$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json) Hash identifier: 1Yeuv1IyyvZKN5sz3vyMsb8kbiw35ZSTSlgQARAhp/s= Subject key identifier: B2:3A:BA:28:F7:98:D9:B4:8B:38:BF:EC:46:2E:3F:52:C9:5F:71:98 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584A58CB0B4C5122F29C603312C0 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 7018 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0b:4c:51:22:f2:9c:60:33:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=8ed6eb92-cede-4bdb-a855-6c0069086c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:15:cd:d6:80:f0:47:86:bb:2d:6b:8a:78: af:77:fb:8b:8a:a6:3b:b8:53:79:51:c7:c8:a5:d5: 67:60:0f:c3:8b:c0:83:61:d4:44:60:a3:60:0b:a1: b0:8c:7c:09:41:22:22:dc:69:0d:01:ed:c9:65:7a: 50:7e:cb:da:28:60:92:1a:3d:af:f5:16:be:ea:36: f1:f1:0a:5c:4f:0b:fc:46:7d:f1:36:bf:e9:f3:40: ac:e3:90:35:81:a6:0d:33:8c:05:dd:2f:75:29:fb: 38:07:84:49:f3:16:08:7e:2b:14:1a:25:1f:28:84: 2a:87:c1:63:8d:5e:c5:25:d2:c7:32:e1:96:82:a6: 53:0a:38:dc:e7:94:eb:b3:39:9c:50:87:24:20:7d: ca:81:13:5b:c1:41:c3:6d:9c:ab:a1:10:86:62:61: 30:dc:e2:2f:3c:e8:d3:f2:b4:33:73:95:be:85:ba: 6f:c6:c8:2c:2f:76:bd:52:b1:c0:17:41:b8:a1:85: 16:8b:3b:8c:6e:48:41:a2:86:a8:9d:75:fe:75:6d: 17:c4:3f:fd:fd:9b:68:81:c7:e3:77:84:29:64:e5: e9:82:c9:a0:9f:16:ef:65:af:8f:fd:9e:3d:ee:b0: a6:90:ec:1e:09:4d:bd:2b:fc:5a:6d:f0:07:06:7a: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:BA:28:F7:98:D9:B4:8B:38:BF:EC:46:2E:3F:52:C9:5F:71:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:82:1a:92:d9:50:23:ec:40:d2:0d:75:1e:18:ad:a2:fd:da: 78:d6:3f:92:c0:c5:f1:2a:7f:5f:40:d6:a0:42:34:70:5e:f6: 70:98:cc:65:10:5a:9b:79:de:f8:a5:42:6f:63:ff:54:48:7a: ba:28:ac:e0:39:8b:77:a4:85:0a:e9:53:99:33:67:c1:28:1c: e6:8b:3c:64:cd:0c:d7:24:2b:05:fa:70:ce:c4:83:9c:d5:62: b4:e3:c9:14:5d:93:0e:66:a0:69:e3:50:ea:d4:f8:cc:60:fb: 93:51:5c:74:40:55:6c:bf:ea:3a:e5:7d:49:b2:32:56:a1:15: eb:35:d4:13:fc:c5:95:55:06:79:4f:ed:13:66:4e:f4:fc:d9: 93:30:e6:32:95:ab:2c:e8:d1:b1:5d:a1:96:7a:8d:07:e1:08: 8c:bd:84:2a:e0:56:58:28:17:28:c9:dd:5b:0f:86:9e:05:7b: d4:68:4d:02:47:7b:34:dc:d3:a7:6b:2a:49:48:ba:fe:0a:78: 8b:c9:bb:e7:d8:a6:61:4c:ac:ef:72:d7:71:2a:5e:d1:eb:5e: 66:6d:c0:87:9d:e5:df:5f:77:97:11:b3:3d:20:08:5a:2e:4a: 75:5f:75:fd:84:ce:18:49:4d:15:d1:b9:db:dc:8d:78:32:a6: fb:e8:6d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywtMUSLynGAzEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk OGVkNmViOTItY2VkZS00YmRiLWE4NTUtNmMwMDY5MDg2YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+4VzdaA8EeGuy1rinivd/uLiqY7uFN5UcfI pdVnYA/Di8CDYdREYKNgC6GwjHwJQSIi3GkNAe3JZXpQfsvaKGCSGj2v9Ra+6jbx 8QpcTwv8Rn3xNr/p80Cs45A1gaYNM4wF3S91Kfs4B4RJ8xYIfisUGiUfKIQqh8Fj jV7FJdLHMuGWgqZTCjjc55TrszmcUIckIH3KgRNbwUHDbZyroRCGYmEw3OIvPOjT 8rQzc5W+hbpvxsgsL3a9UrHAF0G4oYUWizuMbkhBooaonXX+dW0XxD/9/Ztogcfj d4QpZOXpgsmgnxbvZa+P/Z497rCmkOweCU29K/xabfAHBnqidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI6uij3mNm0izi/7EYuP1LJX3GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWMzOGNiNDAtZDI0Ny0z YzNhLTk1NTUtNjE1MWFhYWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKCGpLZUCPsQNINdR4YraL92njWP5LAxfEqf19A1qBCNHBe9nCYzGUQ Wpt53vilQm9j/1RIeroorOA5i3ekhQrpU5kzZ8EoHOaLPGTNDNckKwX6cM7Eg5zV YrTjyRRdkw5moGnjUOrU+Mxg+5NRXHRAVWy/6jrlfUmyMlahFes11BP8xZVVBnlP 7RNmTvT82ZMw5jKVqyzo0bFdoZZ6jQfhCIy9hCrgVlgoFyjJ3VsPhp4Fe9RoTQJH ezTc06drKklIuv4KeIvJu+fYpmFMrO9y13EqXtHrXmZtwIed5d9fd5cRsz0gCFou SnVfdf2EzhhJTRXRudvcjXgypvvobcs= -----END CERTIFICATE-----Generated at Wed Jul 2 20:42:51 2025 by rpki-client