$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json) Hash identifier: HnsC3R+yVH+t32gwlM1vo77QfFPnYHyjfnkUkzYkR4Q= Subject key identifier: 45:E3:EA:0F:3F:D2:98:70:AE:39:3E:2B:81:2F:6A:21:37:32:88:12 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F43285849797447199C6981B8083E6200 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 7018 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:47:19:9c:69:81:b8:08:3e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=c09f8b3c-283f-4b12-830f-8d784c772250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:81:d0:0f:22:33:d4:c2:5b:a7:ae:27:a2: ea:d0:63:78:97:0d:a5:ca:92:20:e6:6a:75:e2:a7: 46:98:69:7b:36:9a:18:2a:33:2b:08:bb:8d:e7:7a: 69:a4:2f:12:87:4b:d7:5a:83:04:a5:fd:86:47:dd: ec:22:96:f1:c9:53:64:16:49:e3:ae:3a:29:84:6b: 75:06:03:57:bf:65:ea:0f:f7:56:70:30:21:19:e9: c2:37:9b:5c:36:04:47:2e:5d:38:33:90:a6:64:7a: c2:57:54:5e:ba:f6:68:81:3d:b3:ac:4b:e9:d4:0d: 0d:1c:c8:07:2d:1d:09:4d:ba:01:5c:b7:bb:3f:28: ca:8b:20:b0:7b:8c:f7:a8:05:f0:bc:a1:8e:88:b1: ee:a4:3a:e9:d2:6e:75:a8:25:93:4d:4e:68:a4:45: a1:a4:90:09:74:31:5e:51:8b:7a:4e:7e:c5:97:fd: 92:a9:7e:b9:b9:5f:a9:12:80:5f:55:22:3f:e8:1b: 44:85:d4:cc:39:ac:bd:7c:36:6a:10:de:9f:48:04: dc:7d:b9:5c:75:e2:43:0a:36:c5:99:ef:dd:22:7b: fa:1d:8a:7c:44:bf:a3:d3:b6:9c:59:db:a9:6e:19: 31:5b:25:83:24:17:d6:92:3c:dd:a5:e0:ba:64:dd: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E3:EA:0F:3F:D2:98:70:AE:39:3E:2B:81:2F:6A:21:37:32:88:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c7:fd:8d:7b:23:b9:2d:a3:1c:fe:f1:3d:9d:6e:d0:6c:fe: 5f:6e:89:e4:d1:6f:cf:7e:70:95:c8:a2:30:2a:2d:0e:96:2b: 7a:0c:d7:36:14:75:44:fc:fe:c4:56:c2:0e:29:54:35:69:e7: 7d:e3:19:bc:33:e5:1d:d2:72:12:f2:c3:e1:e9:e5:40:bf:07: 73:7e:1a:db:63:42:cf:85:13:31:6e:f9:66:a8:99:fc:73:fd: e5:7b:26:7f:4c:81:f4:6e:aa:ae:00:76:ec:85:23:80:c6:38: 8d:01:22:08:af:dd:24:9f:bf:7f:3f:a1:97:0a:2e:6b:4c:e2: 9d:30:dd:8f:5d:98:e1:37:cb:43:66:4a:66:f3:ad:07:83:25: 4e:27:93:df:3d:1b:eb:97:e9:a3:c9:a4:37:08:3f:88:48:de: ff:64:ca:00:2a:8e:07:ef:82:87:ab:84:e0:d0:fc:0f:ef:39: f2:eb:26:c1:11:bc:4a:a4:34:49:10:37:55:42:51:fc:3e:4d: 67:ea:b5:9d:10:ac:95:7a:6f:90:eb:1b:32:bd:66:54:0e:77: 97:fb:10:60:3b:5e:83:c0:c5:64:e5:cc:c8:9a:88:a7:0c:d6: 4c:bf:b4:76:dc:3a:56:ba:41:db:6b:8f:b7:6e:f7:65:6e:a9: b5:a1:b3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEcZnGmBuAg+YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk YzA5ZjhiM2MtMjgzZi00YjEyLTgzMGYtOGQ3ODRjNzcyMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtyB0A8iM9TCW6euJ6Lq0GN4lw2lypIg5mp1 4qdGmGl7NpoYKjMrCLuN53pppC8Sh0vXWoMEpf2GR93sIpbxyVNkFknjrjophGt1 BgNXv2XqD/dWcDAhGenCN5tcNgRHLl04M5CmZHrCV1ReuvZogT2zrEvp1A0NHMgH LR0JTboBXLe7PyjKiyCwe4z3qAXwvKGOiLHupDrp0m51qCWTTU5opEWhpJAJdDFe UYt6Tn7Fl/2SqX65uV+pEoBfVSI/6BtEhdTMOay9fDZqEN6fSATcfblcdeJDCjbF me/dInv6HYp8RL+j07acWdupbhkxWyWDJBfWkjzdpeC6ZN3GWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXj6g8/0phwrjk+K4EvaiE3MogSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWMzOGNiNDAtZDI0Ny0z YzNhLTk1NTUtNjE1MWFhYWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbH/Y17I7ktoxz+8T2dbtBs/l9uieTRb89+cJXIojAqLQ6WK3oM1zYU dUT8/sRWwg4pVDVp533jGbwz5R3SchLyw+Hp5UC/B3N+GttjQs+FEzFu+Waomfxz /eV7Jn9MgfRuqq4AduyFI4DGOI0BIgiv3SSfv38/oZcKLmtM4p0w3Y9dmOE3y0Nm SmbzrQeDJU4nk989G+uX6aPJpDcIP4hI3v9kygAqjgfvgoerhODQ/A/vOfLrJsER vEqkNEkQN1VCUfw+TWfqtZ0QrJV6b5DrGzK9ZlQOd5f7EGA7XoPAxWTlzMiaiKcM 1ky/tHbcOla6Qdtrj7du92VuqbWhs8A= -----END CERTIFICATE-----Generated at Tue May 13 18:18:00 2025 by rpki-client