$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa File: d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa (raw, json) Hash identifier: 85+7DOkBDKndYdXh5Ph+RVZpTgj6WzuLAhN1ZomJ1n8= Subject key identifier: C4:8D:79:EE:41:F9:BB:78:2B:65:3D:CF:74:89:9B:C8:C4:FE:E1:6E Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Certificate serial: 010D0C9F43285849D85FAA3D22707D9B1B7BA380 Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 8075 IP address blocks: 199.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:aa:3d:22:70:7d:9b:1b:7b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5ac1e3c5-728d-4a22-9ee1-3115919cc101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:98:79:85:2b:4f:fb:ca:7f:97:79:c7:c7: 7a:41:a9:b5:56:e8:c0:25:37:9c:f2:c1:7c:50:47: 31:52:0e:63:da:25:5f:b5:9b:c8:0e:65:49:5b:6b: 20:dd:0b:3a:d7:7f:c5:59:12:c5:34:a4:58:be:54: aa:32:5e:d6:f3:ca:fb:06:0c:fd:49:5d:a0:24:4e: 9b:65:e9:88:2e:e3:bf:a5:cb:28:fe:7b:72:41:be: ac:a3:f3:d3:35:46:eb:4f:ea:5f:07:60:27:e0:00: fe:1b:f4:5a:2c:aa:2b:a4:e1:13:4f:36:70:40:53: 31:42:e5:8e:ca:a6:1c:a1:36:5f:5e:16:27:85:90: 3a:3e:a4:de:d0:a8:59:02:bb:77:82:56:c6:ce:b9: 30:3a:af:5e:a2:d5:5f:e2:59:89:66:39:5b:57:7f: de:93:ba:cc:31:cc:59:40:2e:e8:80:3f:7c:53:2b: fc:6b:55:64:6d:fb:db:a2:c0:73:8f:c4:6e:59:43: df:36:9e:36:dc:40:30:85:97:6d:1b:a6:bd:1c:b9: 64:04:e5:28:cd:cb:ff:1f:00:a6:17:7d:cc:1b:03: 8c:86:44:22:19:0b:f7:c3:07:30:b0:39:28:e2:99: 30:a8:57:02:11:b3:0b:1d:67:d1:d6:98:cc:f2:1d: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8D:79:EE:41:F9:BB:78:2B:65:3D:CF:74:89:9B:C8:C4:FE:E1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl X509v3 Authority Key Identifier: keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7a:60:17:b1:aa:97:0d:de:af:32:bd:ec:72:90:33:0a:36: 4c:51:79:23:d9:3d:25:cb:0b:17:2d:04:31:81:ea:54:a5:bf: c3:84:33:f7:60:da:f0:d6:45:da:d2:bc:2d:ae:d3:32:c8:a5: 1f:7b:c5:b3:56:d1:eb:a2:a3:c5:e1:d8:1e:47:90:c7:4d:14: eb:cf:ec:61:9f:5d:f3:d3:70:1f:64:75:38:1b:92:f0:29:8f: 6f:90:a3:9a:a1:a4:48:7a:48:d1:99:a1:7c:54:c4:67:f6:d7: 19:df:49:99:d4:a0:2d:93:2a:1f:67:c0:d2:81:44:0f:54:ef: 96:c8:ee:20:24:e5:8b:db:9e:61:45:d5:bc:b6:65:68:6a:7d: 72:75:29:11:22:14:23:47:73:3e:c0:ac:8e:1b:95:51:07:62: 72:0c:47:74:22:be:82:e4:a2:60:51:01:f6:19:89:2a:16:b1: 30:ae:2b:70:56:3f:6d:60:57:4a:4a:5b:a8:cb:8c:03:37:4b: e4:94:ad:80:f3:bc:ce:63:5d:05:c9:9b:05:3d:eb:19:65:c4: a3:70:81:57:54:7e:08:89:d8:33:fb:d1:9a:fc:45:47:8b:44: e7:90:fc:2f:17:a1:12:86:36:10:43:f5:fe:52:30:4d:0a:0b: cb:e5:9a:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6o9InB9mxt7o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVm ZWE0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NWFjMWUzYzUtNzI4ZC00YTIyLTllZTEtMzExNTkxOWNjMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1qYeYUrT/vKf5d5x8d6Qam1VujAJTec8sF8 UEcxUg5j2iVftZvIDmVJW2sg3Qs613/FWRLFNKRYvlSqMl7W88r7Bgz9SV2gJE6b ZemILuO/pcso/ntyQb6so/PTNUbrT+pfB2An4AD+G/RaLKorpOETTzZwQFMxQuWO yqYcoTZfXhYnhZA6PqTe0KhZArt3glbGzrkwOq9eotVf4lmJZjlbV3/ek7rMMcxZ QC7ogD98Uyv8a1VkbfvbosBzj8RuWUPfNp423EAwhZdtG6a9HLlkBOUozcv/HwCm F33MGwOMhkQiGQv3wwcwsDko4pkwqFcCEbMLHWfR1pjM8h1xeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSNee5B+bt4K2U9z3SJm8jE/uFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81M2Zm MTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvZDI5ZWViMGEtNDZlOS0z MDRmLWJlYjItZTljMGE1ODI3NzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTNmZjEyOWItODQ1Zi00NDlkLThl MzItMmIyNGVjYmVmZWE0LzUzZmYxMjliLTg0NWYtNDQ5ZC04ZTMyLTJiMjRlY2Jl ZmVhNC5jcmwwHwYDVR0jBBgwFoAUDB3tJaEV8jXJR8VrnQipvgjoNUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0 ZWNiZWZlYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp6YBexqpcN3q8yvexykDMKNkxReSPZPSXLCxctBDGB6lSlv8OEM/dg 2vDWRdrSvC2u0zLIpR97xbNW0euio8Xh2B5HkMdNFOvP7GGfXfPTcB9kdTgbkvAp j2+Qo5qhpEh6SNGZoXxUxGf21xnfSZnUoC2TKh9nwNKBRA9U75bI7iAk5YvbnmFF 1by2ZWhqfXJ1KREiFCNHcz7ArI4blVEHYnIMR3QivoLkomBRAfYZiSoWsTCuK3BW P21gV0pKW6jLjAM3S+SUrYDzvM5jXQXJmwU96xllxKNwgVdUfgiJ2DP70Zr8RUeL ROeQ/C8XoRKGNhBD9f5SME0KC8vlmhg= -----END CERTIFICATE-----Generated at Sun Jun 15 06:34:21 2025 by rpki-client