$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa File: 53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa (raw, json) Hash identifier: V6xAofBuUBjdMbWHROE2/KG7zIgYPNsp4c+yQXqu8fg= Subject key identifier: 70:A1:4B:76:62:0C:96:DE:87:AE:78:08:82:6B:DE:6D:DA:33:4D:B6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858488DAB5252A3B4E8FFDAF64C80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 13445 IP address blocks: 66.163.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:52:52:a3:b4:e8:ff:da:f6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=b3941f9c-c444-4f12-9ed9-e5822ef8b650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:89:03:10:ff:3b:e0:0d:be:d0:1e:62:38: 87:27:76:be:54:ab:ff:89:9e:14:0c:97:39:5a:96: b5:08:57:b5:b7:e3:21:ea:9f:b1:c1:e4:1a:7a:78: 3c:e1:f0:51:35:21:9a:bd:78:9d:64:68:55:f3:64: 51:64:63:a2:b1:2c:f2:6c:ce:2b:60:ee:60:69:99: 11:f4:9c:f8:3d:9e:95:f7:a8:61:75:00:d8:74:aa: bf:1a:e7:12:60:94:e5:96:67:d5:a0:21:5c:0f:ca: a3:cf:c9:ed:79:c7:6c:73:08:61:cd:9d:3d:af:30: a3:c1:64:6b:37:a2:1c:b7:80:7a:a2:6a:56:28:c5: a4:b8:c0:c4:08:10:a3:a9:2f:8f:8e:2d:55:bd:35: a5:ff:39:01:dc:3e:10:21:83:33:0d:3f:39:45:85: 26:18:d4:a4:69:fd:6b:0d:7e:46:da:75:fe:8a:cd: c7:a5:c8:28:b7:6f:a4:98:c9:34:a5:ee:1e:20:0a: d7:cb:48:15:2e:7b:af:30:ad:e5:58:70:55:df:52: 9d:80:6b:61:e7:e5:ef:c5:7c:1c:63:aa:c2:8e:89: 28:12:87:aa:5d:29:83:a2:d9:dc:2e:4d:5a:49:f6: ca:0a:14:ea:13:42:ba:82:db:5a:8b:d5:2b:53:2e: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:4B:76:62:0C:96:DE:87:AE:78:08:82:6B:DE:6D:DA:33:4D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.163.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:1c:f9:fd:84:fd:ef:2c:00:58:78:d4:1c:c2:c8:73:92:8c: 22:2c:9b:7f:9e:0d:58:b7:65:64:f6:05:df:b3:a6:fd:f7:2a: 79:78:39:c7:0f:18:97:bb:37:6f:ef:b7:98:93:51:1d:96:36: 7b:a4:e3:fb:f2:85:6c:a5:02:51:55:c6:fc:d7:e8:70:d1:ff: eb:c9:06:0a:2c:20:84:53:c2:46:6f:5b:03:b3:83:cd:81:47: ea:40:65:e3:ec:e5:de:7d:d6:04:69:57:15:35:57:4b:b1:0f: e3:49:87:5f:c1:c2:bd:28:07:04:6e:6a:1b:5d:99:04:d5:1c: 1f:6e:48:c2:b1:51:d1:ba:98:34:64:87:08:38:49:e3:f2:d2: 26:ca:10:c5:7c:d2:7b:77:e0:03:ff:ac:3b:2b:57:e7:c7:75: 21:c5:3f:e6:25:f1:23:11:46:4d:92:fc:f9:49:f6:54:10:50: cf:c5:fe:91:b7:5f:5e:ad:1e:d3:4c:ca:a4:b2:d0:24:d2:6e: 70:6f:04:e5:a4:84:b7:78:f9:f9:17:a4:42:31:6e:fc:6b:75: 51:b6:2a:d2:97:b2:6e:dd:4e:c2:8f:4c:8d:6c:68:8a:e6:7b: 5d:41:47:0d:98:f6:6a:47:af:eb:d6:90:2d:f3:5a:96:94:27: 5c:3a:57:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1JSo7To/9r2TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YjM5NDFmOWMtYzQ0NC00ZjEyLTllZDktZTU4MjJlZjhiNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOyJAxD/O+ANvtAeYjiHJ3a+VKv/iZ4UDJc5 Wpa1CFe1t+Mh6p+xweQaeng84fBRNSGavXidZGhV82RRZGOisSzybM4rYO5gaZkR 9Jz4PZ6V96hhdQDYdKq/GucSYJTllmfVoCFcD8qjz8ntecdscwhhzZ09rzCjwWRr N6Ict4B6ompWKMWkuMDECBCjqS+Pji1VvTWl/zkB3D4QIYMzDT85RYUmGNSkaf1r DX5G2nX+is3Hpcgot2+kmMk0pe4eIArXy0gVLnuvMK3lWHBV31KdgGth5+XvxXwc Y6rCjokoEoeqXSmDotncLk1aSfbKChTqE0K6gttai9UrUy6QBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHChS3ZiDJbeh654CIJr3m3aM022MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTNjZmU5MDItYjAwNi0z NGNjLWJiYzMtMGE5N2QxOThjYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqM1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYc+f2E/e8sAFh41BzCyHOSjCIsm3+eDVi3ZWT2Bd+zpv33Knl4OccP GJe7N2/vt5iTUR2WNnuk4/vyhWylAlFVxvzX6HDR/+vJBgosIIRTwkZvWwOzg82B R+pAZePs5d591gRpVxU1V0uxD+NJh1/Bwr0oBwRuahtdmQTVHB9uSMKxUdG6mDRk hwg4SePy0ibKEMV80nt34AP/rDsrV+fHdSHFP+Yl8SMRRk2S/PlJ9lQQUM/F/pG3 X16tHtNMyqSy0CTSbnBvBOWkhLd4+fkXpEIxbvxrdVG2KtKXsm7dTsKPTI1saIrm e11BRw2Y9mpHr+vWkC3zWpaUJ1w6V3Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:49 2025 by rpki-client