:ed:42:b8:35:2a:28:87:42:fb:a5:9a:01:df: 2b:cd:5a:21:b5:99:da:bf:c0:f2:1f:6d:e9:79:d8:80:25:ab: dc:9b:23:a4:e8:1b:0c:45:55:79:9e:aa:0a:90:9d:63:a1:34: 1a:31:84:4d:f9:c7:10:cc:5e:b9:60:8e:0a:cd:08:c5:b9:5b: e0:b3:2f:6f:cc:74:2c:f0:da:a2:4a:df:f3:dc:fc:f6:12:1a: 7a:30:07:db:19:df:db:34:57:06:7b:6a:ba:dc:67:1a:77:f2: 42:d5:dd:b9:d8:f1:39:26:7a:6a:71:81:fb:d8:1b:8f:f0:ea: ee:88:d4:89:7a:09:e3:72:80:91:a4:0b:b6:19:e1:b7:59:3f: 08:4a:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiWDq1mRebX4uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDY3NjY3YWUtYTM1Zi00YjQ5LWJhZTUtYTUwYWQ0ZDViMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc4Lbs0T0Mg2gENP20TmIkFhmmEFPKEmlW0A Pw/djAuh/Hd1praLxEV7qocstZaQ9W8+6ogAivGmLjVnEyXncvin6w3CZYr4raft 8VL3GqK2kfA4+7jIAe09YwYFVHRnI+MEYeR9cXY7n60rmVzllcFZuzwIaMj/krE9 LTRfnqdbB9jtNzudQpV0k0HAeHZtz9yjECMRRkY9EVYuC/cRoEfXUH8FGOW62dZf 2Z8jlxEP01JLhV6qcZ2I2zXlmNYAKzDPA6ordg8y47EYYQZxALdZBwXFpW7oCSsX jKQSYofyq2MetqTIU81Z8mY6bGUq1PvL+4aG768H5+veRorBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/JcdocDKFbU3u7Pg9ycqS1D7AaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTMxYTQyMjctY2I4My0z NjRkLTg1NmItNGY1Y2M5ZWU3ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaM5st/h0FeMsDHj6+lZ+ipfY0rjpwg2WErwkL24XZfIqgKpFQhap9k e/PhAo61ATlPDIXqB0uSEV5x8CsabQ3tNeKduI3UXqamhHfi67upFwHEYFW+Sw0U 3Fuo7QzOzqC5X3megSIHbsBjSA+ajqPo7UK4NSooh0L7pZoB3yvNWiG1mdq/wPIf bel52IAlq9ybI6ToGwxFVXmeqgqQnWOhNBoxhE35xxDMXrlgjgrNCMW5W+CzL2/M dCzw2qJK3/Pc/PYSGnowB9sZ39s0VwZ7arrcZxp38kLV3bnY8TkmempxgfvYG4/w 6u6I1Il6CeNygJGkC7YZ4bdZPwhK1Jc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:48 2025 by rpki-client