$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa File: 1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa (raw, json) Hash identifier: 9f35907Yw0fcsrZdMAp01D/qzw9/TEviO+phhJMoQCc= Subject key identifier: B0:8E:89:5E:98:D1:18:FE:80:65:39:1D:A0:89:D0:50:25:48:A9:22 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584950F96BCC2737108A727AC080 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 22612 IP address blocks: 162.255.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:6b:cc:27:37:10:8a:72:7a:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=7bab2c30-0abe-4768-a4b4-ca454d1ec490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:45:44:a7:f8:7f:34:1c:e8:e5:aa:b6:3b: d5:31:84:13:1c:22:bf:92:80:e3:3e:8c:ab:ab:3f: 6d:2f:3b:94:5f:49:e3:3d:3a:ee:8d:7d:6b:85:46: 9e:ca:3a:32:dc:6a:98:d0:48:b0:03:95:35:90:43: 2e:de:80:51:23:55:db:10:e5:39:3e:f2:1e:3d:13: 5b:b0:c9:c7:8d:99:8c:5b:34:00:5f:a9:18:b4:ae: 3e:b0:10:13:1e:49:53:ba:07:1a:6d:91:80:42:39: 01:c8:50:79:56:09:10:f7:fd:01:a2:89:02:de:58: 08:f7:95:f0:47:80:90:4b:59:e1:d1:26:d9:57:ca: 66:cc:11:42:16:40:89:95:39:e8:28:2b:02:47:66: e4:12:28:38:c5:4e:01:9d:90:c8:bc:50:71:00:70: ed:ad:68:d6:41:c6:21:52:b1:7a:07:c7:68:d8:94: 29:85:fd:75:bf:eb:58:7b:7d:8c:1e:ac:1c:6b:d5: ed:36:37:ea:c2:dc:89:fc:fc:27:06:f0:93:10:5e: 9a:f3:ef:3d:03:47:d4:62:fc:46:5b:3f:c2:81:a8: 06:c7:20:50:9c:59:fc:4f:cd:56:90:cf:45:a4:10: b4:74:04:4e:e8:da:34:cf:19:34:71:bc:e8:83:90: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8E:89:5E:98:D1:18:FE:80:65:39:1D:A0:89:D0:50:25:48:A9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 162.255.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:66:89:fb:b1:57:f0:ae:cb:df:95:46:0d:4c:2d:02:41:49: d6:0d:b6:e2:bf:4e:26:97:de:bb:3c:1d:3e:57:66:86:ae:9e: 77:a5:91:cf:ca:7a:57:dd:cb:e7:d2:34:f6:2f:5e:e1:cb:5f: c7:61:6b:b3:76:9b:33:9c:8b:d5:a0:b5:45:c5:c6:ac:a3:27: f7:27:93:a1:c7:9e:eb:7e:b2:ab:0a:06:c1:8c:2f:a4:d4:80: 7a:23:d0:d5:08:15:1f:d1:38:c0:c8:70:dc:18:97:80:dc:f8: 70:84:19:3c:a9:61:15:d2:b5:b1:a8:79:51:19:70:36:f6:08: 01:28:1e:ca:c7:b7:e5:e4:e5:df:08:2e:a3:43:03:c1:69:05: 84:b8:67:df:eb:31:90:e1:c7:86:a9:44:fe:ba:46:50:70:88: 54:dd:06:5d:22:5a:32:d0:b9:26:f3:66:40:ef:b3:8c:33:26: 4a:2a:f4:0a:49:79:98:3a:a8:0d:6b:b9:fb:b8:b3:a6:ec:61: 81:1e:9d:b2:88:f8:66:bd:85:16:47:7a:ef:4e:2a:f9:61:a8: 8d:fd:72:1a:84:5f:58:82:9b:4e:0a:cb:ab:c7:55:cf:d8:78: 02:1a:4a:f8:2d:fa:50:5e:ab:fa:2b:d6:cc:4f:5b:dc:85:9a: a0:27:27:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WvMJzcQinJ6wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk N2JhYjJjMzAtMGFiZS00NzY4LWE0YjQtY2E0NTRkMWVjNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGRFRKf4fzQc6OWqtjvVMYQTHCK/koDjPoyr qz9tLzuUX0njPTrujX1rhUaeyjoy3GqY0EiwA5U1kEMu3oBRI1XbEOU5PvIePRNb sMnHjZmMWzQAX6kYtK4+sBATHklTugcabZGAQjkByFB5VgkQ9/0BookC3lgI95Xw R4CQS1nh0SbZV8pmzBFCFkCJlTnoKCsCR2bkEig4xU4BnZDIvFBxAHDtrWjWQcYh UrF6B8do2JQphf11v+tYe32MHqwca9XtNjfqwtyJ/PwnBvCTEF6a8+89A0fUYvxG Wz/CgagGxyBQnFn8T81WkM9FpBC0dARO6No0zxk0cbzog5DyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCOiV6Y0Rj+gGU5HaCJ0FAlSKkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMWU2Nzc1NmQtMmMzOC0z YWVkLWE1ZDMtNThhYWVkYWQyYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFmifuxV/Cuy9+VRg1MLQJBSdYNtuK/TiaX3rs8HT5XZoaunnelkc/K elfdy+fSNPYvXuHLX8dha7N2mzOci9WgtUXFxqyjJ/cnk6HHnut+sqsKBsGML6TU gHoj0NUIFR/ROMDIcNwYl4Dc+HCEGTypYRXStbGoeVEZcDb2CAEoHsrHt+Xk5d8I LqNDA8FpBYS4Z9/rMZDhx4apRP66RlBwiFTdBl0iWjLQuSbzZkDvs4wzJkoq9ApJ eZg6qA1rufu4s6bsYYEenbKI+Ga9hRZHeu9OKvlhqI39chqEX1iCm04Ky6vHVc/Y eAIaSvgt+lBeq/or1sxPW9yFmqAnJyk= -----END CERTIFICATE-----Generated at Tue May 6 03:04:25 2025 by rpki-client