$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa File: 293c24be-5877-3a18-8d22-1b2ad2d976b3.roa (raw, json) Hash identifier: Vjt9yTJyW6CzFJpreYJy3cssUIETZZ8T2Q1c8AmfhNU= Subject key identifier: 40:04:9D:30:47:89:B3:B2:A1:4E:03:35:0C:37:1B:BA:EB:FC:DF:EB Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584900DDC8710008ABBF3A5CE000 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa Signing time: Tue 25 Feb 2025 20:20:41 +0000 ROA not before: Tue 25 Feb 2025 20:20:41 +0000 ROA not after: Mon 26 May 2025 19:20:41 +0000 asID: 22612 IP address blocks: 159.198.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:dd:c8:71:00:08:ab:bf:3a:5c:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Feb 25 20:20:41 2025 GMT Not After : May 26 19:20:41 2025 GMT Subject: CN=d4cd19a6-b403-47a4-b181-fe157fa0af26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:e9:73:58:f4:a0:9c:fc:04:9d:d8:48:53: 98:8a:2b:4f:12:13:6c:18:05:67:b0:f6:b7:59:95: 8c:da:9d:e2:88:fb:01:cd:70:11:be:62:37:b6:10: 25:53:d1:1f:ef:37:57:f0:37:4b:f3:12:ea:3d:05: 98:38:dc:38:df:17:40:8a:6f:8d:b7:48:cf:ff:2e: da:46:6f:59:a8:65:2b:ca:6a:20:1c:95:a1:5a:e4: 52:74:e9:28:33:4b:d7:65:d4:8f:a2:c2:1b:81:cd: 7b:c2:3f:3f:f8:4b:58:fa:b8:96:d4:d2:23:3d:06: 43:04:19:bf:5e:63:70:da:e8:6e:61:8a:83:ad:d1: 1e:56:17:75:50:a4:f4:54:73:cc:50:a5:dd:14:aa: 43:be:64:dc:c8:7f:4d:7a:c4:63:cb:50:90:38:e8: a2:8c:60:aa:20:47:43:0c:17:f5:45:92:b6:c1:6d: a8:46:bd:1c:a2:44:8f:b8:57:af:9a:10:d1:9e:c5: e8:7f:91:75:2c:c6:4b:29:28:e9:52:3b:e5:6e:ba: 3a:73:c0:78:5d:ce:74:d9:02:8a:b9:1f:03:c9:eb: 59:3e:c1:3f:bd:2e:8f:b0:3b:5a:09:ce:33:5e:0a: ba:a9:fa:0a:13:5a:c3:ae:02:0e:b2:9f:37:0c:91: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:04:9D:30:47:89:B3:B2:A1:4E:03:35:0C:37:1B:BA:EB:FC:DF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d3:ed:55:7f:3f:11:56:b3:58:5e:ec:b8:c5:8d:4e:38:a4: f5:af:d8:5a:d2:34:e7:e7:2f:91:96:aa:71:35:15:e8:14:23: a3:45:65:53:20:27:e7:8f:e5:79:99:2d:a0:1c:f0:84:68:6d: 62:0e:d8:32:9a:e7:53:a0:46:a5:10:11:ff:80:e4:a2:4f:a1: 7b:ce:29:9a:4c:d1:88:55:45:91:dc:6a:b4:69:6c:b0:6f:d2: 64:0d:00:03:57:ad:de:0e:0d:82:80:9a:75:62:4e:68:56:e6: 9d:1d:78:ff:ed:91:f4:96:0f:ae:ec:ac:44:17:ca:f6:85:b2: aa:fa:f2:7a:a7:d7:7c:b4:42:47:16:1c:a0:f7:9c:11:20:89: 33:65:90:73:40:65:1d:d5:5b:f4:cf:6b:28:11:fb:d3:d5:93: 6a:9a:5d:51:1b:ab:c5:d3:32:52:40:38:ca:66:4f:d7:6d:82: 19:97:d0:3a:6e:ba:98:04:53:c8:99:87:83:22:da:2e:90:03: 75:65:f8:07:c5:a0:3c:08:b5:08:97:33:b5:1c:60:be:77:ce: 0d:90:4b:1c:d5:a9:31:63:f4:ed:04:52:94:e6:85:41:3b:d6: 34:53:36:9c:31:8f:ba:8c:ba:de:64:9c:35:d7:0b:b2:ba:17: 08:46:0a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkA3chxAAirvzpc4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDIyNTIwMjA0MVoXDTI1MDUyNjE5MjA0MVowLzEtMCsGA1UEAxMk ZDRjZDE5YTYtYjQwMy00N2E0LWIxODEtZmUxNTdmYTBhZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptrpc1j0oJz8BJ3YSFOYiitPEhNsGAVnsPa3 WZWM2p3iiPsBzXARvmI3thAlU9Ef7zdX8DdL8xLqPQWYONw43xdAim+Nt0jP/y7a Rm9ZqGUrymogHJWhWuRSdOkoM0vXZdSPosIbgc17wj8/+EtY+riW1NIjPQZDBBm/ XmNw2uhuYYqDrdEeVhd1UKT0VHPMUKXdFKpDvmTcyH9NesRjy1CQOOiijGCqIEdD DBf1RZK2wW2oRr0cokSPuFevmhDRnsXof5F1LMZLKSjpUjvlbro6c8B4Xc502QKK uR8DyetZPsE/vS6PsDtaCc4zXgq6qfoKE1rDrgIOsp83DJHnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAEnTBHibOyoU4DNQw3G7rr/N/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMjkzYzI0YmUtNTg3Ny0z YTE4LThkMjItMWIyYWQyZDk3NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTT7VV/PxFWs1he7LjFjU44pPWv2FrSNOfnL5GWqnE1FegUI6NFZVMg J+eP5XmZLaAc8IRobWIO2DKa51OgRqUQEf+A5KJPoXvOKZpM0YhVRZHcarRpbLBv 0mQNAANXrd4ODYKAmnViTmhW5p0deP/tkfSWD67srEQXyvaFsqr68nqn13y0QkcW HKD3nBEgiTNlkHNAZR3VW/TPaygR+9PVk2qaXVEbq8XTMlJAOMpmT9dtghmX0Dpu upgEU8iZh4Mi2i6QA3Vl+AfFoDwItQiXM7UcYL53zg2QSxzVqTFj9O0EUpTmhUE7 1jRTNpwxj7qMut5knDXXC7K6FwhGCmA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:19 2025 by rpki-client