$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e4f07f1-433a-396a-8d83-c06fa7101379.roa File: 2e4f07f1-433a-396a-8d83-c06fa7101379.roa (raw, json) Hash identifier: fLUsmmxxazm0LLJ3jsFjVFpIJnc3ijj1YlhCdSC+BmQ= Subject key identifier: 9F:9A:30:04:4D:6A:8D:05:B8:52:22:8A:80:44:2A:6C:C3:A9:C1:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A21BCF00E3335F0670600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e4f07f1-433a-396a-8d83-c06fa7101379.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397202 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:bc:f0:0e:33:35:f0:67:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=0c8563eb-dac4-471c-ad43-7caa3480a1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:c3:01:9d:34:45:b4:c2:fd:47:29:4f:24: 0b:37:43:04:3c:b4:5a:bf:6e:35:52:91:a2:63:88: 0b:41:e3:16:25:72:4f:06:85:66:3b:6c:fd:e2:06: 4b:a8:0b:52:62:fe:eb:ee:ec:19:57:1b:f9:6f:dd: 5d:4a:21:f2:cb:5e:3c:be:70:43:9e:b6:8e:d5:67: e1:f4:f0:1e:08:de:b1:d2:1a:3b:9e:4a:e6:0a:1e: ab:0a:ae:4b:a8:24:7d:35:ba:d9:58:9f:7c:8b:5d: 68:28:f2:3e:66:4c:6b:11:48:b8:71:d7:f1:56:49: 80:7c:1c:65:c8:bc:0f:ee:e0:17:44:b9:ea:b3:ad: c0:51:68:23:9d:c3:4b:9f:77:b1:f2:95:0c:01:e0: c8:80:e3:2f:d0:2d:1e:4d:86:4d:48:92:f9:a9:fc: fb:54:c3:2a:24:39:75:f1:47:e5:4a:cd:33:96:1a: 5a:05:18:ef:9c:e7:9b:6a:35:32:66:3b:30:f1:f6: ac:00:ec:f3:c0:6e:0c:8c:fa:0b:6e:ca:a9:92:17: 4c:78:30:c9:62:85:d7:c7:2d:2a:b0:ee:8a:8d:f4: 8b:38:dc:9f:f2:51:9e:e0:a4:41:4a:8e:b0:a4:76: 58:d8:a7:fb:71:bc:70:aa:65:ab:82:f6:a4:17:2c: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:30:04:4D:6A:8D:05:B8:52:22:8A:80:44:2A:6C:C3:A9:C1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e4f07f1-433a-396a-8d83-c06fa7101379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e6:b1:8d:94:c8:8a:b5:29:56:49:d8:8e:46:5c:46:aa:3a: 27:61:77:54:8e:8c:56:0f:39:d7:11:71:05:f4:8a:83:65:45: 14:93:76:9e:d6:75:03:e4:5e:a5:93:fb:90:9e:96:1b:3e:2e: 21:fd:8c:83:58:34:50:33:8d:5e:23:75:b4:85:c1:b8:e6:88: c1:92:76:db:57:aa:71:36:b0:cd:8b:46:50:98:5e:94:1b:00: c4:bd:61:d5:fe:f4:c3:52:7d:3c:01:96:6a:5a:77:30:5c:56: 92:05:f8:ea:0a:d0:81:28:2a:88:00:42:60:9b:25:2a:f4:01: 19:b7:dd:4e:26:9b:2e:c4:94:32:fd:42:66:34:48:ab:03:34: f4:39:2d:0c:bf:da:7f:99:14:e9:25:3e:12:b0:4d:7c:08:52: bd:2e:d6:82:dd:46:05:ba:23:5a:ac:80:3d:f1:f4:33:fd:29: 11:b9:8d:ad:37:d9:f0:22:a7:fe:3f:01:de:18:f0:f1:7f:bf: e4:12:4a:f1:cf:98:6e:b7:d9:74:e4:47:f9:e6:80:a9:4f:67: 82:d5:68:b9:37:9e:30:b5:3e:dd:20:78:84:5c:18:4f:38:53: 5d:dc:6b:27:d2:83:e5:8f:00:f7:d8:5c:c6:c1:d3:85:2f:a6: 4c:c3:46:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiG88A4zNfBnBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MGM4NTYzZWItZGFjNC00NzFjLWFkNDMtN2NhYTM0ODBhMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/rDAZ00RbTC/UcpTyQLN0MEPLRav241UpGi Y4gLQeMWJXJPBoVmO2z94gZLqAtSYv7r7uwZVxv5b91dSiHyy148vnBDnraO1Wfh 9PAeCN6x0ho7nkrmCh6rCq5LqCR9NbrZWJ98i11oKPI+ZkxrEUi4cdfxVkmAfBxl yLwP7uAXRLnqs63AUWgjncNLn3ex8pUMAeDIgOMv0C0eTYZNSJL5qfz7VMMqJDl1 8UflSs0zlhpaBRjvnOebajUyZjsw8fasAOzzwG4MjPoLbsqpkhdMeDDJYoXXxy0q sO6KjfSLONyf8lGe4KRBSo6wpHZY2Kf7cbxwqmWrgvakFyyb2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+aMARNao0FuFIiioBEKmzDqcEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU0ZjA3ZjEtNDMzYS0z OTZhLThkODMtYzA2ZmE3MTAxMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCC5rGNlMiKtSlWSdiORlxGqjonYXdUjoxWDznXEXEF9IqDZUUUk3ae 1nUD5F6lk/uQnpYbPi4h/YyDWDRQM41eI3W0hcG45ojBknbbV6pxNrDNi0ZQmF6U GwDEvWHV/vTDUn08AZZqWncwXFaSBfjqCtCBKCqIAEJgmyUq9AEZt91OJpsuxJQy /UJmNEirAzT0OS0Mv9p/mRTpJT4SsE18CFK9LtaC3UYFuiNarIA98fQz/SkRuY2t N9nwIqf+PwHeGPDxf7/kEkrxz5hut9l05Ef55oCpT2eC1Wi5N54wtT7dIHiEXBhP OFNd3Gsn0oPljwD32FzGwdOFL6ZMw0bc -----END CERTIFICATE-----Generated at Sun May 11 05:42:54 2025 by rpki-client