$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa File: 5abe1a0a-dd59-3758-ac26-70da51ee0207.roa (raw, json) Hash identifier: va62KPP9dO+Y/je/hC7lMarmWNbLQcHs7x/jiEQQaHw= Subject key identifier: 22:5A:57:81:20:97:6F:10:69:04:60:EA:37:C4:4D:1A:45:FD:02:50 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F432858497AD9BF2D95952E07C26E9F00 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 6079 IP address blocks: 167.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:bf:2d:95:95:2e:07:c2:6e:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=9b1ca33e-7488-4c6d-a175-45c4bd057107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:5b:2c:8f:19:8b:3a:73:15:00:b2:db:bc: 6e:ea:4d:3b:5c:ca:af:a1:c6:2c:cf:ae:d7:cc:a8: 6b:4b:c2:a1:0b:d2:d4:6e:43:ce:a1:05:57:a8:5e: 12:ad:1d:2a:99:2b:51:5b:23:0d:07:84:4b:84:75: e2:fc:bb:40:99:79:6f:67:c8:9c:e4:86:ab:35:4d: 1a:88:c9:5e:fd:3b:b1:6c:23:e2:29:6c:e4:01:85: 02:0c:87:04:4e:66:e3:ff:7d:03:cd:38:ae:8e:b2: 3c:cc:cf:1a:04:04:18:88:d7:72:98:2b:1e:a7:44: 80:b1:05:f5:7e:29:72:e7:8c:0a:aa:12:39:50:cf: 89:b2:df:87:03:08:a4:1b:db:e1:22:3e:68:eb:9a: c9:ee:e9:c7:a9:16:a0:9c:a4:db:8f:2b:bd:5d:a1: 37:18:10:1d:91:3d:5e:d1:d5:cb:fe:ac:3a:af:7e: dd:16:04:ca:cb:cb:67:28:16:38:ed:00:2e:5f:a9: 1e:a6:5f:02:50:0b:2b:23:a0:f5:5c:b6:4c:d4:e3: 24:82:48:c8:08:87:3c:1a:e2:f5:ea:cb:37:af:98: f8:c5:f4:10:21:52:02:2d:6c:7e:6c:c5:6c:66:0e: 9b:f8:e0:f2:f8:77:7a:60:66:81:15:c2:b8:d8:41: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:57:81:20:97:6F:10:69:04:60:EA:37:C4:4D:1A:45:FD:02:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:24:39:b1:5e:45:71:6d:f4:eb:f2:79:99:75:87:42:23:fb: 0e:a3:09:e5:94:f6:17:75:59:ea:4f:dc:5b:fc:da:59:59:5a: 36:d4:27:38:6d:66:54:91:1f:e5:14:91:11:95:25:79:8c:d0: cd:68:88:52:05:4d:64:16:a8:07:0e:a7:fa:85:ae:1d:38:f8: af:b6:39:cc:45:e4:62:cc:61:6a:26:30:b0:9e:bf:92:b8:fa: 61:f1:1d:32:b6:a7:7e:51:50:1f:f9:01:a4:e0:4c:22:e7:4a: e7:17:5f:34:a8:b8:ee:13:2b:be:f0:ba:96:6e:6e:89:e4:77: f8:e4:9f:f8:e2:ad:fd:c9:21:be:1a:7d:7f:6c:15:16:ac:c2: 0c:06:6f:d3:0d:33:d8:28:48:98:03:4e:a1:cb:f2:48:30:3c: c2:49:8f:92:39:8e:89:50:2a:cd:a8:08:6e:ce:fe:b9:47:06: 7f:29:9a:47:e1:8c:01:78:34:7a:cf:a8:f7:97:33:b1:3c:60: d5:08:21:88:1c:2e:21:42:a6:67:cc:41:9d:97:c2:e6:28:27: 1b:75:00:d8:e1:bb:89:62:a9:45:65:ea:c5:9c:81:d1:a3:b6: 66:3a:41:82:14:25:48:7a:37:31:a8:4a:ff:0b:ad:4b:14:26: 54:6e:e6:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62b8tlZUuB8JunwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk OWIxY2EzM2UtNzQ4OC00YzZkLWExNzUtNDVjNGJkMDU3MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiVbLI8ZizpzFQCy27xu6k07XMqvocYsz67X zKhrS8KhC9LUbkPOoQVXqF4SrR0qmStRWyMNB4RLhHXi/LtAmXlvZ8ic5IarNU0a iMle/TuxbCPiKWzkAYUCDIcETmbj/30DzTiujrI8zM8aBAQYiNdymCsep0SAsQX1 fily54wKqhI5UM+Jst+HAwikG9vhIj5o65rJ7unHqRagnKTbjyu9XaE3GBAdkT1e 0dXL/qw6r37dFgTKy8tnKBY47QAuX6kepl8CUAsrI6D1XLZM1OMkgkjICIc8GuL1 6ss3r5j4xfQQIVICLWx+bMVsZg6b+ODy+Hd6YGaBFcK42EF0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJaV4Egl28QaQRg6jfETRpF/QJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWFiZTFhMGEtZGQ1OS0z NzU4LWFjMjYtNzBkYTUxZWUwMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGckObFeRXFt9OvyeZl1h0Ij+w6jCeWU9hd1WepP3Fv82llZWjbUJzht ZlSRH+UUkRGVJXmM0M1oiFIFTWQWqAcOp/qFrh04+K+2OcxF5GLMYWomMLCev5K4 +mHxHTK2p35RUB/5AaTgTCLnSucXXzSouO4TK77wupZubonkd/jkn/jirf3JIb4a fX9sFRaswgwGb9MNM9goSJgDTqHL8kgwPMJJj5I5jolQKs2oCG7O/rlHBn8pmkfh jAF4NHrPqPeXM7E8YNUIIYgcLiFCpmfMQZ2XwuYoJxt1ANjhu4liqUVl6sWcgdGj tmY6QYIUJUh6NzGoSv8LrUsUJlRu5rI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:00:49 2025 by rpki-client