$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa File: 280a2e1b-996f-3776-9415-21785aaf5dda.roa (raw, json) Hash identifier: rG76g2/9wA12WiKt2WWW0O4NuGR5ufftsjxajfWCAAo= Subject key identifier: 79:B4:C1:C1:F2:AB:99:83:35:1B:2E:1B:2F:48:77:54:D2:86:D7:CB Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584900DE7BC813BCBDAC8754E2C0 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa Signing time: Tue 25 Feb 2025 20:22:06 +0000 ROA not before: Tue 25 Feb 2025 20:22:06 +0000 ROA not after: Mon 26 May 2025 19:22:06 +0000 asID: 22612 IP address blocks: 159.198.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:de:7b:c8:13:bc:bd:ac:87:54:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Feb 25 20:22:06 2025 GMT Not After : May 26 19:22:06 2025 GMT Subject: CN=ee45361d-bbaf-48c1-b884-50a68a85df62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:d1:40:41:58:fa:35:99:44:96:58:bf:d1: 48:20:a0:8c:df:b9:ec:18:74:3a:ba:71:60:aa:62: 02:6d:d1:a8:fd:14:9e:42:77:44:ac:cc:ec:e7:ce: 05:4a:90:ee:2b:8d:a8:ca:8c:ac:15:31:fe:51:2a: 8d:11:8a:d2:10:3c:18:90:b9:01:48:10:77:ea:03: 6d:31:17:94:1c:50:3c:f7:ff:81:be:7f:b7:e4:35: bf:24:e4:dd:ae:70:7b:c4:b8:a8:24:61:16:76:90: 6a:61:49:66:dc:55:50:48:19:99:cf:03:7c:13:27: 6d:5a:fd:d1:e7:39:9d:4b:16:4b:43:9e:d1:5f:e6: 39:ef:a5:44:64:a1:36:87:6a:9c:a9:96:fa:b8:0f: c8:39:83:f6:f5:28:6a:80:bd:72:77:b6:71:e9:ec: e1:31:34:cb:57:82:20:50:7f:fe:a5:f7:f2:b0:d6: b8:d4:0b:cb:09:4c:67:6d:a3:b0:9c:78:51:ac:27: 32:73:a8:20:c3:eb:3c:d6:9d:5e:5d:e3:27:d5:a5: 9d:e1:05:36:8d:e2:5d:68:f1:66:8a:d4:72:5d:7f: c2:af:b6:23:6a:c1:f4:64:0b:8b:03:78:b6:bd:d3: da:57:2a:12:77:6f:cf:46:33:e7:c1:0d:bc:aa:a3: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:C1:C1:F2:AB:99:83:35:1B:2E:1B:2F:48:77:54:D2:86:D7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:61:cc:d6:01:3e:f5:79:1d:14:29:87:28:35:74:81:84:f1: b8:a3:29:de:47:de:7f:d1:ed:c8:54:eb:88:0a:f6:a0:75:81: 09:d2:dc:fd:b3:ff:5e:7b:6d:3c:b2:81:25:87:e3:e9:78:41: cf:6c:87:2f:f6:ae:b0:97:b6:64:bc:fb:d7:d6:70:50:ed:d8: 7b:62:97:54:a5:6e:9f:b2:27:c0:05:52:ae:38:21:5e:ad:0e: 26:22:68:07:71:2c:5b:3a:f8:7b:a0:bc:c6:a4:5a:81:69:52: c3:75:0d:3c:a3:74:20:87:a6:3e:1c:2e:a4:2d:cc:b4:1e:d2: f2:50:71:40:13:7f:57:8b:a5:7a:16:57:c8:44:33:b0:04:4c: c0:ca:95:d6:1a:56:3a:4c:6d:0c:69:71:15:bb:ee:d5:32:98: 3d:7d:6a:cb:0f:80:46:63:cf:b3:ee:f3:65:e8:9d:cb:b1:36: 73:b6:a9:58:e9:80:8c:4c:2b:e6:59:1e:73:98:ac:b3:a9:1c: a4:77:b6:88:4d:ea:93:60:27:46:2f:dd:15:ec:5f:26:aa:4b: a1:7d:16:09:76:d2:62:02:70:fb:e2:b8:e4:71:97:82:02:8b: cc:28:52:80:ef:fc:a8:a3:dd:b1:66:34:12:1f:e3:4a:25:57: 58:96:11:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkA3nvIE7y9rIdU4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDIyNTIwMjIwNloXDTI1MDUyNjE5MjIwNlowLzEtMCsGA1UEAxMk ZWU0NTM2MWQtYmJhZi00OGMxLWI4ODQtNTBhNjhhODVkZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKnRQEFY+jWZRJZYv9FIIKCM37nsGHQ6unFg qmICbdGo/RSeQndErMzs584FSpDuK42oyoysFTH+USqNEYrSEDwYkLkBSBB36gNt MReUHFA89/+Bvn+35DW/JOTdrnB7xLioJGEWdpBqYUlm3FVQSBmZzwN8EydtWv3R 5zmdSxZLQ57RX+Y576VEZKE2h2qcqZb6uA/IOYP29ShqgL1yd7Zx6ezhMTTLV4Ig UH/+pffysNa41AvLCUxnbaOwnHhRrCcyc6ggw+s81p1eXeMn1aWd4QU2jeJdaPFm itRyXX/Cr7YjasH0ZAuLA3i2vdPaVyoSd2/PRjPnwQ28qqNMxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm0wcHyq5mDNRsuGy9Id1TShtfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMjgwYTJlMWItOTk2Zi0z Nzc2LTk0MTUtMjE3ODVhYWY1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn8ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVhzNYBPvV5HRQphyg1dIGE8bijKd5H3n/R7chU64gK9qB1gQnS3P2z /157bTyygSWH4+l4Qc9shy/2rrCXtmS8+9fWcFDt2Htil1Slbp+yJ8AFUq44IV6t DiYiaAdxLFs6+HugvMakWoFpUsN1DTyjdCCHpj4cLqQtzLQe0vJQcUATf1eLpXoW V8hEM7AETMDKldYaVjpMbQxpcRW77tUymD19assPgEZjz7Pu82XoncuxNnO2qVjp gIxMK+ZZHnOYrLOpHKR3tohN6pNgJ0Yv3RXsXyaqS6F9Fgl20mICcPviuORxl4IC i8woUoDv/Kij3bFmNBIf40olV1iWEQo= -----END CERTIFICATE-----Generated at Mon May 5 12:57:21 2025 by rpki-client