$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa File: 293c24be-5877-3a18-8d22-1b2ad2d976b3.roa (raw, json) Hash identifier: 29PtcjdnPYGYC8OcaojV96z1dOOwRV5VLgbIOYK9jYw= Subject key identifier: 68:37:A4:E4:51:9E:DF:11:92:8F:7D:96:5B:44:01:48:75:D7:72:B3 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584AC17B909F3F3A084CD1666480 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa Signing time: Tue 05 Aug 2025 13:00:41 +0000 ROA not before: Tue 05 Aug 2025 13:00:41 +0000 ROA not after: Mon 03 Nov 2025 14:00:41 +0000 asID: 22612 IP address blocks: 159.198.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:7b:90:9f:3f:3a:08:4c:d1:66:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Aug 5 13:00:41 2025 GMT Not After : Nov 3 14:00:41 2025 GMT Subject: CN=7af15ed7-4dab-4531-a3ab-674e8d7d7914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:fa:24:1c:4b:fb:79:42:7e:fb:b4:77:44: db:55:db:3c:e3:eb:25:40:92:bc:12:55:29:dd:94: dc:e5:6d:55:02:e8:45:2c:70:b8:ef:f3:79:bb:9e: 65:e2:ac:3b:1e:cc:b0:82:a5:99:dd:8c:c5:d5:c2: d7:a3:87:6c:96:15:80:38:e2:07:cb:4c:a5:d6:31: 13:a7:e2:77:95:36:27:d4:d3:12:59:44:62:e8:4a: 83:0c:a7:60:00:64:0b:04:ad:44:b4:27:24:ff:26: 1f:5a:b4:b9:b0:6a:75:a4:8f:34:df:95:d7:96:99: 3d:e7:72:cc:06:23:a7:8e:18:82:3f:e0:ab:60:c4: 8b:e5:fc:ec:d6:fd:e2:4b:07:22:76:87:45:e5:0f: e9:ad:14:b8:29:98:f3:6a:1b:7d:43:f5:d5:fa:c9: 04:eb:89:8f:80:fb:d1:8b:88:cb:e0:b3:01:e0:22: 85:7c:3f:0d:71:fd:24:a7:e6:6f:ee:d5:38:6d:c0: 9d:ba:cd:cd:77:2e:74:30:48:ca:1b:53:58:38:ab: 9b:65:01:7e:8e:32:dc:ac:91:e2:35:b1:be:ac:c3: 1b:d0:28:52:97:85:19:d4:d1:49:ad:d8:25:09:5e: 56:45:c4:eb:32:1f:67:91:5d:9e:22:58:1d:d9:61: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:A4:E4:51:9E:DF:11:92:8F:7D:96:5B:44:01:48:75:D7:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:58:81:a9:d5:b3:af:3e:ed:d2:f6:c5:46:8f:fc:28:cc:8e: 36:75:45:85:3a:51:4c:0f:92:7e:0c:32:66:3d:34:16:ce:23: 66:f6:8f:bb:21:a6:62:43:c4:03:27:3a:a0:03:ef:d2:64:9b: ca:cb:2c:ac:60:a4:67:dc:46:38:7c:ea:e7:79:4e:43:84:4e: 34:f7:43:63:c7:85:bf:97:dc:43:f4:66:b5:79:ed:5e:2a:83: 3b:11:95:a9:ce:29:9f:d8:0d:15:ea:84:6c:72:28:1d:2a:83: ce:a4:f7:bd:97:58:75:c1:50:06:f2:3c:a2:b3:96:0d:eb:e8: 00:4b:12:5b:5e:ac:94:f2:9c:19:88:f0:75:bc:af:7c:6d:be: cd:06:35:20:19:5f:c4:fa:99:5c:45:88:a6:cf:cb:f0:0f:48: 14:13:84:17:cc:59:0a:4a:49:92:89:57:f0:51:7a:1b:30:03: 74:cd:c9:8c:11:7a:d1:62:27:9c:4f:6f:b6:67:4c:bc:ff:62: a8:30:94:ce:ab:c8:ca:f9:45:1a:d2:ac:cb:e1:14:91:69:df: fa:e3:e4:1e:c2:f6:7b:84:e1:8f:72:1a:39:d6:03:60:4b:95: db:54:88:a9:53:5f:e5:b3:55:29:fb:67:2f:ae:41:48:c6:b4: 19:ab:fa:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErBe5CfPzoITNFmZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDgwNTEzMDA0MVoXDTI1MTEwMzE0MDA0MVowLzEtMCsGA1UEAxMk N2FmMTVlZDctNGRhYi00NTMxLWEzYWItNjc0ZThkN2Q3OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsH6JBxL+3lCfvu0d0TbVds84+slQJK8ElUp 3ZTc5W1VAuhFLHC47/N5u55l4qw7HsywgqWZ3YzF1cLXo4dslhWAOOIHy0yl1jET p+J3lTYn1NMSWURi6EqDDKdgAGQLBK1EtCck/yYfWrS5sGp1pI8035XXlpk953LM BiOnjhiCP+CrYMSL5fzs1v3iSwcidodF5Q/prRS4KZjzaht9Q/XV+skE64mPgPvR i4jL4LMB4CKFfD8Ncf0kp+Zv7tU4bcCdus3Ndy50MEjKG1NYOKubZQF+jjLcrJHi NbG+rMMb0ChSl4UZ1NFJrdglCV5WRcTrMh9nkV2eIlgd2WE1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg3pORRnt8Rko99lltEAUh113KzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMjkzYzI0YmUtNTg3Ny0z YTE4LThkMjItMWIyYWQyZDk3NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpYganVs68+7dL2xUaP/CjMjjZ1RYU6UUwPkn4MMmY9NBbOI2b2j7sh pmJDxAMnOqAD79Jkm8rLLKxgpGfcRjh86ud5TkOETjT3Q2PHhb+X3EP0ZrV57V4q gzsRlanOKZ/YDRXqhGxyKB0qg86k972XWHXBUAbyPKKzlg3r6ABLElterJTynBmI 8HW8r3xtvs0GNSAZX8T6mVxFiKbPy/APSBQThBfMWQpKSZKJV/BRehswA3TNyYwR etFiJ5xPb7ZnTLz/YqgwlM6ryMr5RRrSrMvhFJFp3/rj5B7C9nuE4Y9yGjnWA2BL ldtUiKlTX+WzVSn7Zy+uQUjGtBmr+gQ= -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:21 2025 by rpki-client