$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa File: 1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa (raw, json) Hash identifier: zc74alsoNTsHziPdgGxreMVBXOGXhTHgec+6jAU1Jrs= Subject key identifier: 9C:BB:44:CE:C3:BD:65:3A:93:D7:09:EE:55:5F:CE:AC:C2:2E:00:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2417C534000AA9606D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396613 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:17:c5:34:00:0a:a9:60:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=66371ebb-cf85-44b8-84d4-dea880cdc149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:71:b2:a6:ce:a2:e5:61:ba:33:00:d8:95: 29:2b:5c:db:72:53:f9:1c:e7:2a:3f:82:d6:8a:82: 3b:a5:8e:f5:30:b0:9a:16:94:cb:c8:50:e3:ae:b7: fc:29:0d:8e:5d:53:33:b4:29:df:be:63:2f:f9:05: 2b:1d:06:fd:e0:b6:74:77:ae:e5:73:3e:2f:35:82: e1:8b:4f:fa:ed:02:49:16:79:c8:86:e8:f5:f2:8a: d7:8a:aa:e2:2a:70:23:9d:92:a6:37:7d:11:e7:51: 11:45:72:f1:1c:b3:98:2b:31:05:81:17:3c:5a:79: e2:03:b9:35:0d:25:db:50:2f:f9:75:8b:e4:62:08: fc:5f:2b:5f:de:22:2d:97:bb:69:ce:87:93:63:da: 3a:1c:a6:b5:9f:f9:a3:77:74:86:2d:aa:8e:67:5e: ff:5d:c4:0e:e2:37:de:b3:0d:df:49:0b:e8:a1:67: f9:c3:8e:fc:7f:00:85:01:b1:06:19:4c:f6:75:f0: a7:29:ee:9e:5f:77:ed:5e:f9:a4:4a:fd:92:b4:6b: 21:39:4f:6c:d4:a6:79:5a:72:1d:70:a3:b8:15:71: 86:de:a1:cf:db:fe:00:01:c7:2e:df:93:ac:0a:bb: b1:6e:10:d4:c8:70:1d:4b:2b:d6:e3:32:72:f4:a5: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:44:CE:C3:BD:65:3A:93:D7:09:EE:55:5F:CE:AC:C2:2E:00:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:85:4b:a6:1a:c9:5b:54:d2:fc:78:72:1f:24:9f:57:dd: 60:6a:5c:bf:8b:cd:51:b6:07:5d:8f:56:fa:f9:bc:37:e2:8c: e6:f8:bd:06:6f:98:53:60:ad:af:5d:95:c1:09:6c:63:a7:1e: 13:4d:ba:48:d2:e2:3c:c3:4d:9b:fe:80:ef:07:32:b6:3a:ca: fa:ed:fc:fd:6f:9e:31:d8:87:57:50:b5:4a:0e:94:73:1a:eb: 8b:96:72:14:8f:ca:94:a4:77:9f:cd:79:3f:d9:fd:39:8e:ce: ec:ae:f7:9a:86:d3:bd:95:da:3d:9f:86:39:ef:82:73:3c:f5: 66:40:70:33:1f:20:6d:7b:dd:59:48:1b:29:a5:7f:3f:4c:3f: 0d:cf:1d:55:7c:3d:9f:88:d2:66:79:4f:a0:41:71:ba:fc:47: 72:ee:d2:75:c0:a6:c1:09:4c:02:a2:4a:8f:17:39:ae:57:03: 47:b9:46:b6:d3:9a:ac:0d:91:2f:c6:0f:98:fa:03:e5:c2:d2: 1b:67:6e:1e:c8:34:45:21:9b:24:35:cd:9a:4b:27:0f:4c:cd: 49:d2:36:11:b7:80:f1:65:e0:e9:65:c9:ec:2a:f0:30:32:9f: 55:be:00:f0:ec:43:94:1c:3d:4f:51:5d:d5:0e:96:73:31:c1: 5d:11:c3:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiQXxTQACqlgbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NjYzNzFlYmItY2Y4NS00NGI4LTg0ZDQtZGVhODgwY2RjMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMRxsqbOouVhujMA2JUpK1zbclP5HOcqP4LW ioI7pY71MLCaFpTLyFDjrrf8KQ2OXVMztCnfvmMv+QUrHQb94LZ0d67lcz4vNYLh i0/67QJJFnnIhuj18orXiqriKnAjnZKmN30R51ERRXLxHLOYKzEFgRc8WnniA7k1 DSXbUC/5dYvkYgj8Xytf3iItl7tpzoeTY9o6HKa1n/mjd3SGLaqOZ17/XcQO4jfe sw3fSQvooWf5w478fwCFAbEGGUz2dfCnKe6eX3ftXvmkSv2StGshOU9s1KZ5WnId cKO4FXGG3qHP2/4AAccu35OsCruxbhDUyHAdSyvW4zJy9KVHjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJy7RM7DvWU6k9cJ7lVfzqzCLgAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiNTA4MjMtMjQzYy0z YmVjLWFjOTAtMmYwZDYwMzhjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcQoVLphrJW1TS/HhyHySfV91galy/i81Rtgddj1b6+bw34ozm+L0G b5hTYK2vXZXBCWxjpx4TTbpI0uI8w02b/oDvBzK2Osr67fz9b54x2IdXULVKDpRz GuuLlnIUj8qUpHefzXk/2f05js7srveahtO9ldo9n4Y574JzPPVmQHAzHyBte91Z SBsppX8/TD8Nzx1VfD2fiNJmeU+gQXG6/Edy7tJ1wKbBCUwCokqPFzmuVwNHuUa2 05qsDZEvxg+Y+gPlwtIbZ24eyDRFIZskNc2aSycPTM1J0jYRt4DxZeDpZcnsKvAw Mp9VvgDw7EOUHD1PUV3VDpZzMcFdEcPF -----END CERTIFICATE-----Generated at Mon May 12 02:20:43 2025 by rpki-client