$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa File: 280a2e1b-996f-3776-9415-21785aaf5dda.roa (raw, json) Hash identifier: DRsEmxBDKs9FFAyyN7zyph2/GiwGmJFR2ux3Udk+TC4= Subject key identifier: BE:36:CE:39:43:8A:48:A2:D4:02:66:91:B9:C9:C8:F3:FB:A8:C5:71 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F43285849E0BF8A944CA1A90079A24C80 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 22612 IP address blocks: 159.198.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8a:94:4c:a1:a9:00:79:a2:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=18a45b9f-70d4-40dd-bb91-4eb19c05cb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:75:aa:bb:fc:9e:fe:2a:36:f5:6a:33:1a: 64:e3:c9:de:2a:ae:a9:e2:f2:d6:b0:76:a0:87:b1: cb:b0:83:ed:68:c9:44:1c:25:dc:c4:82:cb:35:90: d9:34:1d:95:79:ae:97:b5:31:22:3d:54:8f:9e:01: f4:18:fc:8c:3d:34:05:3e:53:68:e6:6c:b1:17:39: 0a:52:94:35:20:4a:10:86:15:aa:5d:30:b1:c4:c0: 88:e7:84:17:ff:cf:e6:fc:48:dd:29:cd:30:2e:e9: d5:1d:51:dc:cf:c9:3f:c2:cd:6a:36:15:3e:4c:d5: 78:34:36:84:a5:1c:3f:83:00:e2:2b:19:af:77:09: eb:23:58:a5:6f:db:17:2e:8f:71:7d:1c:e0:f3:bc: 6f:a4:31:4b:ae:b7:e4:37:62:c8:d1:96:24:7d:9d: 5e:64:88:a9:45:8a:d6:f7:cb:fd:94:06:24:21:6e: f6:0c:75:64:35:e2:5c:54:50:09:2a:4c:42:21:90: 4c:7b:27:d2:6a:15:09:56:1a:91:86:e8:50:b3:23: 19:cb:c2:d1:83:7a:f0:63:fc:05:c6:f0:cf:ea:be: 61:0c:f2:1c:5e:0f:b8:e4:6b:e6:a4:cc:19:88:29: d9:f1:d2:77:96:4b:c4:fa:ef:08:30:c2:01:32:bc: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:CE:39:43:8A:48:A2:D4:02:66:91:B9:C9:C8:F3:FB:A8:C5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/280a2e1b-996f-3776-9415-21785aaf5dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d8:4c:bf:64:b1:9d:43:e6:d9:6c:bf:72:68:f2:5e:2c:35: 06:45:17:5a:39:bc:3e:ae:9a:c0:29:87:f6:03:8b:dd:a4:14: 2d:d3:0c:75:ab:c3:55:cc:81:df:11:6b:a8:4d:33:17:76:90: 6c:c4:7b:67:29:04:d8:64:b1:2c:0f:89:90:7f:16:0c:2f:17: 86:d9:81:a7:03:c9:84:cc:d7:12:29:81:6c:91:75:4c:8e:ac: 59:48:a8:74:b7:74:24:9b:0e:34:cd:ba:0c:5b:b3:73:f0:0c: fe:3f:ea:49:14:73:2a:34:ee:a6:1a:dc:2b:51:f2:e4:f7:c9: 16:ff:ac:5c:cd:8f:29:24:67:99:58:99:08:59:28:12:64:09: 1e:18:aa:f5:95:a5:29:de:25:8c:60:5d:58:6b:33:b1:0e:cf: 55:c0:e8:14:86:e6:71:d8:08:24:5f:9f:8e:44:01:d5:9b:34: 46:7b:ba:8d:1a:09:09:f9:a2:8b:a8:5c:c0:ec:62:52:cb:1b: 8f:03:d8:a1:3f:cb:02:87:e2:0b:3c:96:8e:8b:19:df:cb:a9: ea:25:82:75:11:b7:1d:74:8e:20:03:03:6b:9a:55:ab:ac:25: 86:61:6b:7e:fb:47:c2:7f:00:38:a3:03:a1:fb:d1:7c:83:43: 45:eb:34:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEngv4qUTKGpAHmiTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk MThhNDViOWYtNzBkNC00MGRkLWJiOTEtNGViMTljMDVjYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi691qrv8nv4qNvVqMxpk48neKq6p4vLWsHag h7HLsIPtaMlEHCXcxILLNZDZNB2Vea6XtTEiPVSPngH0GPyMPTQFPlNo5myxFzkK UpQ1IEoQhhWqXTCxxMCI54QX/8/m/EjdKc0wLunVHVHcz8k/ws1qNhU+TNV4NDaE pRw/gwDiKxmvdwnrI1ilb9sXLo9xfRzg87xvpDFLrrfkN2LI0ZYkfZ1eZIipRYrW 98v9lAYkIW72DHVkNeJcVFAJKkxCIZBMeyfSahUJVhqRhuhQsyMZy8LRg3rwY/wF xvDP6r5hDPIcXg+45GvmpMwZiCnZ8dJ3lkvE+u8IMMIBMrwOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL42zjlDikii1AJmkbnJyPP7qMVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMjgwYTJlMWItOTk2Zi0z Nzc2LTk0MTUtMjE3ODVhYWY1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn8ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTYTL9ksZ1D5tlsv3Jo8l4sNQZFF1o5vD6umsAph/YDi92kFC3TDHWr w1XMgd8Ra6hNMxd2kGzEe2cpBNhksSwPiZB/FgwvF4bZgacDyYTM1xIpgWyRdUyO rFlIqHS3dCSbDjTNugxbs3PwDP4/6kkUcyo07qYa3CtR8uT3yRb/rFzNjykkZ5lY mQhZKBJkCR4YqvWVpSneJYxgXVhrM7EOz1XA6BSG5nHYCCRfn45EAdWbNEZ7uo0a CQn5oouoXMDsYlLLG48D2KE/ywKH4gs8lo6LGd/LqeolgnURtx10jiADA2uaVaus JYZha377R8J/ADijA6H70XyDQ0XrNGI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:34 2025 by rpki-client