$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa File: 144db5ca-63fd-3501-9729-29848757d150.roa (raw, json) Hash identifier: Qfs8v/QjHjsf7f6SxOwVBhin6Fc6fa7/lt3SbBQZxj8= Subject key identifier: 7A:D4:A3:DE:72:B7:E7:A9:1C:C4:A1:EE:D8:F0:4A:BE:6C:22:15:46 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584950F96BEE4A1FC752A709CB80 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 22612 IP address blocks: 198.54.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:6b:ee:4a:1f:c7:52:a7:09:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=f29273b1-0bfb-4d4b-8f92-ddb305d66982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:84:d9:1b:c8:6e:db:1b:3a:68:1d:63:8d: de:99:cb:ba:60:cf:36:5a:d0:b3:cf:3c:de:48:e9: 90:88:aa:e7:0e:37:8c:13:43:81:5e:c4:0e:6d:2c: ff:85:fe:24:b7:30:86:d4:7b:92:be:c8:76:c3:4c: 85:e9:dd:f3:de:c3:7f:a6:8c:b3:df:dc:a3:d0:ef: b2:91:ca:0e:86:ce:2a:70:ee:52:b1:e2:31:2e:28: b5:2c:03:09:e4:5b:cf:15:42:a2:1c:06:41:a7:ba: f9:8b:d4:ad:4f:b3:f5:07:2d:48:d0:bd:49:38:12: 4f:b6:11:b2:87:df:07:e8:db:6a:02:c0:48:b7:11: d5:b9:9a:10:10:6e:e6:4e:70:bb:ea:de:68:53:0c: 64:6a:9a:fa:ba:96:58:35:9f:4a:34:0b:92:b4:7b: 46:15:29:5c:f9:6b:d5:2a:d2:d3:0e:23:5d:bd:d4: 5a:c3:ac:1d:de:cf:70:31:01:ea:72:bf:b0:c6:ba: c7:5c:69:e1:24:ac:a1:8f:a9:99:2b:75:27:3c:ab: 36:9b:e2:fd:09:3c:5d:fc:27:ed:b3:00:7b:11:cd: 46:36:9c:e2:7d:24:d2:0c:61:69:4b:ca:13:e2:73: 7a:f5:a8:aa:08:6e:b2:80:69:8d:02:87:c5:f2:ff: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D4:A3:DE:72:B7:E7:A9:1C:C4:A1:EE:D8:F0:4A:BE:6C:22:15:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 198.54.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:49:b8:4b:63:33:68:e2:fe:f7:af:07:f0:6b:28:d3:4a:72: 5b:e9:b9:08:bb:81:b3:13:28:33:8a:1f:8a:d4:76:a5:98:bc: 25:10:a4:0d:b4:3d:c8:28:d4:f8:30:54:8c:5f:e2:57:1b:58: 8f:df:fa:25:6e:b6:ba:15:b0:8f:a9:62:3e:d9:1b:9b:d3:08: a0:96:9f:fd:a0:fe:ae:a9:ae:e1:99:ef:dc:cc:74:6d:d4:69: da:b7:52:81:3e:ca:5a:54:d3:23:27:31:2b:d0:0a:d3:9d:b1: 24:6d:26:40:95:ca:57:38:8b:1d:b7:3e:e0:3a:26:9c:d2:a3: db:74:e3:7e:5a:b1:d0:c1:cf:90:4d:68:46:16:8e:32:84:6a: 7e:48:dc:18:1d:59:12:2f:51:c7:5d:8c:ef:bd:47:25:1b:1d: 21:e8:db:94:70:20:50:2f:fc:54:7c:d1:cf:a6:0b:2d:43:ef: 58:08:5a:4d:31:27:1f:00:db:a2:5f:6b:85:74:e1:16:59:50: 54:d6:f4:6c:d6:63:8f:ee:39:c7:c6:4a:70:0c:f4:ec:cd:a5: 7f:57:ac:d8:c6:10:e6:32:5c:04:04:23:6d:4d:df:4b:61:55: 72:44:dd:7c:cf:8c:38:b2:37:60:28:27:d1:31:6c:f1:25:44: 65:8b:cc:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WvuSh/HUqcJy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZjI5MjczYjEtMGJmYi00ZDRiLThmOTItZGRiMzA1ZDY2OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKuE2RvIbtsbOmgdY43emcu6YM82WtCzzzze SOmQiKrnDjeME0OBXsQObSz/hf4ktzCG1HuSvsh2w0yF6d3z3sN/poyz39yj0O+y kcoOhs4qcO5SseIxLii1LAMJ5FvPFUKiHAZBp7r5i9StT7P1By1I0L1JOBJPthGy h98H6NtqAsBItxHVuZoQEG7mTnC76t5oUwxkapr6upZYNZ9KNAuStHtGFSlc+WvV KtLTDiNdvdRaw6wd3s9wMQHqcr+wxrrHXGnhJKyhj6mZK3UnPKs2m+L9CTxd/Cft swB7Ec1GNpzifSTSDGFpS8oT4nN69aiqCG6ygGmNAofF8v9WUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrUo95yt+epHMSh7tjwSr5sIhVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMTQ0ZGI1Y2EtNjNmZC0z NTAxLTk3MjktMjk4NDg3NTdkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpJuEtjM2ji/vevB/BrKNNKclvpuQi7gbMTKDOKH4rUdqWYvCUQpA20 Pcgo1PgwVIxf4lcbWI/f+iVutroVsI+pYj7ZG5vTCKCWn/2g/q6pruGZ79zMdG3U adq3UoE+ylpU0yMnMSvQCtOdsSRtJkCVylc4ix23PuA6JpzSo9t0435asdDBz5BN aEYWjjKEan5I3BgdWRIvUcddjO+9RyUbHSHo25RwIFAv/FR80c+mCy1D71gIWk0x Jx8A26Jfa4V04RZZUFTW9GzWY4/uOcfGSnAM9OzNpX9XrNjGEOYyXAQEI21N30th VXJE3XzPjDiyN2AoJ9ExbPElRGWLzBU= -----END CERTIFICATE-----Generated at Sun Apr 6 12:46:00 2025 by rpki-client