$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa File: 1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa (raw, json) Hash identifier: IY7Rcp77oibxcB08oDV2P74PhlMED+8HPwqCQi+0Ivw= Subject key identifier: A0:D3:F7:5E:8D:5E:F3:65:92:DB:58:5F:52:13:04:9A:E6:15:43:19 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584871C07AF5B717C63300D3CD00 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 22612 IP address blocks: 162.255.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:7a:f5:b7:17:c6:33:00:d3:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=703e89e3-5feb-4220-8c8b-732c546ca986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:28:b5:85:d9:0a:1d:32:ff:58:17:e4:cd: f6:82:e1:01:b6:c9:4d:a2:52:89:9c:03:57:65:fc: 09:a7:27:ab:91:24:69:65:c0:05:6c:4e:fa:71:7b: b6:77:97:9b:4c:f6:44:78:78:76:97:89:e0:3c:3f: 21:49:e3:7f:da:42:49:a5:75:e5:a2:e3:0c:f6:e9: e5:a5:43:6d:be:24:00:bf:17:28:07:ee:00:1b:39: 70:ae:19:cb:b8:5f:1c:c1:28:65:b9:20:16:23:9a: dc:94:66:17:34:ae:d9:ee:3b:05:be:33:de:92:7d: 9e:a0:bc:cc:9d:a2:f4:a1:d7:65:4c:3a:1d:de:4b: 56:f6:25:5e:03:88:83:8b:ac:18:f3:3b:81:c0:db: 17:11:3f:75:eb:fa:1e:40:a4:53:37:8c:b5:2d:16: 3e:15:6e:10:53:28:ec:e8:82:b9:7c:4f:29:6b:37: 95:0b:dd:17:36:74:62:05:c1:d0:a5:7b:69:b2:aa: 48:e6:11:b8:d0:da:93:f5:55:21:07:a7:0c:0f:b8: 98:a3:db:78:f5:4f:e0:95:72:81:a2:ff:52:7c:0e: 55:cd:77:34:a9:fe:31:8a:5d:e2:7c:82:61:0a:b4: 41:2e:c8:9d:51:1a:74:05:2d:8d:4c:a0:09:69:6a: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:F7:5E:8D:5E:F3:65:92:DB:58:5F:52:13:04:9A:E6:15:43:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 162.255.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:15:86:b9:88:99:3e:84:70:bf:7b:cb:d6:46:b0:71:8c:97: 82:7b:3a:b5:a9:26:35:33:1b:33:5a:51:66:d4:cc:a3:5b:43: 13:cd:a7:7f:ed:21:93:0b:4b:ec:b7:31:e8:4b:19:50:ce:15: b3:97:d7:44:9e:3b:0f:62:c4:23:19:70:82:2d:b2:5d:40:50: e5:4e:8c:a9:8f:4f:31:f0:b1:83:a4:03:b7:cd:72:db:fd:df: e2:dc:c5:ae:e3:eb:cc:ef:f7:be:09:f9:dc:ff:86:aa:5f:b5: 2c:48:34:7b:b4:be:3a:61:03:d7:d0:81:90:26:65:e0:07:d0: cd:d5:38:a3:bc:ca:f7:30:b6:c7:c3:77:37:34:08:9d:46:72: ec:b3:2b:88:73:40:90:1b:a6:03:09:f3:ec:4c:c9:19:3c:04: 9d:a5:1f:b9:00:63:13:24:62:1f:ea:ea:7b:eb:95:04:86:4b: 7f:3c:70:ca:e1:c3:2e:f7:90:97:9a:b5:76:92:90:d2:9a:3c: 1d:14:79:6f:bb:31:fe:eb:52:98:ee:aa:50:8c:f5:f3:49:46: d8:68:76:e1:02:4e:b6:56:d3:40:1b:5b:b4:67:9e:a8:60:51: 52:33:44:d2:c3:c2:34:d3:dc:49:07:a2:5d:fe:5e:1c:e8:fb: 1d:50:d5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHr1txfGMwDTzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzAzZTg5ZTMtNWZlYi00MjIwLThjOGItNzMyYzU0NmNhOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAIotYXZCh0y/1gX5M32guEBtslNolKJnANX ZfwJpyerkSRpZcAFbE76cXu2d5ebTPZEeHh2l4ngPD8hSeN/2kJJpXXlouMM9unl pUNtviQAvxcoB+4AGzlwrhnLuF8cwShluSAWI5rclGYXNK7Z7jsFvjPekn2eoLzM naL0oddlTDod3ktW9iVeA4iDi6wY8zuBwNsXET916/oeQKRTN4y1LRY+FW4QUyjs 6IK5fE8pazeVC90XNnRiBcHQpXtpsqpI5hG40NqT9VUhB6cMD7iYo9t49U/glXKB ov9SfA5VzXc0qf4xil3ifIJhCrRBLsidURp0BS2NTKAJaWpt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDT916NXvNlkttYX1ITBJrmFUMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMWU2Nzc1NmQtMmMzOC0z YWVkLWE1ZDMtNThhYWVkYWQyYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAVhrmImT6EcL97y9ZGsHGMl4J7OrWpJjUzGzNaUWbUzKNbQxPNp3/t IZMLS+y3MehLGVDOFbOX10SeOw9ixCMZcIItsl1AUOVOjKmPTzHwsYOkA7fNctv9 3+Lcxa7j68zv974J+dz/hqpftSxINHu0vjphA9fQgZAmZeAH0M3VOKO8yvcwtsfD dzc0CJ1GcuyzK4hzQJAbpgMJ8+xMyRk8BJ2lH7kAYxMkYh/q6nvrlQSGS388cMrh wy73kJeatXaSkNKaPB0UeW+7Mf7rUpjuqlCM9fNJRthoduECTrZW00AbW7Rnnqhg UVIzRNLDwjTT3EkHol3+Xhzo+x1Q1fY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:19 2025 by rpki-client