$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa File: 8f9d7892-fecf-3810-935d-afa6818c2d8c.roa (raw, json) Hash identifier: Zy9t1OVQm1zp5AXni2ipgAWRUmmQRNkp+9KzJ6jOeOM= Subject key identifier: D5:37:57:D2:A0:B3:E5:EA:FD:7D:3E:17:25:90:B0:13:2A:7E:1D:02 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584A0C054CBBB7878DACEF430A40 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 22612 IP address blocks: 198.177.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4c:bb:b7:87:8d:ac:ef:43:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b28e3ef4-e45b-4b09-ad17-d064a2d538b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:01:60:3f:e0:2e:64:79:b8:8b:2f:12:ad: 78:20:0a:41:f4:0d:3f:6d:86:b3:47:ef:33:e6:0c: 83:7c:85:b2:f5:7c:2e:3c:8d:04:10:bf:a2:9b:84: 88:27:9a:8d:ce:1a:69:db:bc:8b:f4:52:6c:a4:82: 3e:34:5d:ee:14:26:a9:cd:bb:d5:69:95:92:7b:61: 8e:08:b3:74:4f:4b:6b:63:9d:13:87:48:d7:88:7d: b5:d4:60:62:6a:0f:23:b6:45:1c:64:09:6d:37:03: 98:ef:de:3f:bb:91:4f:b0:5a:a4:9b:4b:d6:08:e7: e7:5b:0a:09:5e:f2:90:1f:31:2d:6b:2a:d3:ff:8d: 9c:bb:eb:72:dd:82:37:d3:70:49:dd:be:1f:85:ee: c1:01:80:86:b6:e5:cf:2a:d1:91:03:2e:5f:cb:9f: 87:f1:08:06:a9:c8:d0:c1:9f:94:3b:0c:17:64:39: 04:24:f2:01:5c:90:63:aa:8c:ac:4e:6d:71:81:d0: 62:c5:c2:95:58:7a:6b:a0:51:b1:2a:84:47:cb:48: a6:2b:22:8f:b0:a2:2c:fc:6c:5a:6c:be:aa:41:c7: fb:b0:7e:e6:65:f1:93:71:17:a7:c0:6f:6e:0e:15: 78:68:58:bf:08:e9:9d:53:55:1a:f4:91:8e:f1:98: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:57:D2:A0:B3:E5:EA:FD:7D:3E:17:25:90:B0:13:2A:7E:1D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 198.177.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:85:9d:fd:6b:d4:f2:1a:96:2a:da:6b:7b:65:3c:d5:1d:be: 95:fc:a1:cf:24:36:4b:3e:97:d6:0a:40:0e:dc:74:cf:69:39: 56:45:1e:9b:f4:8c:6b:28:3f:02:fa:65:08:7e:0f:56:9c:60: e9:9a:b3:5f:06:e1:30:3e:22:b5:82:43:fb:46:11:e1:46:50: d3:1e:dd:5e:a7:7d:d7:20:82:7a:9c:d7:94:2d:91:ec:fc:ba: 37:8a:82:0a:b3:ac:bd:97:4e:00:4b:b8:db:23:e1:c1:8d:93: bc:d7:53:82:4b:1e:c6:6d:49:e7:06:a7:8e:2c:75:fe:d8:d1: 15:d5:bc:f8:c5:de:c1:4f:f3:c6:15:0f:f3:b7:0f:db:f2:48: e5:88:cc:e0:6e:d0:d7:73:41:24:ff:a3:ea:0f:68:c0:30:8b: ab:4f:16:d5:62:38:2b:be:0a:f5:72:7e:75:a5:25:88:c5:60: 7f:fa:06:70:ba:f7:8f:c4:6f:22:5c:16:08:18:21:ea:33:99: 48:a2:d3:1a:21:71:84:a7:94:6c:e3:ab:c7:af:a9:20:63:32: 52:6f:b1:d6:6b:b8:02:73:3d:fe:85:16:01:02:78:6d:a6:73: 47:ed:4c:83:31:56:4f:f2:64:51:0c:6b:1d:c4:4f:ba:de:ae: 56:b1:b4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUy7t4eNrO9DCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjI4ZTNlZjQtZTQ1Yi00YjA5LWFkMTctZDA2NGEyZDUzOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1gBYD/gLmR5uIsvEq14IApB9A0/bYazR+8z 5gyDfIWy9XwuPI0EEL+im4SIJ5qNzhpp27yL9FJspII+NF3uFCapzbvVaZWSe2GO CLN0T0trY50Th0jXiH211GBiag8jtkUcZAltNwOY794/u5FPsFqkm0vWCOfnWwoJ XvKQHzEtayrT/42cu+ty3YI303BJ3b4fhe7BAYCGtuXPKtGRAy5fy5+H8QgGqcjQ wZ+UOwwXZDkEJPIBXJBjqoysTm1xgdBixcKVWHproFGxKoRHy0imKyKPsKIs/Gxa bL6qQcf7sH7mZfGTcRenwG9uDhV4aFi/COmdU1Ua9JGO8Zj9KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU3V9Kgs+Xq/X0+FyWQsBMqfh0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvOGY5ZDc4OTItZmVjZi0z ODEwLTkzNWQtYWZhNjgxOGMyZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxrF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGFnf1r1PIaliraa3tlPNUdvpX8oc8kNks+l9YKQA7cdM9pOVZFHpv0 jGsoPwL6ZQh+D1acYOmas18G4TA+IrWCQ/tGEeFGUNMe3V6nfdcggnqc15Qtkez8 ujeKggqzrL2XTgBLuNsj4cGNk7zXU4JLHsZtSecGp44sdf7Y0RXVvPjF3sFP88YV D/O3D9vySOWIzOBu0NdzQST/o+oPaMAwi6tPFtViOCu+CvVyfnWlJYjFYH/6BnC6 94/EbyJcFggYIeozmUii0xohcYSnlGzjq8evqSBjMlJvsdZruAJzPf6FFgECeG2m c0ftTIMxVk/yZFEMax3ET7rerlaxtIw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:07:55 2025 by rpki-client