$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa File: 1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa (raw, json) Hash identifier: DRwR3H2ksHuLmLJAn7MmrdObBBEma4/ckgv30NtzT+s= Subject key identifier: C4:9D:0A:14:FE:E2:A4:AD:A3:B7:9B:8F:C4:09:88:1F:C0:EB:74:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2243F082B46A4C15EA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 22547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:22:43:f0:82:b4:6a:4c:15:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=f134bccf-98ea-40d2-948d-8b5364b59eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:3b:e0:4f:7d:5a:9b:77:21:cd:2c:24:bf: 6a:89:08:80:de:63:a6:c7:92:01:38:fc:64:59:91: 73:de:ae:14:27:27:f3:ce:b8:ca:e6:05:29:10:de: 35:48:4b:dc:fe:2d:6a:a4:c5:ea:aa:dd:37:5f:e8: 39:94:19:34:4b:59:3b:64:22:31:c6:3c:77:4f:43: 45:e6:c3:15:60:c0:36:65:7e:86:49:51:8c:88:62: 66:e8:b5:50:35:f2:94:cd:ba:4a:56:4f:39:58:1c: fb:2f:c2:9c:5c:3b:e6:bd:6f:e9:84:b7:60:e8:fd: f6:43:da:4a:7f:60:fe:26:51:8c:01:e9:81:4e:40: af:03:46:b5:c3:89:b1:3e:4c:90:78:85:d9:99:52: 9f:5e:97:82:62:58:35:34:42:b9:25:99:25:35:3e: da:52:f3:3f:77:ac:7b:01:2d:01:89:39:70:d5:75: c4:d1:ae:b1:1f:d1:3b:52:38:d5:ad:f4:56:dd:66: 57:8c:a9:b3:fe:a2:86:91:e3:06:4d:04:3b:50:e0: 1c:ab:a9:a1:4d:d0:04:5c:5d:19:1a:44:e7:5e:d2: 9e:41:de:7f:40:5d:60:f6:5a:2d:9c:be:1f:2a:0a: ff:ed:81:22:35:39:e3:fb:bf:db:e4:c6:eb:06:da: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:0A:14:FE:E2:A4:AD:A3:B7:9B:8F:C4:09:88:1F:C0:EB:74:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:43:15:ae:14:a9:62:6b:70:ce:02:af:68:1c:eb:78:8e:96: 0b:16:75:b2:b2:21:4c:09:cc:4f:ae:92:ac:ab:ab:9a:d3:89: 15:62:eb:cc:0a:b3:aa:22:67:f5:2e:99:56:7d:d2:af:bd:d3: 5a:e9:47:4b:3c:28:3b:d4:f4:5b:fd:f2:23:e1:5e:11:84:2d: 78:15:1f:f5:9c:ae:ce:3b:a3:c7:57:7e:cc:cb:81:43:02:49: 85:d2:c2:b7:82:85:60:89:13:15:25:be:c0:20:b9:2a:01:c2: 74:59:4b:95:25:e5:ec:d1:14:02:0e:22:8a:25:4b:2d:b6:66: 18:1a:c4:54:3b:22:0f:70:32:c2:0a:34:64:a7:89:a4:c5:79: b1:53:14:16:90:d3:b0:a6:88:72:74:22:ee:70:b6:e1:b9:7a: bf:46:60:c7:94:a0:94:6a:75:90:d0:1b:73:05:ca:ce:43:b8: db:c0:41:7c:64:a2:21:b0:f1:ec:d8:67:6e:b8:15:20:2b:36: 7a:22:1e:28:23:81:2d:d5:e0:44:a2:72:ec:bc:cc:b7:1a:39: 2b:0f:54:c7:98:f7:f9:f4:6e:0f:99:81:05:87:fa:df:6a:24: 9c:41:a8:15:69:7f:a7:ad:26:d2:f6:b2:b2:2a:d8:02:e1:c3: b7:95:37:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiJD8IK0akwV6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZjEzNGJjY2YtOThlYS00MGQyLTk0OGQtOGI1MzY0YjU5ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53w74E99Wpt3Ic0sJL9qiQiA3mOmx5IBOPxk WZFz3q4UJyfzzrjK5gUpEN41SEvc/i1qpMXqqt03X+g5lBk0S1k7ZCIxxjx3T0NF 5sMVYMA2ZX6GSVGMiGJm6LVQNfKUzbpKVk85WBz7L8KcXDvmvW/phLdg6P32Q9pK f2D+JlGMAemBTkCvA0a1w4mxPkyQeIXZmVKfXpeCYlg1NEK5JZklNT7aUvM/d6x7 AS0BiTlw1XXE0a6xH9E7UjjVrfRW3WZXjKmz/qKGkeMGTQQ7UOAcq6mhTdAEXF0Z GkTnXtKeQd5/QF1g9lotnL4fKgr/7YEiNTnj+7/b5MbrBto0uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSdChT+4qSto7ebj8QJiB/A63RBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWRjM2ZlYjYtYmQxMS0z ZDJmLWFjZTUtYTY0YWNkZGQ1MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcQxWuFKlia3DOAq9oHOt4jpYLFnWysiFMCcxPrpKsq6ua04kVYuvM CrOqImf1LplWfdKvvdNa6UdLPCg71PRb/fIj4V4RhC14FR/1nK7OO6PHV37My4FD AkmF0sK3goVgiRMVJb7AILkqAcJ0WUuVJeXs0RQCDiKKJUsttmYYGsRUOyIPcDLC CjRkp4mkxXmxUxQWkNOwpohydCLucLbhuXq/RmDHlKCUanWQ0BtzBcrOQ7jbwEF8 ZKIhsPHs2GduuBUgKzZ6Ih4oI4Et1eBEonLsvMy3GjkrD1THmPf59G4PmYEFh/rf aiScQagVaX+nrSbS9rKyKtgC4cO3lTdj -----END CERTIFICATE-----Generated at Sun May 11 05:26:00 2025 by rpki-client