$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa File: 1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa (raw, json) Hash identifier: do+BCyaLf2tl4HNJL6ysdAAbAHUwbjgJ+1sU/QOgNms= Subject key identifier: 19:3C:2E:C0:88:1C:09:1A:25:C7:7F:61:DC:A5:40:62:65:86:0C:BC Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584B110C0C762D9BF115B08D91C0 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 22612 IP address blocks: 162.255.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0c:76:2d:9b:f1:15:b0:8d:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=3ac055c2-a948-4b85-a041-381f4a0983bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:b3:23:e8:a5:6d:46:dc:00:ad:98:4d:54: 43:2a:98:18:c4:1d:d6:07:fb:e4:32:ce:58:52:8d: 83:06:f4:2b:78:1d:d3:cb:68:3a:c4:3e:8b:e8:d5: 00:ff:07:67:97:57:3f:17:59:c2:01:ed:43:0a:b2: f4:0b:00:a9:f9:83:3a:c4:2e:44:22:ec:22:19:e7: 2d:19:30:02:7c:60:ea:dc:a4:a5:b6:c8:0a:44:12: 01:39:4c:b2:1d:f0:29:2c:10:8b:70:8d:4f:1b:36: f0:97:ed:a0:3a:ba:0e:13:db:d7:9b:71:26:cf:25: d9:63:ff:1c:62:54:b8:cd:ba:0f:90:6f:54:fe:c3: c2:1e:7f:27:39:91:d7:7d:d2:ce:e9:d4:c3:39:ca: cc:01:9a:4d:c1:be:53:ad:db:43:aa:47:50:28:62: b4:c9:2e:e2:8f:92:b2:32:6d:37:79:99:2f:63:6f: 14:9f:07:62:11:13:25:da:43:35:b0:65:7a:7d:e0: 62:37:78:cd:06:49:f8:ce:6a:f7:01:7a:df:78:15: 21:a6:c9:f0:14:b2:71:35:5f:fb:e6:b2:43:64:c0: d4:05:48:25:93:75:ea:dd:56:5f:f2:00:52:b3:80: f3:df:98:67:8f:18:dd:67:82:dd:38:2e:f5:7c:a1: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:2E:C0:88:1C:09:1A:25:C7:7F:61:DC:A5:40:62:65:86:0C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1e67756d-2c38-3aed-a5d3-58aaedad2c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 162.255.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:79:98:e5:62:7e:ff:92:f2:16:b5:e8:87:b2:a1:e3:5f: af:9d:d9:b5:74:ad:92:e9:ee:8c:06:61:ad:60:71:cd:45:87: 6d:c3:cd:3a:d8:66:05:4c:7b:2a:57:8b:c8:75:27:57:7a:45: 78:c6:af:6c:10:c0:61:35:4d:4e:75:d4:f2:bc:e4:d4:40:8a: 6e:84:6b:ed:a3:eb:f2:f9:0d:92:0f:8f:d9:0a:e0:a6:b9:b4: d3:06:31:e2:1e:46:68:8b:8b:35:23:4b:db:1c:5e:75:a2:61: cc:ad:19:3c:40:04:fe:49:73:ca:dc:6d:85:1a:a4:23:1d:e8: 5b:f1:43:fd:e3:bc:db:36:4e:86:d5:40:c7:93:f9:19:20:e9: 36:96:c2:64:c1:9f:cc:fb:30:b5:a2:c5:ce:15:ba:ed:47:31: c8:b8:15:22:3b:80:d0:1f:bd:94:0d:41:d6:eb:d8:d1:32:90: 1d:85:03:01:aa:9b:cb:fa:dd:49:b6:2b:09:e6:7b:89:8f:fb: 08:66:4e:8e:4c:d9:02:0e:a7:b8:25:8e:b0:12:40:61:db:aa: ce:a7:55:c3:72:16:47:bb:a7:25:e2:17:d7:30:1d:02:2f:46: 64:15:19:84:69:7d:c5:58:84:30:88:b6:1a:c1:71:72:a4:e7: e8:1a:e5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAx2LZvxFbCNkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2FjMDU1YzItYTk0OC00Yjg1LWEwNDEtMzgxZjRhMDk4M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+GzI+ilbUbcAK2YTVRDKpgYxB3WB/vkMs5Y Uo2DBvQreB3Ty2g6xD6L6NUA/wdnl1c/F1nCAe1DCrL0CwCp+YM6xC5EIuwiGect GTACfGDq3KSltsgKRBIBOUyyHfApLBCLcI1PGzbwl+2gOroOE9vXm3EmzyXZY/8c YlS4zboPkG9U/sPCHn8nOZHXfdLO6dTDOcrMAZpNwb5TrdtDqkdQKGK0yS7ij5Ky Mm03eZkvY28UnwdiERMl2kM1sGV6feBiN3jNBkn4zmr3AXrfeBUhpsnwFLJxNV/7 5rJDZMDUBUglk3Xq3VZf8gBSs4Dz35hnjxjdZ4LdOC71fKE5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk8LsCIHAkaJcd/YdylQGJlhgy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMWU2Nzc1NmQtMmMzOC0z YWVkLWE1ZDMtNThhYWVkYWQyYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH9eZjlYn7/kvIWteiHsqHjX6+d2bV0rZLp7owGYa1gcc1Fh23DzTrY ZgVMeypXi8h1J1d6RXjGr2wQwGE1TU511PK85NRAim6Ea+2j6/L5DZIPj9kK4Ka5 tNMGMeIeRmiLizUjS9scXnWiYcytGTxABP5Jc8rcbYUapCMd6FvxQ/3jvNs2TobV QMeT+Rkg6TaWwmTBn8z7MLWixc4Vuu1HMci4FSI7gNAfvZQNQdbr2NEykB2FAwGq m8v63Um2Kwnme4mP+whmTo5M2QIOp7gljrASQGHbqs6nVcNyFke7pyXiF9cwHQIv RmQVGYRpfcVYhDCIthrBcXKk5+ga5co= -----END CERTIFICATE-----Generated at Mon Sep 8 13:39:38 2025 by rpki-client