$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa File: 53ff869c-cd2e-306b-a270-97070a097b4b.roa (raw, json) Hash identifier: 9yd5F+intTX8QAkK9VInUH5rSn8fMqIU5RFTtzHyvBQ= Subject key identifier: 95:0F:20:66:C0:64:4D:DF:3A:21:B1:11:F9:F0:F5:5B:75:C8:EC:62 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DB968B235386CF1ED640 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 107.188.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:db:96:8b:23:53:86:cf:1e:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=ac71b2bd-666b-4894-88fd-bd2dfd9712e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:6d:c2:07:12:10:28:7d:d5:25:6d:0c:f5: 35:0b:c4:62:2f:73:ed:1d:64:c6:19:f4:c8:ca:01: 11:1c:5a:b4:a0:4f:fd:74:51:5f:b7:7a:20:59:6c: 05:c1:d2:cc:4d:88:0d:e2:54:ba:1e:6a:96:c2:a1: 2d:57:c5:70:02:aa:e4:b2:6b:c4:ff:b0:0b:b8:64: ce:82:27:fe:0b:d1:f0:43:b9:a0:fb:ed:65:16:51: 27:4e:9e:c5:e3:2d:61:bf:20:3c:ba:5b:7f:4f:ad: 54:e1:83:81:b8:21:1f:c3:d9:05:f6:5e:e3:c4:b0: 09:8e:85:30:2b:71:7f:f8:8b:b3:b8:04:8e:26:78: 56:25:be:47:91:24:b9:15:ec:b0:cb:99:4c:0d:73: 65:78:14:4a:ca:88:20:45:e8:a2:30:48:0b:8a:bf: 23:4a:a4:5f:bc:38:ad:3f:94:ea:1e:f6:a8:f7:68: 15:34:c8:f0:c2:ff:31:45:25:0f:12:26:0a:f3:4f: 82:3e:7a:59:a7:4d:a3:11:61:3a:b7:9d:e9:4d:ba: 9c:14:c2:41:05:fc:99:73:e5:a9:5e:19:28:f4:43: 00:94:5b:93:e3:70:a2:aa:13:bc:14:aa:eb:3f:eb: 59:b5:8d:38:71:4f:ef:9d:3b:c8:f8:69:ca:26:2f: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:20:66:C0:64:4D:DF:3A:21:B1:11:F9:F0:F5:5B:75:C8:EC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 107.188.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f6:da:4f:0e:bb:6f:e3:e9:da:31:41:e6:ae:26:2f:4c:32: 82:65:27:c5:a8:c2:ae:6b:ae:45:6e:f5:3b:27:98:96:9d:11: 30:43:38:a4:24:2a:ee:cc:0c:17:9a:4b:c6:91:10:dd:1c:23: 06:4b:ad:6a:d9:53:02:0c:67:bc:6a:f3:17:be:a8:62:cc:d5: da:5f:2b:7a:1f:14:5c:bd:37:36:84:05:ac:85:74:7a:bb:e5: e5:60:bc:d2:50:18:ce:25:62:ae:97:cb:a5:3a:99:ba:96:bd: a1:6f:ab:6d:ea:b7:76:8e:8c:48:bb:ea:a2:75:ff:99:09:c5: e6:bf:4e:fb:88:c7:55:48:72:8f:75:00:6c:fc:69:02:7f:af: c0:91:8a:06:7f:14:9f:7b:35:3e:a8:59:99:32:31:6d:88:76: 18:56:c9:40:a3:7f:b3:d7:a3:b9:09:31:09:73:83:97:c5:6f: dc:de:dd:77:eb:94:b0:b4:28:20:5d:c0:b0:ba:6b:27:47:06: 70:68:59:cf:2d:70:0e:3c:6b:d2:b4:9a:77:e9:f7:f9:79:6a: 25:40:74:0b:64:4a:85:47:32:86:2c:7c:29:ef:c7:c8:51:48: 18:5a:bc:f8:90:9a:81:d7:e6:11:dd:7b:3a:99:d2:bc:74:7d: 8a:fd:39:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOduWiyNThs8e1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YWM3MWIyYmQtNjY2Yi00ODk0LTg4ZmQtYmQyZGZkOTcxMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ptwgcSECh91SVtDPU1C8RiL3PtHWTGGfTI ygERHFq0oE/9dFFft3ogWWwFwdLMTYgN4lS6HmqWwqEtV8VwAqrksmvE/7ALuGTO gif+C9HwQ7mg++1lFlEnTp7F4y1hvyA8ult/T61U4YOBuCEfw9kF9l7jxLAJjoUw K3F/+IuzuASOJnhWJb5HkSS5Feywy5lMDXNleBRKyoggReiiMEgLir8jSqRfvDit P5TqHvao92gVNMjwwv8xRSUPEiYK80+CPnpZp02jEWE6t53pTbqcFMJBBfyZc+Wp Xhko9EMAlFuT43CiqhO8FKrrP+tZtY04cU/vnTvI+GnKJi9czQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUPIGbAZE3fOiGxEfnw9Vt1yOxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTNmZjg2OWMtY2QyZS0z MDZiLWEyNzAtOTcwNzBhMDk3YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa7yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX22k8Ou2/j6doxQeauJi9MMoJlJ8Wowq5rrkVu9TsnmJadETBDOKQk Ku7MDBeaS8aREN0cIwZLrWrZUwIMZ7xq8xe+qGLM1dpfK3ofFFy9NzaEBayFdHq7 5eVgvNJQGM4lYq6Xy6U6mbqWvaFvq23qt3aOjEi76qJ1/5kJxea/TvuIx1VIco91 AGz8aQJ/r8CRigZ/FJ97NT6oWZkyMW2IdhhWyUCjf7PXo7kJMQlzg5fFb9ze3Xfr lLC0KCBdwLC6aydHBnBoWc8tcA48a9K0mnfp9/l5aiVAdAtkSoVHMoYsfCnvx8hR SBhavPiQmoHX5hHdezqZ0rx0fYr9OTM= -----END CERTIFICATE-----Generated at Thu May 8 22:59:15 2025 by rpki-client