$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa File: 1324d469-061c-391a-ac60-5b462b8f6694.roa (raw, json) Hash identifier: ue6vN0bb3bKj8AYth1fVq+2DW34Ysof+sMojxPG+3YA= Subject key identifier: 3F:22:A2:4D:6F:E6:A1:1A:93:6B:DA:CB:A2:F9:5B:83:E6:AA:B3:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A221D74F8583F7DAF2300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 20172 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:22:1d:74:f8:58:3f:7d:af:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=beaa2f82-f578-46cf-9509-33e91d3d7d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:84:04:e9:25:f3:d3:9d:e4:d4:89:65:d5: 27:0e:af:c4:ba:3b:10:99:6a:e3:9d:21:79:3e:de: 2e:54:c1:3c:de:39:72:b5:ed:72:ec:07:95:25:3e: b2:45:2b:e1:d4:3c:7a:e4:75:71:04:78:b0:73:52: c6:ab:d4:f0:e6:89:3f:06:73:38:50:2a:5a:1f:c1: 91:66:16:cd:7c:52:cd:c1:74:0a:b0:6e:37:ec:f5: d5:c7:bf:ca:8d:92:58:75:fb:33:87:17:16:fb:f7: ce:af:6c:bc:4e:dd:cf:f0:b8:73:ba:69:8f:2c:01: 23:35:d2:c9:93:9d:73:6f:51:b9:7f:51:73:eb:8f: 35:12:1f:29:1f:58:6e:77:f0:43:79:16:82:87:03: 35:6c:79:dc:75:6c:94:d9:d0:eb:ce:c9:cc:df:f3: 1f:48:af:ef:38:00:a8:6e:4f:dd:92:27:6a:ad:17: f2:85:90:25:91:ab:df:0b:e2:9c:74:0b:e6:f2:7c: 03:93:af:09:d0:55:46:88:6b:87:87:59:9d:d0:54: 33:75:e5:af:8b:a1:13:08:46:2d:8b:ea:ca:e9:ef: 48:2f:56:7b:36:b3:85:ef:06:62:8c:87:84:78:f8: ee:15:5e:7d:da:b8:51:25:a5:ac:75:4d:66:88:b4: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:A2:4D:6F:E6:A1:1A:93:6B:DA:CB:A2:F9:5B:83:E6:AA:B3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:79:c0:79:77:fb:2f:3d:64:b9:28:11:75:24:51:bc:3a:d0: e8:69:13:3e:9d:1b:cd:ac:6c:c3:93:d6:ba:96:93:75:1b:62: 03:67:14:5b:f7:50:52:89:c5:5f:63:9b:02:1c:d2:64:08:2c: 2f:f8:ff:53:69:df:02:b0:3a:46:a6:7b:44:51:ef:ef:a3:e9: 42:bf:7d:8c:3c:d2:a6:b3:9d:ee:35:05:bb:d9:d1:35:4f:b8: d9:69:ab:7b:fc:0d:33:5f:7b:d3:13:d8:d2:57:bf:fe:75:0b: b2:47:76:de:d9:63:2b:a0:1b:95:87:54:d4:20:8e:5c:5a:86: 5a:66:aa:e8:e3:de:2e:03:b6:8f:a2:d7:f7:9d:f8:83:5a:72: 0c:90:59:b5:fb:61:b7:25:2f:27:5b:fc:6b:7e:be:17:c1:44: 28:59:b5:f4:bb:30:60:4d:bd:29:da:54:06:bc:96:42:ed:a9: 08:81:1e:76:8a:10:61:a0:02:91:02:e7:2d:c9:b4:8b:5d:1a: d9:b5:6e:74:fc:e5:4f:cc:d0:a2:cb:3e:7e:c2:b5:3e:5d:48: d8:d0:35:e5:5e:ae:3f:ac:35:24:34:80:7f:fd:26:73:ae:a6: b2:85:bf:4c:b3:8e:af:16:5d:bc:b4:1f:6e:b5:7c:4c:04:55: 4a:7b:f2:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiIddPhYP32vIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YmVhYTJmODItZjU3OC00NmNmLTk1MDktMzNlOTFkM2Q3ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU6EBOkl89Od5NSJZdUnDq/EujsQmWrjnSF5 Pt4uVME83jlyte1y7AeVJT6yRSvh1Dx65HVxBHiwc1LGq9Tw5ok/BnM4UCpaH8GR ZhbNfFLNwXQKsG437PXVx7/KjZJYdfszhxcW+/fOr2y8Tt3P8LhzummPLAEjNdLJ k51zb1G5f1Fz6481Eh8pH1hud/BDeRaChwM1bHncdWyU2dDrzsnM3/MfSK/vOACo bk/dkidqrRfyhZAlkavfC+KcdAvm8nwDk68J0FVGiGuHh1md0FQzdeWvi6ETCEYt i+rK6e9IL1Z7NrOF7wZijIeEePjuFV592rhRJaWsdU1miLQLuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD8iok1v5qEak2vay6L5W4PmqrM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTMyNGQ0NjktMDYxYy0z OTFhLWFjNjAtNWI0NjJiOGY2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3ecB5d/svPWS5KBF1JFG8OtDoaRM+nRvNrGzDk9a6lpN1G2IDZxRb 91BSicVfY5sCHNJkCCwv+P9Tad8CsDpGpntEUe/vo+lCv32MPNKms53uNQW72dE1 T7jZaat7/A0zX3vTE9jSV7/+dQuyR3be2WMroBuVh1TUII5cWoZaZqro494uA7aP otf3nfiDWnIMkFm1+2G3JS8nW/xrfr4XwUQoWbX0uzBgTb0p2lQGvJZC7akIgR52 ihBhoAKRAuctybSLXRrZtW50/OVPzNCiyz5+wrU+XUjY0DXlXq4/rDUkNIB//SZz rqayhb9Ms46vFl28tB9utXxMBFVKe/I/ -----END CERTIFICATE-----Generated at Sun May 11 06:38:45 2025 by rpki-client