$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa File: 36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa (raw, json) Hash identifier: WFSmTvCcKZ4w8AN1Gs4UMGBnC44KQQgPXGkDDvROKF0= Subject key identifier: 93:AF:70:4A:A3:86:9C:C7:2B:A4:23:44:41:33:45:74:D5:29:62:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A21CCAD3B83B4B815B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397199 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:cc:ad:3b:83:b4:b8:15:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=fb4fa6cb-d4a4-4f93-9997-2106603ff376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:bd:68:ed:1b:46:9b:81:f9:97:1b:1c:8d: e0:25:99:58:e7:b2:7e:d7:9e:f8:90:34:44:9c:19: 22:1c:31:c9:63:6a:83:bf:57:25:66:eb:f3:fb:1c: a3:53:f3:90:f2:7a:0a:49:76:b0:95:7d:4b:42:b1: 1d:6c:02:70:5f:77:68:4a:24:bb:08:13:d6:87:89: dc:11:4d:37:11:fd:bf:70:3c:c6:0f:d6:e9:e3:4f: 43:47:f9:90:4d:d4:1c:c4:67:63:d0:66:9f:f1:0b: 70:48:70:19:65:03:5a:bf:46:d2:c6:ba:75:2d:f9: 57:e2:31:a1:82:2e:e4:7e:eb:79:3c:2c:a5:53:d3: 99:af:d8:c6:89:50:a6:bd:c6:60:d6:b8:6f:bf:47: f6:fe:c6:f8:f7:87:c2:f3:f3:a0:5f:b5:0f:52:18: 45:cf:21:66:bf:a6:d6:c7:97:e8:03:63:a4:36:17: 6d:2d:20:8c:f3:c9:89:61:6a:e0:2e:2a:1c:74:97: 9f:52:a9:82:3c:bc:85:f8:ee:0d:bd:31:f6:69:fb: de:33:b5:00:fa:fb:90:4a:05:1b:26:ce:76:40:3b: 73:d6:d6:34:67:44:03:cf:01:4b:e0:19:5c:38:5b: bc:5b:d8:3f:28:40:91:16:1b:6c:98:80:d0:58:7b: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AF:70:4A:A3:86:9C:C7:2B:A4:23:44:41:33:45:74:D5:29:62:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bf:20:bd:65:e9:90:56:5a:72:fc:54:12:aa:e4:af:93:74: 8c:60:18:70:a2:ed:78:21:d1:87:2d:f7:ff:b8:87:bd:c8:5e: 28:90:94:77:28:33:ce:8a:8e:23:54:2f:2a:d3:0a:03:e5:9d: ed:db:0d:8b:c2:f0:e6:f2:4f:2b:b7:2b:ff:aa:ff:9c:00:e7: 71:07:f2:30:05:09:35:7c:58:1f:45:59:eb:c2:91:b9:01:05: 81:42:fa:6a:8e:28:97:60:24:0e:5b:fe:cc:18:bf:63:b6:d5: d6:9b:15:28:c9:4b:2a:92:98:f4:93:0c:e4:73:ce:3a:3d:df: 82:ac:f3:f0:71:e7:bd:bf:db:66:6d:0c:4a:c9:a7:74:5a:4b: de:e2:24:ff:bd:91:82:15:ca:ae:81:98:93:77:4a:5e:6b:d8: f8:91:73:13:0a:22:09:39:95:f7:0f:0c:16:f9:4c:4e:bf:c8: c9:13:e0:96:d3:97:04:75:a4:8f:9d:bf:3d:3e:8c:79:29:6e: 18:40:76:d0:f5:98:cc:d4:30:d1:1f:bc:3b:e1:04:00:6c:55: ff:13:5f:b9:2b:fd:6d:e6:ef:7f:f0:c0:8f:9f:d1:b2:9c:9b: db:2e:2f:c6:2c:6b:ad:60:d0:b2:20:4c:04:b0:89:6e:95:28: e1:57:a4:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiHMrTuDtLgVsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmI0ZmE2Y2ItZDRhNC00ZjkzLTk5OTctMjEwNjYwM2ZmMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHy9aO0bRpuB+ZcbHI3gJZlY57J+1574kDRE nBkiHDHJY2qDv1clZuvz+xyjU/OQ8noKSXawlX1LQrEdbAJwX3doSiS7CBPWh4nc EU03Ef2/cDzGD9bp409DR/mQTdQcxGdj0Gaf8QtwSHAZZQNav0bSxrp1LflX4jGh gi7kfut5PCylU9OZr9jGiVCmvcZg1rhvv0f2/sb494fC8/OgX7UPUhhFzyFmv6bW x5foA2OkNhdtLSCM88mJYWrgLiocdJefUqmCPLyF+O4NvTH2afveM7UA+vuQSgUb Js52QDtz1tY0Z0QDzwFL4BlcOFu8W9g/KECRFhtsmIDQWHuuqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJOvcEqjhpzHK6QjREEzRXTVKWKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY4ODdiOWQtZjFhMC0z MWFkLWE1ZmEtMTUxYzg4YjY0ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKvyC9ZemQVlpy/FQSquSvk3SMYBhwou14IdGHLff/uIe9yF4okJR3 KDPOio4jVC8q0woD5Z3t2w2LwvDm8k8rtyv/qv+cAOdxB/IwBQk1fFgfRVnrwpG5 AQWBQvpqjiiXYCQOW/7MGL9jttXWmxUoyUsqkpj0kwzkc846Pd+CrPPwcee9v9tm bQxKyad0Wkve4iT/vZGCFcqugZiTd0pea9j4kXMTCiIJOZX3DwwW+UxOv8jJE+CW 05cEdaSPnb89Pox5KW4YQHbQ9ZjM1DDRH7w74QQAbFX/E1+5K/1t5u9/8MCPn9Gy nJvbLi/GLGutYNCyIEwEsIlulSjhV6SH -----END CERTIFICATE-----Generated at Sun May 11 05:33:48 2025 by rpki-client