$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa File: 36ed91fb-062d-351c-b4c9-180bcb664af4.roa (raw, json) Hash identifier: FxRUfAtQJZG6MXc+2rwJv7nCHBo9DwoqPnRW9qxCc9I= Subject key identifier: 1B:81:AB:5D:6A:7F:75:33:49:27:9E:7F:CD:49:67:18:F2:B0:72:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A203C09751F15B82368C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36629 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:3c:09:75:1f:15:b8:23:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9851fb5f-aff8-4050-9e4b-c24b0b5fc609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:00:ce:6f:5b:70:b0:bb:ca:aa:2e:6a:04: 35:7a:59:44:63:03:f9:a4:d7:dd:5f:cf:ed:3c:d8: a2:2c:43:5d:48:96:bd:15:33:83:c6:d3:e2:1a:0e: 4c:7b:16:18:ba:22:06:32:df:99:70:7e:b1:22:ef: af:94:af:0e:50:45:43:a9:58:9a:29:28:0e:a4:f1: 9e:ea:28:71:fd:a4:94:0e:36:2d:31:b7:ab:c3:08: 05:ad:b1:40:69:e2:03:c9:52:15:7e:92:58:fb:a6: d2:aa:22:5d:36:73:97:13:5d:a7:4d:46:c5:d6:d5: 29:fe:85:98:21:06:b7:0e:e5:ae:e0:e1:c5:22:c7: 6e:0b:cd:ef:c7:44:28:55:d0:f6:eb:32:e9:e2:75: c7:c4:e8:09:8e:ae:04:46:b4:b0:fb:ba:fd:6f:21: d4:0b:2a:af:fd:e9:16:19:f0:f1:65:ea:9f:3e:e0: 52:fa:68:ae:38:da:37:19:7c:f6:57:d7:fb:a0:dc: b5:eb:22:ba:06:54:35:e0:11:f9:c0:6d:56:18:d5: 01:38:d6:a9:14:b6:b0:a9:b8:44:4f:4d:44:2b:ad: fb:7d:83:ed:c3:d5:70:d2:24:66:8b:7c:40:5b:82: bd:91:dc:07:4d:0f:25:98:b6:41:85:7f:0b:54:04: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:81:AB:5D:6A:7F:75:33:49:27:9E:7F:CD:49:67:18:F2:B0:72:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:55:ef:4f:1f:6d:e2:64:9e:57:b7:84:ac:91:19:a9:49: b3:b5:86:99:06:69:be:9e:0c:c5:c7:70:68:98:a6:e9:1d:e4: 7f:58:03:99:49:57:cd:bb:03:97:57:59:d3:32:2d:1a:3a:db: c7:b6:10:c5:d8:5f:5b:52:34:27:f9:87:d4:fb:f1:60:f5:41: e6:ff:f1:3e:ec:ec:73:c1:81:40:9d:69:a6:c1:63:41:06:18: 85:78:9d:72:9e:94:1e:9a:38:ec:2c:57:88:51:07:80:8b:c4: 1e:74:53:46:bc:3e:d6:e6:97:84:7b:cd:9f:26:cf:e9:80:cf: 9f:a4:f0:71:37:4f:7e:e6:9b:92:b7:cb:cc:76:15:9f:0d:70: 20:ae:61:dc:f5:56:0d:cd:9d:54:38:ca:75:85:96:2f:b3:32: c6:14:26:95:20:f8:5c:95:67:75:87:97:da:55:40:84:3a:6a: 69:79:42:e1:13:0d:06:a9:a1:de:a1:fc:22:2a:ff:73:11:b6: 1d:c5:f6:81:5b:92:70:5f:4f:9f:80:6e:1c:b1:a4:50:e6:09: 50:e6:c5:6a:01:52:ab:ba:3e:a8:d4:cf:82:fb:97:6d:93:36: e0:ed:c8:c3:3e:13:08:71:9b:8f:e4:8f:59:a0:89:9e:26:da: ff:d7:85:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiA8CXUfFbgjaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTg1MWZiNWYtYWZmOC00MDUwLTllNGItYzI0YjBiNWZjNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVIAzm9bcLC7yqouagQ1ellEYwP5pNfdX8/t PNiiLENdSJa9FTODxtPiGg5MexYYuiIGMt+ZcH6xIu+vlK8OUEVDqViaKSgOpPGe 6ihx/aSUDjYtMberwwgFrbFAaeIDyVIVfpJY+6bSqiJdNnOXE12nTUbF1tUp/oWY IQa3DuWu4OHFIsduC83vx0QoVdD26zLp4nXHxOgJjq4ERrSw+7r9byHUCyqv/ekW GfDxZeqfPuBS+miuONo3GXz2V9f7oNy16yK6BlQ14BH5wG1WGNUBONapFLawqbhE T01EK637fYPtw9Vw0iRmi3xAW4K9kdwHTQ8lmLZBhX8LVARPfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBuBq11qf3UzSSeef81JZxjysHLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzZlZDkxZmItMDYyZC0z NTFjLWI0YzktMTgwYmNiNjY0YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO/VXvTx9t4mSeV7eErJEZqUmztYaZBmm+ngzFx3BomKbpHeR/WAOZ SVfNuwOXV1nTMi0aOtvHthDF2F9bUjQn+YfU+/Fg9UHm//E+7OxzwYFAnWmmwWNB BhiFeJ1ynpQemjjsLFeIUQeAi8QedFNGvD7W5peEe82fJs/pgM+fpPBxN09+5puS t8vMdhWfDXAgrmHc9VYNzZ1UOMp1hZYvszLGFCaVIPhclWd1h5faVUCEOmppeULh Ew0GqaHeofwiKv9zEbYdxfaBW5JwX0+fgG4csaRQ5glQ5sVqAVKruj6o1M+C+5dt kzbg7cjDPhMIcZuP5I9ZoImeJtr/14Vb -----END CERTIFICATE-----Generated at Sun May 11 05:27:00 2025 by rpki-client