$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json) Hash identifier: JofyU0OlygU5qQLJ8bBUOn6FymPZ+zS1EyMpJJ2CwvY= Subject key identifier: 70:30:A0:D5:28:09:BE:B5:57:6C:4C:51:7B:C5:3F:9E:3D:DA:C0:22 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F432858489A3B4357FFD2B62E80489D80 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 7018 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:43:57:ff:d2:b6:2e:80:48:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=f2452e7c-1f72-434b-ae58-98566e647396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:9a:45:35:79:61:55:2d:7e:d1:24:0a:0d: c3:6d:af:89:56:ba:fa:c4:8d:6f:c0:0d:30:b0:0a: 5b:ba:35:7f:31:d0:7c:56:61:7c:de:31:fb:a2:bd: 36:00:72:12:6b:35:54:f0:b8:dd:05:b1:75:c5:64: 0f:6b:97:7f:d8:8f:76:77:70:00:12:64:1e:40:40: bf:18:d1:86:b2:f6:e8:7d:82:1c:2d:ba:e5:01:2d: 06:7b:50:90:4a:59:9c:d1:75:5a:13:60:d9:3e:aa: 16:05:3c:71:89:30:38:6e:09:e3:17:0e:47:f9:be: c7:b1:75:8a:a7:d2:cb:5d:07:bc:ba:ff:bf:97:17: 64:d2:7f:4f:2b:5a:2e:6f:11:8c:72:63:99:80:8b: 98:5f:e1:2f:0a:f0:e6:a1:43:c0:e5:4c:77:d1:67: f5:99:a1:c0:b8:4c:ae:ad:5b:3d:b5:06:a0:88:ee: 29:66:6c:98:c1:70:4a:81:d9:b6:65:01:e4:15:fb: 8f:96:ca:c6:dc:c7:1d:10:76:08:a9:e6:dc:bc:c5: 66:52:fa:b9:7f:74:81:6c:4b:bc:d2:d7:97:11:d8: 01:ca:c0:82:77:d8:ba:42:98:a0:8b:70:f1:0e:a3: f0:93:73:d0:9c:95:3e:de:4c:ee:45:9c:83:8c:b7: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:A0:D5:28:09:BE:B5:57:6C:4C:51:7B:C5:3F:9E:3D:DA:C0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a0:c6:1d:6d:b9:f5:1c:36:26:47:f6:28:7c:7b:18:ca:6a: 08:1c:5e:f3:ab:63:88:2c:dd:87:33:dd:69:db:86:89:4b:04: d7:5c:59:c4:80:ad:46:90:bd:00:a6:17:01:b6:18:78:6c:2c: 67:bd:50:17:18:94:c1:0b:fd:45:dd:8c:c4:ff:eb:c3:3c:1d: f1:41:1a:2e:be:48:bb:e8:62:cb:dc:b0:d4:4c:42:c2:01:02: e4:0c:7d:41:ae:f4:45:8f:dc:e5:62:bc:fc:2f:c3:ba:15:5a: d2:6c:5a:38:25:c4:df:b4:44:74:bb:d9:90:64:05:26:c7:a3: c7:df:a0:59:91:f7:c7:f1:0c:b0:0b:67:8a:33:a7:40:49:a4: b4:a5:86:26:33:f9:80:40:62:d4:f4:c1:60:16:9b:86:8a:13: 0d:57:9f:33:74:5b:fc:68:61:f7:16:25:63:10:fa:52:42:d9: 3a:a7:47:74:2f:29:06:17:d7:64:1a:bf:a6:57:0c:9c:2a:9c: af:76:ee:19:ba:0b:79:9a:dc:1b:23:7c:c2:68:f9:d3:d8:c4: 72:f3:f3:a9:ae:aa:91:c3:10:03:c7:ad:35:15:99:01:ef:1c: 64:db:a6:00:2d:f7:8d:c1:36:df:0d:1d:cc:6a:c9:dc:cf:72: 3d:5f:48:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0NX/9K2LoBInYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjI0NTJlN2MtMWY3Mi00MzRiLWFlNTgtOTg1NjZlNjQ3Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8KaRTV5YVUtftEkCg3Dba+JVrr6xI1vwA0w sApbujV/MdB8VmF83jH7or02AHISazVU8LjdBbF1xWQPa5d/2I92d3AAEmQeQEC/ GNGGsvbofYIcLbrlAS0Ge1CQSlmc0XVaE2DZPqoWBTxxiTA4bgnjFw5H+b7HsXWK p9LLXQe8uv+/lxdk0n9PK1oubxGMcmOZgIuYX+EvCvDmoUPA5Ux30Wf1maHAuEyu rVs9tQagiO4pZmyYwXBKgdm2ZQHkFfuPlsrG3McdEHYIqebcvMVmUvq5f3SBbEu8 0teXEdgBysCCd9i6Qpigi3DxDqPwk3PQnJU+3kzuRZyDjLfT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAwoNUoCb61V2xMUXvFP5492sAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWMzOGNiNDAtZDI0Ny0z YzNhLTk1NTUtNjE1MWFhYWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmgxh1tufUcNiZH9ih8exjKaggcXvOrY4gs3Ycz3WnbholLBNdcWcSA rUaQvQCmFwG2GHhsLGe9UBcYlMEL/UXdjMT/68M8HfFBGi6+SLvoYsvcsNRMQsIB AuQMfUGu9EWP3OVivPwvw7oVWtJsWjglxN+0RHS72ZBkBSbHo8ffoFmR98fxDLAL Z4ozp0BJpLSlhiYz+YBAYtT0wWAWm4aKEw1XnzN0W/xoYfcWJWMQ+lJC2TqnR3Qv KQYX12Qav6ZXDJwqnK927hm6C3ma3BsjfMJo+dPYxHLz86muqpHDEAPHrTUVmQHv HGTbpgAt943BNt8NHcxqydzPcj1fSBw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:14:55 2025 by rpki-client