$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa File: 8f9d7892-fecf-3810-935d-afa6818c2d8c.roa (raw, json) Hash identifier: xfF8P9rN3I61QhsAWwzCvCr349WVMM2XJNZZ7kSuA2A= Subject key identifier: AB:5D:A9:57:E6:4F:7B:8D:87:D1:11:99:44:9A:1B:84:BF:D3:8D:D7 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F432858492CB207E542B9F95B40384FC0 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 22612 IP address blocks: 198.177.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:07:e5:42:b9:f9:5b:40:38:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1a4728ae-51d4-4c30-8113-dcb94eff0a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a9:ed:51:25:20:a5:15:81:2b:e3:23:a9:6d: 14:12:f2:c7:40:80:9f:e1:7b:82:f6:b7:ef:b8:57: a9:72:b4:5e:73:d8:74:e9:24:27:98:e0:23:19:1f: c3:04:52:21:11:4a:61:32:1d:1d:b9:fc:c3:37:c6: 3d:eb:82:10:ac:0a:82:a2:df:d0:24:56:fc:63:d4: a1:d6:96:5a:45:8e:88:51:a1:a8:fc:cd:60:f8:03: ce:3c:6b:df:24:d0:ef:ce:18:20:16:24:af:5e:01: 4c:36:eb:2b:5c:b9:09:21:2c:80:83:e6:fa:1a:b1: 41:17:59:fa:6c:0b:1b:b6:80:a4:2b:61:9d:b0:5b: da:27:78:3a:12:2f:72:c5:61:a3:04:80:14:ff:31: ca:d3:8d:bb:f3:a4:21:69:fd:40:76:47:17:54:79: 43:9e:ca:8c:a7:6d:4f:e1:a0:e9:f1:01:6b:9e:fc: 4e:d9:30:30:d9:36:ae:8f:44:f5:61:48:eb:43:5f: 74:d9:0c:16:98:c4:55:e1:f4:4a:a4:5f:1d:56:23: e3:4b:ed:54:a6:c2:cd:13:58:9e:27:79:3e:2d:c0: 25:56:c0:d6:5e:22:20:d8:cb:d7:ee:26:d8:4c:c9: c1:a9:9f:59:75:cd:d5:10:75:75:f5:11:2a:c5:33: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:A9:57:E6:4F:7B:8D:87:D1:11:99:44:9A:1B:84:BF:D3:8D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 198.177.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d0:03:0d:0b:0c:17:45:65:7d:95:1d:29:12:1f:c0:e3:fa: 73:d5:25:25:85:6c:9b:d1:fb:f0:0a:4e:34:5e:5c:79:8b:b0: 45:a9:72:60:18:10:9a:82:12:04:c5:b4:99:52:71:ef:5a:76: 1d:22:68:b6:5c:51:9f:f1:09:80:23:23:44:2e:e3:f1:5a:1b: 1c:ca:8e:e0:99:f5:34:78:ed:72:5e:21:a4:fa:08:3e:46:38: 62:03:9d:aa:47:2d:8e:0a:a0:cc:c2:c1:5f:de:b0:e7:e0:b7: 39:17:cf:e1:3d:93:2e:86:fd:06:c0:bd:81:d7:93:89:23:98: a7:8f:30:01:b5:0d:b0:4c:35:33:66:91:1e:43:e2:6b:3f:21: 4d:be:a5:b3:a9:4c:63:c4:7d:0d:3c:90:6b:f6:88:c7:f4:e9: 01:3e:13:8b:93:e8:3a:a0:32:3e:d0:d4:45:ad:63:26:25:6e: 95:6d:7a:ed:df:5f:55:b0:4c:d2:be:f0:ac:83:56:d0:18:57: 9f:8a:70:24:f3:67:a2:6e:1d:73:c5:d3:2a:7d:0a:16:d2:e1: 42:c1:ba:e0:5d:9c:02:8f:6f:82:de:20:dd:32:b9:cf:c9:cd: ed:16:2f:2b:e0:5c:fa:7e:38:a1:93:f0:ec:8b:36:85:bb:7a: 46:b4:3c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgflQrn5W0A4T8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWE0NzI4YWUtNTFkNC00YzMwLTgxMTMtZGNiOTRlZmYwYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qntUSUgpRWBK+MjqW0UEvLHQICf4XuC9rfv uFepcrRec9h06SQnmOAjGR/DBFIhEUphMh0dufzDN8Y964IQrAqCot/QJFb8Y9Sh 1pZaRY6IUaGo/M1g+APOPGvfJNDvzhggFiSvXgFMNusrXLkJISyAg+b6GrFBF1n6 bAsbtoCkK2GdsFvaJ3g6Ei9yxWGjBIAU/zHK042786Qhaf1AdkcXVHlDnsqMp21P 4aDp8QFrnvxO2TAw2Tauj0T1YUjrQ1902QwWmMRV4fRKpF8dViPjS+1UpsLNE1ie J3k+LcAlVsDWXiIg2MvX7ibYTMnBqZ9Zdc3VEHV19REqxTPhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtdqVfmT3uNh9ERmUSaG4S/043XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvOGY5ZDc4OTItZmVjZi0z ODEwLTkzNWQtYWZhNjgxOGMyZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxrF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbQAw0LDBdFZX2VHSkSH8Dj+nPVJSWFbJvR+/AKTjReXHmLsEWpcmAY EJqCEgTFtJlSce9adh0iaLZcUZ/xCYAjI0Qu4/FaGxzKjuCZ9TR47XJeIaT6CD5G OGIDnapHLY4KoMzCwV/esOfgtzkXz+E9ky6G/QbAvYHXk4kjmKePMAG1DbBMNTNm kR5D4ms/IU2+pbOpTGPEfQ08kGv2iMf06QE+E4uT6DqgMj7Q1EWtYyYlbpVteu3f X1WwTNK+8KyDVtAYV5+KcCTzZ6JuHXPF0yp9ChbS4ULBuuBdnAKPb4LeIN0yuc/J ze0WLyvgXPp+OKGT8OyLNoW7eka0PPo= -----END CERTIFICATE-----Generated at Fri Mar 14 09:03:21 2025 by rpki-client