$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa File: 10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa (raw, json) Hash identifier: rq/TaaQr9xc7Wlqka4MWd6+uQ1O6v7dSl1482dxqIi8= Subject key identifier: B4:95:8C:B7:D6:71:CD:B9:D6:9C:EF:E6:7A:C1:DF:38:14:4A:93:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A237DC97A98E61938FEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396578 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:23:7d:c9:7a:98:e6:19:38:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d8ac13ca-bbdb-4ab2-9b39-ab663724a745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:32:e4:8b:70:ea:71:2d:ff:7d:7e:b9:6d: 73:cc:f6:0a:07:0d:72:a3:6a:67:68:72:1b:88:f4: d9:f2:03:46:5b:90:ef:f9:ba:dd:6a:69:c8:86:d5: 66:b5:92:3e:b6:1e:1f:64:d9:0a:af:82:62:0a:c9: 0e:02:31:c7:a7:32:c5:39:4c:d4:8a:ec:f3:88:7c: 82:60:6d:d7:c9:a6:34:eb:df:d9:6e:96:da:46:06: 1f:2e:0e:ec:10:4d:88:15:f0:63:06:62:9f:fd:fc: cf:06:da:08:d5:8d:f3:77:90:f8:95:b1:cd:83:f0: 82:76:8e:33:b6:20:8d:cb:df:10:19:82:e7:98:77: 62:79:4d:4c:15:43:71:0e:ba:50:da:91:a7:1e:08: c0:94:a2:99:77:b9:c9:7f:8d:48:bd:db:84:e8:02: e1:85:bc:c9:0e:22:45:42:5e:71:6f:12:3b:35:9e: 96:b9:02:13:f6:5a:aa:1a:70:42:eb:a3:e6:23:89: 13:31:23:e1:c8:aa:ac:0e:a1:eb:24:f0:84:df:c2: 1c:e9:ba:8a:d8:34:22:f4:f4:57:f8:5d:38:5d:82: 7c:b0:03:80:96:0e:80:66:54:2e:bf:2d:d6:19:bd: bd:1d:52:1a:35:4d:6f:8c:d3:2d:1a:a7:9e:78:52: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:8C:B7:D6:71:CD:B9:D6:9C:EF:E6:7A:C1:DF:38:14:4A:93:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:98:65:9a:da:91:69:ba:58:26:0f:05:2b:cb:38:6c:04:87: 78:87:98:11:44:02:e4:bb:71:02:ae:76:42:6e:55:a6:dc:81: 28:8a:67:db:1e:17:db:ca:3e:ac:47:4b:7c:41:c3:d2:cd:ed: 16:77:07:40:75:c6:3c:2d:9b:ad:6b:44:37:c5:fb:dd:6c:d6: a5:d7:3a:8b:fe:81:91:d5:9f:bb:ac:17:e0:3f:58:95:d2:52: 9a:12:91:63:a0:fe:2f:b9:e4:7e:73:36:aa:30:1d:af:74:f3: 98:30:11:9e:29:b8:09:d9:22:e8:a1:d7:a6:c7:03:50:99:cc: ad:d4:1f:f4:48:d5:6a:48:76:fd:31:0a:cd:94:99:8a:9a:10: 2c:d1:f4:18:d5:38:c4:f9:51:24:ff:c2:d2:df:8a:b9:8d:80: 9c:09:85:9f:83:49:f4:da:80:27:a8:c2:94:7b:f5:7a:e3:96: 2a:80:f5:3d:b5:4a:f8:18:15:f4:2f:98:f9:7e:de:aa:f8:14: 70:61:d6:98:69:eb:7f:e9:91:f5:7f:7c:22:91:1d:13:87:fd: 23:9a:19:50:2f:81:05:46:13:91:ec:46:ee:f2:3e:df:2e:23: 8d:29:02:82:b7:2d:6d:41:56:ea:60:25:a1:e0:c4:65:09:57: 3f:dd:a1:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiN9yXqY5hk4/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDhhYzEzY2EtYmJkYi00YWIyLTliMzktYWI2NjM3MjRhNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjToy5Itw6nEt/31+uW1zzPYKBw1yo2pnaHIb iPTZ8gNGW5Dv+brdamnIhtVmtZI+th4fZNkKr4JiCskOAjHHpzLFOUzUiuzziHyC YG3XyaY069/ZbpbaRgYfLg7sEE2IFfBjBmKf/fzPBtoI1Y3zd5D4lbHNg/CCdo4z tiCNy98QGYLnmHdieU1MFUNxDrpQ2pGnHgjAlKKZd7nJf41IvduE6ALhhbzJDiJF Ql5xbxI7NZ6WuQIT9lqqGnBC66PmI4kTMSPhyKqsDqHrJPCE38Ic6bqK2DQi9PRX +F04XYJ8sAOAlg6AZlQuvy3WGb29HVIaNU1vjNMtGqeeeFKUfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLSVjLfWcc251pzv5nrB3zgUSpOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTBkZDYyMGEtMWIxMi0z YjZhLWFhODMtNDdjNzZiZWQwN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDmGWa2pFpulgmDwUryzhsBId4h5gRRALku3ECrnZCblWm3IEoimfb Hhfbyj6sR0t8QcPSze0WdwdAdcY8LZuta0Q3xfvdbNal1zqL/oGR1Z+7rBfgP1iV 0lKaEpFjoP4vueR+czaqMB2vdPOYMBGeKbgJ2SLoodemxwNQmcyt1B/0SNVqSHb9 MQrNlJmKmhAs0fQY1TjE+VEk/8LS34q5jYCcCYWfg0n02oAnqMKUe/V645YqgPU9 tUr4GBX0L5j5ft6q+BRwYdaYaet/6ZH1f3wikR0Th/0jmhlQL4EFRhOR7Ebu8j7f LiONKQKCty1tQVbqYCWh4MRlCVc/3aG8 -----END CERTIFICATE-----Generated at Sun May 11 08:14:09 2025 by rpki-client