$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: jrQYH+qnjPdAKjtr6req4Nvd+gQchQaBWDqBvvfhHsw= Subject key identifier: CF:D9:DF:C0:8F:A0:72:19:A8:2A:43:81:4B:E4:FB:58:39:98:F7:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2332FACF182A2BB78380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:23:32:fa:cf:18:2a:2b:b7:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=c4019013-093e-49a7-8673-c8a2ca8e2af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:3f:e5:2c:59:35:4e:fa:b5:4d:08:f3:85: a2:88:40:a0:54:5b:59:5d:f7:af:c1:70:be:d0:14: 65:1f:e3:48:ff:57:2c:8d:c9:d1:2d:4b:c1:1b:26: 80:e1:66:a8:60:2d:e0:07:b4:07:6b:99:8e:f7:60: 58:97:d8:22:fb:ca:fc:77:19:d6:39:b7:64:34:cd: e2:00:93:81:82:34:89:45:24:93:14:18:ae:2c:1c: cf:59:df:ee:b8:96:37:06:ef:0e:ce:68:fa:d1:dc: 1c:7f:05:94:4c:ef:de:9b:a1:db:c9:89:00:67:87: 91:d9:cd:b4:92:45:4f:6a:55:b1:cf:6e:51:13:9f: 4c:3b:8d:2e:fc:7f:b0:4b:fb:13:83:43:12:00:a1: f5:47:58:04:50:20:64:06:47:c4:c2:7b:a6:34:43: de:b6:38:8e:6e:b6:d5:aa:51:cb:81:67:bf:b1:43: c1:44:a8:81:2f:73:73:88:11:f8:56:f2:5b:4f:e4: fe:d2:64:93:17:ae:70:5a:5d:ef:4b:93:19:0d:f6: 61:1e:7b:c4:d4:e3:34:29:50:b8:47:0d:85:27:52: d0:a8:71:b2:73:78:6a:78:20:0d:80:d9:ae:03:a9: 6c:2b:03:b1:d7:0f:8b:3c:d4:b6:99:87:d4:36:2c: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:DF:C0:8F:A0:72:19:A8:2A:43:81:4B:E4:FB:58:39:98:F7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:26:fb:7c:37:36:c2:e2:3d:18:06:0c:39:36:8d:3c:d2:cb: 8f:af:cf:e6:f8:ff:dd:11:d8:ce:bf:4d:08:7e:b5:ab:fd:03: 2b:7f:53:24:52:2e:7e:1d:de:7b:22:77:fa:a3:f2:0e:6c:2f: 61:2a:e7:75:17:ac:df:87:37:6f:3b:e2:72:95:ec:a1:c1:68: 2b:dd:80:f4:79:fe:02:e2:64:5f:95:27:15:67:98:ff:63:46: df:28:1e:77:5a:28:8d:5a:c3:27:fb:ba:41:53:a4:72:f5:ce: 0d:8b:97:71:42:ae:7e:d9:23:2f:33:e3:b9:e3:9e:c4:01:cc: 6f:99:11:a2:1e:70:2e:59:3e:f3:4f:7f:cf:81:6b:5b:30:c9: 1a:28:98:46:65:91:52:78:b6:53:43:ff:99:e3:58:02:81:5f: 65:56:37:7b:0a:12:66:f5:ac:d9:45:00:2b:ff:e9:4a:87:ea: f0:d1:93:f6:a4:12:8e:da:65:e3:dd:be:5b:41:80:d9:0f:2d: 31:52:88:84:81:2e:cc:54:38:af:b2:c3:12:3b:6a:f8:3a:a8: d0:e9:f2:13:4d:1c:29:d7:c8:7b:6d:3d:96:00:c9:88:45:ba: a5:45:94:03:d8:53:33:1a:66:23:60:e8:1e:87:70:88:6b:b7: 27:65:59:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiMy+s8YKiu3g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YzQwMTkwMTMtMDkzZS00OWE3LTg2NzMtYzhhMmNhOGUyYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm8/5SxZNU76tU0I84WiiECgVFtZXfevwXC+ 0BRlH+NI/1csjcnRLUvBGyaA4WaoYC3gB7QHa5mO92BYl9gi+8r8dxnWObdkNM3i AJOBgjSJRSSTFBiuLBzPWd/uuJY3Bu8Ozmj60dwcfwWUTO/em6HbyYkAZ4eR2c20 kkVPalWxz25RE59MO40u/H+wS/sTg0MSAKH1R1gEUCBkBkfEwnumNEPetjiObrbV qlHLgWe/sUPBRKiBL3NziBH4VvJbT+T+0mSTF65wWl3vS5MZDfZhHnvE1OM0KVC4 Rw2FJ1LQqHGyc3hqeCANgNmuA6lsKwOx1w+LPNS2mYfUNiyNlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM/Z38CPoHIZqCpDgUvk+1g5mPe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRJvt8NzbC4j0YBgw5No080suPr8/m+P/dEdjOv00IfrWr/QMrf1Mk Ui5+Hd57Inf6o/IObC9hKud1F6zfhzdvO+JyleyhwWgr3YD0ef4C4mRflScVZ5j/ Y0bfKB53WiiNWsMn+7pBU6Ry9c4Ni5dxQq5+2SMvM+O5457EAcxvmRGiHnAuWT7z T3/PgWtbMMkaKJhGZZFSeLZTQ/+Z41gCgV9lVjd7ChJm9azZRQAr/+lKh+rw0ZP2 pBKO2mXj3b5bQYDZDy0xUoiEgS7MVDivssMSO2r4OqjQ6fITTRwp18h7bT2WAMmI RbqlRZQD2FMzGmYjYOgeh3CIa7cnZVla -----END CERTIFICATE-----Generated at Sun May 11 08:19:12 2025 by rpki-client