$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa File: e8ad7381-6239-3390-b529-574e6606e15f.roa (raw, json) Hash identifier: SP2RTqfNesd9ypV990Jum90DB3G8wIko9fnOCWXOxF0= Subject key identifier: AA:22:A0:A9:FC:9E:55:85:86:CA:3C:97:5F:5D:6A:6C:7F:80:DE:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848EA92925107152F6A2B767E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa Signing time: Mon 17 Feb 2025 20:41:22 +0000 ROA not before: Mon 17 Feb 2025 20:41:22 +0000 ROA not after: Sun 18 May 2025 19:41:22 +0000 asID: 15169 IP address blocks: 172.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:92:92:51:07:15:2f:6a:2b:76:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 17 20:41:22 2025 GMT Not After : May 18 19:41:22 2025 GMT Subject: CN=8b78e9d2-39f7-4f4e-b270-b4df394e3306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b0:6b:5b:71:6d:43:e2:64:bc:03:a1:49:92: ca:c8:5a:a6:46:32:6a:8e:c7:34:7b:30:62:7b:a2: 48:5d:9f:30:79:33:94:fa:20:ab:46:b3:42:41:70: 51:63:d6:e8:18:20:c1:23:5f:fa:13:67:6e:b8:ba: a2:68:ec:79:31:22:ca:1a:53:b7:d8:39:20:ca:2c: 11:25:f9:5e:5f:79:b6:b6:9e:5f:b5:16:96:58:98: 4e:66:8c:a7:f8:dd:d3:4d:c0:39:0b:40:26:a1:f1: 6f:ca:dd:df:0f:9c:56:4e:7f:ea:93:e9:4b:ce:a1: 35:7c:02:c8:9f:95:9d:e3:7d:de:68:97:ef:22:53: a4:0a:3f:1b:8a:eb:a3:97:db:e0:b4:05:5e:97:a7: c9:8a:b2:b2:30:5a:84:36:71:f2:36:c7:db:8e:cd: 72:51:89:57:73:e0:a8:56:87:19:83:09:69:f1:0d: 9b:1d:66:f2:b5:da:b0:a9:a7:9c:5c:da:d6:92:b1: 0f:24:71:52:81:fa:3e:a6:0d:8d:f7:93:d5:b7:f1: a4:b1:3d:ed:e8:29:fb:7f:51:4e:9b:5e:a3:76:cb: e0:af:1b:ec:22:5e:b8:25:ee:54:64:73:97:d5:6c: f4:15:0c:d9:b6:95:ca:36:5c:fa:bb:1d:3c:b6:a4: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:22:A0:A9:FC:9E:55:85:86:CA:3C:97:5F:5D:6A:6C:7F:80:DE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:86:e1:b0:2e:76:4d:8b:ce:99:36:cf:6a:f4:aa:ae:d6:0b: 6f:d1:2b:ab:19:5b:4f:41:42:b4:a9:c0:65:73:5c:da:f9:58: ad:9c:f0:27:29:8d:6f:36:95:56:35:16:4c:f7:eb:1d:e7:c9: bf:9e:87:db:a7:8d:53:46:9f:b3:de:73:09:da:1c:7b:b1:50: 8f:da:ba:a2:6d:dd:e3:c9:77:cd:c2:2b:cc:50:82:a2:52:d7: 16:13:81:cb:c7:78:71:26:2f:88:65:98:06:dd:b5:bb:5f:26: c7:4b:f8:70:e4:41:a0:b5:52:e1:08:79:38:06:0f:d1:4a:16: a2:8e:13:34:61:1a:c2:56:39:7d:d2:72:30:f9:62:87:5f:1e: 00:4e:2d:28:2c:3e:bf:8a:cd:80:c5:0d:64:2b:40:37:c6:94: d4:90:13:ee:bc:68:73:1a:f6:52:1c:dc:5b:2c:06:48:c4:d1: 2a:2d:23:a3:cb:44:20:9f:51:33:37:1b:52:e7:64:b2:b0:5a: 79:51:ec:c0:b8:c4:36:5e:a0:ce:4e:22:20:d1:12:dc:9f:51: c8:08:c4:31:ec:04:b2:7e:bb:18:fc:25:55:38:b0:b4:b2:50: 4e:e4:c3:da:66:a2:9d:31:59:e5:70:1f:82:23:a6:e7:c5:f1: dd:22:ad:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjqkpJRBxUvait2fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxNzIwNDEyMloXDTI1MDUxODE5NDEyMlowLzEtMCsGA1UEAxMk OGI3OGU5ZDItMzlmNy00ZjRlLWIyNzAtYjRkZjM5NGUzMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibBrW3FtQ+JkvAOhSZLKyFqmRjJqjsc0ezBi e6JIXZ8weTOU+iCrRrNCQXBRY9boGCDBI1/6E2duuLqiaOx5MSLKGlO32DkgyiwR JfleX3m2tp5ftRaWWJhOZoyn+N3TTcA5C0AmofFvyt3fD5xWTn/qk+lLzqE1fALI n5Wd433eaJfvIlOkCj8biuujl9vgtAVel6fJirKyMFqENnHyNsfbjs1yUYlXc+Co VocZgwlp8Q2bHWbytdqwqaecXNrWkrEPJHFSgfo+pg2N95PVt/GksT3t6Cn7f1FO m16jdsvgrxvsIl64Je5UZHOX1Wz0FQzZtpXKNlz6ux08tqQ85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoioKn8nlWFhso8l19damx/gN7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZThhZDczODEtNjIzOS0z MzkwLWI1MjktNTc0ZTY2MDZlMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeG4bAudk2Lzpk2z2r0qq7WC2/RK6sZW09BQrSpwGVzXNr5WK2c8Ccp jW82lVY1Fkz36x3nyb+eh9unjVNGn7PecwnaHHuxUI/auqJt3ePJd83CK8xQgqJS 1xYTgcvHeHEmL4hlmAbdtbtfJsdL+HDkQaC1UuEIeTgGD9FKFqKOEzRhGsJWOX3S cjD5YodfHgBOLSgsPr+KzYDFDWQrQDfGlNSQE+68aHMa9lIc3FssBkjE0SotI6PL RCCfUTM3G1LnZLKwWnlR7MC4xDZeoM5OIiDREtyfUcgIxDHsBLJ+uxj8JVU4sLSy UE7kw9pmop0xWeVwH4IjpufF8d0irTk= -----END CERTIFICATE-----Generated at Fri Apr 4 08:57:46 2025 by rpki-client