$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa File: 24a91ee2-c3ed-3ba1-9469-640cde946175.roa (raw, json) Hash identifier: 2yOVBqDTtvdLbUWcq1phqvgmnE6fTb29ah9qvXYp+ck= Subject key identifier: 3C:AB:BE:EC:6B:6A:4A:3F:07:86:F7:6F:43:08:6D:12:68:14:6B:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FFFE1948746492E9B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:ff:e1:94:87:46:49:2e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=20f93996-5bb7-45b0-ada8-9ade9b36d3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:82:b4:8a:c9:8b:4e:35:09:28:08:1a:9e: 2d:e4:6a:b3:6e:ef:db:ca:f5:4a:e8:ee:17:f6:4a: 55:b4:c3:ce:a6:5c:2c:1e:57:08:8f:66:d7:75:1c: ec:af:ac:41:42:01:46:8c:9a:77:fc:cc:e1:9c:fa: 19:3f:3b:4e:44:68:44:89:01:c3:31:82:cc:22:ab: ab:1c:53:ff:39:d0:4d:19:4b:0b:f3:97:c5:e0:b5: 26:38:28:56:b1:90:57:7e:fc:24:7f:90:7d:11:04: ff:8d:7a:83:8a:41:91:d2:bb:a3:82:59:8a:c2:b9: 56:56:79:8b:07:39:3d:a5:f0:11:b6:66:50:b2:78: c5:fe:b6:b8:b6:64:d0:2d:50:fc:18:1c:06:52:f8: 72:20:5a:35:ea:05:10:9f:cf:8f:db:86:de:13:3c: 2f:3d:92:7e:a6:5d:12:a8:3d:e3:27:bc:e4:49:61: 31:e5:bd:8d:e9:47:48:d2:41:05:6c:7b:6a:1e:c2: 13:94:f3:65:df:d7:13:87:09:b6:7d:b0:dd:5a:cc: e6:66:7e:ac:63:8b:2d:43:01:64:d3:39:d5:f3:8e: e5:66:e0:18:5b:3b:5b:e2:79:41:80:3a:b8:1e:7f: 7e:2e:aa:b6:ef:3d:bb:ed:f9:76:5f:60:c6:b9:0e: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:BE:EC:6B:6A:4A:3F:07:86:F7:6F:43:08:6D:12:68:14:6B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c7:25:f4:81:d9:dd:95:ee:7f:06:b5:e6:21:95:5e:36:ad: 54:fc:30:53:fa:9c:27:81:5f:a6:f3:4d:ad:9a:bf:c3:f8:77: e7:7a:ee:32:22:c7:21:34:cc:cb:4a:07:9f:a7:87:b8:47:fb: 87:12:28:82:4d:1a:3a:54:db:61:a4:15:65:f5:e1:eb:54:f5: 68:89:19:72:7f:b6:67:39:3f:37:0f:18:14:3a:18:5a:59:38: 8b:12:cd:48:cc:b0:84:7d:40:f8:f2:3e:d8:a1:9b:ae:11:a4: 1e:c3:34:7a:f1:7c:7e:09:31:98:f8:7d:ee:02:70:2d:70:d3: 0b:f3:55:b2:90:6e:21:55:1b:d1:07:42:39:ae:ff:60:ca:ff: 16:38:96:43:90:11:a3:f2:21:26:f9:84:68:6d:9c:1b:46:8b: fe:7a:80:d5:0f:3e:27:6b:6f:64:d2:31:c9:36:85:f9:1e:7a: 02:83:de:bf:34:8c:e6:26:32:d9:2d:8e:96:3e:16:81:f5:9e: 5a:9f:fb:d2:1d:50:a9:42:23:1f:53:9e:c5:cd:5c:e6:9c:c9: b8:d5:60:33:99:44:59:ba:9f:87:de:28:61:99:07:1e:cd:73: d2:ca:38:63:53:b3:81:a5:cf:a3:09:3c:cc:61:9f:5a:37:99: 11:9b:f1:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh//4ZSHRkkumwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjBmOTM5OTYtNWJiNy00NWIwLWFkYTgtOWFkZTliMzZkM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPqCtIrJi041CSgIGp4t5Gqzbu/byvVK6O4X 9kpVtMPOplwsHlcIj2bXdRzsr6xBQgFGjJp3/MzhnPoZPztORGhEiQHDMYLMIqur HFP/OdBNGUsL85fF4LUmOChWsZBXfvwkf5B9EQT/jXqDikGR0rujglmKwrlWVnmL Bzk9pfARtmZQsnjF/ra4tmTQLVD8GBwGUvhyIFo16gUQn8+P24beEzwvPZJ+pl0S qD3jJ7zkSWEx5b2N6UdI0kEFbHtqHsITlPNl39cThwm2fbDdWszmZn6sY4stQwFk 0znV847lZuAYWztb4nlBgDq4Hn9+Lqq27z277fl2X2DGuQ5A3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDyrvuxrako/B4b3b0MIbRJoFGvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhOTFlZTItYzNlZC0z YmExLTk0NjktNjQwY2RlOTQ2MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/xyX0gdndle5/BrXmIZVeNq1U/DBT+pwngV+m802tmr/D+Hfneu4y IschNMzLSgefp4e4R/uHEiiCTRo6VNthpBVl9eHrVPVoiRlyf7ZnOT83DxgUOhha WTiLEs1IzLCEfUD48j7YoZuuEaQewzR68Xx+CTGY+H3uAnAtcNML81WykG4hVRvR B0I5rv9gyv8WOJZDkBGj8iEm+YRobZwbRov+eoDVDz4na29k0jHJNoX5HnoCg96/ NIzmJjLZLY6WPhaB9Z5an/vSHVCpQiMfU57FzVzmnMm41WAzmURZup+H3ihhmQce zXPSyjhjU7OBpc+jCTzMYZ9aN5kRm/Go -----END CERTIFICATE-----Generated at Sun May 11 05:30:38 2025 by rpki-client