$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fe525c25-8e4d-336a-a132-c3baf426cf88.roa File: fe525c25-8e4d-336a-a132-c3baf426cf88.roa (raw, json) Hash identifier: rfSFWyXUV9LGq14Q68EdtCa/lispaEqlrkswZvkw2IQ= Subject key identifier: 8B:4F:67:DA:6F:56:CB:FF:B6:FC:07:7B:E5:A0:35:D4:AD:14:4F:83 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584950F96B967E663A38D1961980 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fe525c25-8e4d-336a-a132-c3baf426cf88.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 22612 IP address blocks: 104.219.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:6b:96:7e:66:3a:38:d1:96:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=d5223031-1d55-40b0-9876-79aa507df912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:37:42:bf:b7:28:3d:46:79:47:47:e6:89: 84:c0:78:e8:a6:bd:ae:7a:fa:15:37:29:c9:6f:11: e7:00:32:6b:1c:b8:f6:8f:a1:1a:6b:22:1c:f7:85: 97:56:bb:95:2e:9d:67:f7:99:6b:3c:06:d6:17:d9: 97:1c:e5:3a:0c:d9:48:73:6b:6e:38:e4:55:9b:c8: 55:ee:ff:66:57:55:46:97:f1:20:7a:d5:d8:a5:11: 59:90:96:68:56:a1:d6:82:60:5b:95:06:7c:fe:ca: 91:56:12:f8:5b:5b:c8:94:99:fc:5a:6d:d0:bc:58: 44:5c:f3:a1:5a:69:7e:ae:a3:4d:33:53:32:2f:b9: 0a:50:ea:cd:b0:f8:55:a7:7a:d9:cd:c6:19:c9:cd: 21:8b:65:f9:f2:57:90:ee:11:f6:ac:49:86:07:80: 40:ce:50:b7:b5:bc:da:a7:25:8a:50:6f:3f:21:9c: 55:1d:70:76:c7:7d:6c:b6:13:ec:5e:c6:91:52:53: 44:22:de:5c:b9:b2:de:6f:31:f8:01:81:d9:99:23: 4d:b4:70:fa:7c:7a:09:b7:06:87:ad:65:ba:0d:1d: 50:24:ba:8b:fd:56:bc:ca:30:5e:94:6f:e0:42:48: f5:a1:34:c3:63:a5:1f:37:28:6f:ed:2c:fd:90:0b: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:67:DA:6F:56:CB:FF:B6:FC:07:7B:E5:A0:35:D4:AD:14:4F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fe525c25-8e4d-336a-a132-c3baf426cf88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 104.219.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e1:da:57:27:2f:62:b2:70:91:23:78:d5:fb:23:6d:3d:8d: a0:b2:33:72:f7:4a:40:93:55:71:ab:6c:9b:59:a2:70:9b:94: 4f:00:05:e4:91:76:ef:8e:c6:fe:b2:ce:ed:64:2a:76:31:65: c6:4e:1a:26:cd:7b:c4:8b:74:ea:d9:bd:cd:99:20:b1:ed:ea: 17:1b:6d:18:3f:eb:9f:89:6d:a9:fc:0e:ee:77:6e:66:b8:d2: b1:8d:94:48:67:0c:c0:ae:1a:a2:9c:42:55:5b:6b:b4:73:08: 16:a5:26:93:53:df:65:d6:4f:be:46:f7:81:2f:09:85:2c:b0: c1:a5:fd:ee:17:6f:e9:48:a6:91:62:7f:55:8e:44:c4:a7:d8: f7:41:fd:48:8a:f7:5b:49:78:b3:59:79:23:b0:1f:a7:3e:00: c7:42:46:4a:05:0a:6f:f6:bb:7f:87:41:87:5b:1e:38:f7:89: e0:ae:85:83:d5:73:97:0b:9b:64:fb:02:2c:95:2e:12:4f:cf: 8a:4c:ae:89:3a:ab:e2:3b:7f:8e:5d:95:40:d1:7e:84:da:fe: 72:28:c1:ba:db:71:00:dd:f7:ea:dd:c7:65:1a:f7:75:94:24: a6:f9:6c:7b:e9:f8:a5:ea:41:c6:8b:79:0f:d1:cb:22:93:dc: 79:b2:a5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WuWfmY6ONGWGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZDUyMjMwMzEtMWQ1NS00MGIwLTk4NzYtNzlhYTUwN2RmOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoI3Qr+3KD1GeUdH5omEwHjopr2uevoVNynJ bxHnADJrHLj2j6EaayIc94WXVruVLp1n95lrPAbWF9mXHOU6DNlIc2tuOORVm8hV 7v9mV1VGl/EgetXYpRFZkJZoVqHWgmBblQZ8/sqRVhL4W1vIlJn8Wm3QvFhEXPOh Wml+rqNNM1MyL7kKUOrNsPhVp3rZzcYZyc0hi2X58leQ7hH2rEmGB4BAzlC3tbza pyWKUG8/IZxVHXB2x31sthPsXsaRUlNEIt5cubLebzH4AYHZmSNNtHD6fHoJtwaH rWW6DR1QJLqL/Va8yjBelG/gQkj1oTTDY6UfNyhv7Sz9kAuWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItPZ9pvVsv/tvwHe+WgNdStFE+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZmU1MjVjMjUtOGU0ZC0z MzZhLWExMzItYzNiYWY0MjZjZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbh2lcnL2KycJEjeNX7I209jaCyM3L3SkCTVXGrbJtZonCblE8ABeSR du+Oxv6yzu1kKnYxZcZOGibNe8SLdOrZvc2ZILHt6hcbbRg/65+Jban8Du53bma4 0rGNlEhnDMCuGqKcQlVba7RzCBalJpNT32XWT75G94EvCYUssMGl/e4Xb+lIppFi f1WORMSn2PdB/UiK91tJeLNZeSOwH6c+AMdCRkoFCm/2u3+HQYdbHjj3ieCuhYPV c5cLm2T7AiyVLhJPz4pMrok6q+I7f45dlUDRfoTa/nIowbrbcQDd9+rdx2Ua93WU JKb5bHvp+KXqQcaLeQ/RyyKT3HmypR0= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:18 2025 by rpki-client