$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa File: 29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa (raw, json) Hash identifier: X3KMIKBk5RHIQBmFWbgpKpFPTccS6SSR0SC5d3UixA8= Subject key identifier: EA:2B:90:D7:8A:42:85:30:16:2B:F7:68:79:0F:C0:1C:8A:E9:30:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A25B9B7A903E03CAE9200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396583 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:b9:b7:a9:03:e0:3c:ae:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=63df6820-3a3e-4aa4-874f-ff284599fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:f2:b2:50:58:a2:57:51:30:de:1c:5e:d9: 44:ec:74:61:db:a2:64:b4:86:44:c5:10:4b:6f:e5: ad:b7:24:0e:f8:63:f8:e7:3b:6b:b8:26:d4:91:d4: c4:48:7d:38:e6:9d:35:6a:e2:63:c3:35:88:5e:71: 06:dc:3f:d7:b8:af:bd:4b:de:02:08:89:02:dc:8f: 40:ae:d9:8c:3a:38:47:d8:2d:af:ed:27:c2:fc:2d: fb:c7:66:89:18:7d:0f:b1:54:b8:b2:0c:e2:81:34: 03:c8:1a:70:bd:f3:45:0d:c5:29:b0:14:55:b6:3f: d5:8e:34:73:6f:0d:00:e8:c5:c1:9a:db:62:b3:e8: b0:64:fe:4d:82:36:ad:6d:b4:1f:37:e8:f7:9d:61: ad:01:61:29:25:11:87:c6:56:7d:92:b7:09:60:b1: f6:32:ec:a4:2a:b3:fa:0f:10:3a:0d:b7:51:34:20: 9b:b0:89:18:7a:dd:e9:ca:f9:2e:ea:36:e8:ad:d1: b0:0b:80:4e:d5:9f:f5:f6:50:d5:54:bc:bb:66:bf: 48:b0:7e:a3:ba:69:cc:18:47:5c:56:70:8f:da:b2: c7:46:52:6d:bd:4c:d2:25:43:01:b3:cd:be:04:16: 9a:0e:0d:37:83:09:9d:f1:eb:4b:42:6d:a2:a5:75: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:90:D7:8A:42:85:30:16:2B:F7:68:79:0F:C0:1C:8A:E9:30:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5b:d0:4c:af:d7:29:71:53:16:79:ce:0b:23:27:d2:5b:88: 0d:61:80:73:7b:0f:c3:98:8d:09:af:f5:8d:b1:38:a9:5f:7e: 0b:b8:24:82:e5:0c:7d:93:69:db:d4:65:39:af:f9:cc:dc:95: 7c:f9:10:5b:34:5f:30:95:ea:a7:05:9a:1e:cd:37:3b:b8:f9: 50:6f:89:b1:62:96:45:ea:c0:cc:bb:c3:8b:12:29:4b:26:af: e8:52:3e:1d:af:1a:d9:7e:ab:1b:26:0d:e6:9f:12:ff:f9:e9: 5a:4e:16:b2:0f:0d:97:3c:1a:37:4b:5d:43:52:f2:3a:b8:6f: 42:fc:dc:c7:e5:c4:a5:65:23:7c:68:6e:33:c6:40:10:90:e9: c0:98:b4:b0:85:ac:6d:b3:07:9a:10:7f:9d:05:6d:98:e8:9c: e2:80:14:51:25:35:3e:be:42:6d:ee:c8:73:57:6c:8b:43:0f: 49:83:e0:0d:b8:6a:26:1b:0c:f4:6f:ba:d9:6d:c4:00:62:1d: f9:a3:16:81:25:26:ff:0c:00:6a:80:31:a0:cc:9c:35:a5:99: e1:0a:79:82:7c:8e:68:34:0e:48:cf:f8:c7:94:6e:0d:f9:e5: 83:1a:8c:10:ed:34:14:0d:a4:b9:48:76:25:07:65:09:96:fe: 27:5a:bf:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiW5t6kD4DyukgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NjNkZjY4MjAtM2EzZS00YWE0LTg3NGYtZmYyODQ1OTlmYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0vyslBYoldRMN4cXtlE7HRh26JktIZExRBL b+WttyQO+GP45ztruCbUkdTESH045p01auJjwzWIXnEG3D/XuK+9S94CCIkC3I9A rtmMOjhH2C2v7SfC/C37x2aJGH0PsVS4sgzigTQDyBpwvfNFDcUpsBRVtj/VjjRz bw0A6MXBmttis+iwZP5NgjatbbQfN+j3nWGtAWEpJRGHxlZ9krcJYLH2MuykKrP6 DxA6DbdRNCCbsIkYet3pyvku6jbordGwC4BO1Z/19lDVVLy7Zr9IsH6jumnMGEdc VnCP2rLHRlJtvUzSJUMBs82+BBaaDg03gwmd8etLQm2ipXW2YQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOorkNeKQoUwFiv3aHkPwByK6TDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjliZjJhNGQtM2I3Ny0z MGYzLWIyN2EtZDJhMTRhMGZlZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDW9BMr9cpcVMWec4LIyfSW4gNYYBzew/DmI0Jr/WNsTipX34LuCSC 5Qx9k2nb1GU5r/nM3JV8+RBbNF8wleqnBZoezTc7uPlQb4mxYpZF6sDMu8OLEilL Jq/oUj4drxrZfqsbJg3mnxL/+elaThayDw2XPBo3S11DUvI6uG9C/NzH5cSlZSN8 aG4zxkAQkOnAmLSwhaxtsweaEH+dBW2Y6JzigBRRJTU+vkJt7shzV2yLQw9Jg+AN uGomGwz0b7rZbcQAYh35oxaBJSb/DABqgDGgzJw1pZnhCnmCfI5oNA5Iz/jHlG4N +eWDGowQ7TQUDaS5SHYlB2UJlv4nWr/h -----END CERTIFICATE-----Generated at Sun May 11 05:38:45 2025 by rpki-client