$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa File: 252c2597-4e45-34ee-81f0-3febf529bcc2.roa (raw, json) Hash identifier: Y61uoP1YoKzbxbBRIgWwd91vZ2Nh0o2wpMlSZlQJDKc= Subject key identifier: 38:F4:B7:DB:EF:44:18:54:43:3D:39:E9:44:1D:15:A3:CC:BA:3D:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A25DFA4772225A2D707F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396606 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:df:a4:77:22:25:a2:d7:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=20086076-1d5b-407b-8487-9feaa31744e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:95:bb:63:09:95:53:c5:37:c5:74:eb:ab: b0:52:80:3a:96:11:25:49:7f:7a:6a:5b:26:2f:2b: 5a:4d:06:1e:80:25:9a:80:56:69:e2:a8:ca:f3:7a: 2e:92:a0:ab:50:49:42:d4:32:52:ea:2f:a4:53:89: eb:99:ca:66:85:01:ec:4e:63:e3:7a:07:59:0c:f3: d5:08:a4:cc:a3:ed:96:8e:74:59:c7:e5:75:58:7e: 0c:95:9f:dd:59:1f:56:bb:ba:71:6a:90:7a:fb:46: 57:c2:95:48:2a:00:56:49:aa:a4:e5:c6:0e:73:8d: ce:8d:20:0e:06:8e:ea:71:a4:d5:ec:07:d3:1f:78: f6:ee:57:fa:f4:d7:f5:75:7b:93:bb:4f:0e:39:3b: 77:25:2e:ff:b1:bf:89:b8:0e:31:67:4c:01:76:77: 77:41:3f:73:38:0b:46:1b:02:30:3c:b7:b3:3c:a2: 54:59:a6:a5:d1:31:6a:ca:b2:d4:fc:c5:0b:5a:89: 24:96:0a:56:b7:58:8e:fb:a2:79:5c:14:80:4d:10: 8b:91:85:9a:77:07:8f:db:2e:9a:7d:b8:08:59:5a: 93:fb:4c:d4:82:de:3e:1f:65:43:c3:33:d0:15:dc: 57:a2:00:fc:a3:99:19:d1:03:0f:c2:52:80:bd:6f: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:B7:DB:EF:44:18:54:43:3D:39:E9:44:1D:15:A3:CC:BA:3D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1f:9f:66:00:27:af:b5:ae:d4:30:dd:ed:7e:bf:96:16:e8: 06:d0:57:53:87:0a:cd:d5:6f:4e:00:e1:fe:3f:81:0e:5a:56: 49:97:73:1e:a9:a8:9f:d1:e3:15:bf:5b:a4:49:cf:54:fa:ef: 63:7a:b4:9c:fb:b9:56:2d:58:71:a2:48:79:ac:2f:da:69:11: d8:5f:e3:d3:46:90:b6:14:25:4a:b5:c6:f5:95:17:4d:b3:99: 49:a3:c5:db:1b:c7:1b:92:13:1d:34:6a:89:d6:52:62:00:c1: b7:00:af:14:f8:16:c3:9b:76:8d:8c:7b:1c:3c:b6:9d:1e:28: 5a:9e:14:53:7a:24:43:8b:21:61:72:c8:d3:d0:f5:db:b4:31: 94:15:1c:af:51:0a:b3:9e:b2:df:7f:4b:eb:52:3d:68:0e:1f: eb:ea:ef:75:f4:bd:82:f9:94:17:aa:e4:ca:f7:08:db:35:4b: a7:66:f4:ce:0e:0e:bf:8e:dd:ba:73:cb:e3:9a:dd:98:a7:8e: 4c:65:f0:a8:1d:de:4b:39:cc:c1:65:d1:00:b6:0d:32:72:6a: 4a:b7:cb:e2:05:85:bf:e9:99:21:7a:51:3f:08:3f:5c:52:b9: f3:77:a4:c5:b3:9e:80:2d:0a:c6:6a:5a:04:bc:e7:0b:ed:23: 5b:36:a3:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiXfpHciJaLXB/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjAwODYwNzYtMWQ1Yi00MDdiLTg0ODctOWZlYWEzMTc0NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzeVu2MJlVPFN8V066uwUoA6lhElSX96alsm LytaTQYegCWagFZp4qjK83oukqCrUElC1DJS6i+kU4nrmcpmhQHsTmPjegdZDPPV CKTMo+2WjnRZx+V1WH4MlZ/dWR9Wu7pxapB6+0ZXwpVIKgBWSaqk5cYOc43OjSAO Bo7qcaTV7AfTH3j27lf69Nf1dXuTu08OOTt3JS7/sb+JuA4xZ0wBdnd3QT9zOAtG GwIwPLezPKJUWaal0TFqyrLU/MULWokklgpWt1iO+6J5XBSATRCLkYWadweP2y6a fbgIWVqT+0zUgt4+H2VDwzPQFdxXogD8o5kZ0QMPwlKAvW+J6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDj0t9vvRBhUQz056UQdFaPMuj2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUyYzI1OTctNGU0NS0z NGVlLTgxZjAtM2ZlYmY1MjliY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApH59mACevta7UMN3tfr+WFugG0FdThwrN1W9OAOH+P4EOWlZJl3Me qaif0eMVv1ukSc9U+u9jerSc+7lWLVhxokh5rC/aaRHYX+PTRpC2FCVKtcb1lRdN s5lJo8XbG8cbkhMdNGqJ1lJiAMG3AK8U+BbDm3aNjHscPLadHihanhRTeiRDiyFh csjT0PXbtDGUFRyvUQqznrLff0vrUj1oDh/r6u919L2C+ZQXquTK9wjbNUunZvTO Dg6/jt26c8vjmt2Yp45MZfCoHd5LOczBZdEAtg0ycmpKt8viBYW/6ZkhelE/CD9c Urnzd6TFs56ALQrGaloEvOcL7SNbNqPv -----END CERTIFICATE-----Generated at Sun May 11 05:35:09 2025 by rpki-client