$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa File: 40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa (raw, json) Hash identifier: mODLxu/SM6zkVD39JKQoCM9ko6t7OxSQw/JmZmLtDxk= Subject key identifier: C6:D9:41:F9:C4:E1:00:1C:3D:C4:FF:54:23:F1:73:30:BC:57:01:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2072D38401CF29BD7F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397210 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:72:d3:84:01:cf:29:bd:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=cb54a945-2597-4e79-8887-aa257b770b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:05:4f:3d:1b:c4:9d:e2:fb:44:2d:89:18: 28:2d:ab:36:53:ea:3e:b6:43:69:6a:1f:27:7f:d2: 9e:60:a6:9b:7b:eb:2f:b1:88:26:76:29:76:bf:5b: f6:f7:a2:69:01:a7:49:9c:a4:86:6d:fa:d3:67:85: b0:b9:84:89:b9:21:9a:3d:b6:00:3c:0c:ad:e9:bb: e1:ef:31:d2:b1:8b:01:00:67:d9:ef:df:db:ca:55: 53:ec:02:7e:08:6e:99:63:67:f7:71:4d:d0:90:7e: 07:17:b3:60:9a:74:ce:e0:fb:16:d1:fc:7e:8d:3d: 1d:eb:4b:ec:c0:ae:46:af:93:d4:a8:0d:92:e6:1a: 63:63:cf:9c:5c:97:3b:61:b7:84:cf:b6:06:1f:7a: 0b:a7:5a:18:40:cb:a1:f6:d0:6c:7e:06:10:45:e2: 0d:72:b7:53:a2:ce:06:41:32:72:7c:28:1b:e4:93: 72:61:63:90:c7:16:7a:1a:d5:cf:80:38:b1:5c:22: 6a:24:be:c2:b9:8d:03:f2:83:a0:9d:5f:42:e4:e7: e4:62:bf:0e:8d:ec:e2:75:fc:dd:a7:9d:60:d9:1e: 90:76:ae:f8:02:34:63:23:88:01:dd:d5:a0:0a:1b: 7b:59:ef:de:18:f9:e2:1b:f3:c0:6a:d3:54:a9:86: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D9:41:F9:C4:E1:00:1C:3D:C4:FF:54:23:F1:73:30:BC:57:01:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ae:c7:37:c0:31:b3:e6:42:64:1b:2d:b3:81:44:58:5b:f9: e2:43:cd:20:35:8e:a1:6d:c0:45:a5:30:7a:92:1f:02:7d:3e: 3d:13:21:b3:62:70:d3:ef:9d:cc:d6:1f:2e:e4:fd:f4:a5:a4: a0:08:d8:d4:dd:36:4d:ff:3d:22:75:16:fa:b0:90:8c:56:29: 80:83:8b:92:dd:2a:02:99:bb:32:3f:0c:be:fc:ec:44:b8:76: 73:8e:df:11:b4:63:4b:0b:bf:6f:cb:fd:ac:e4:96:02:08:f9: 2c:4d:f4:02:77:44:62:9e:0d:1e:c6:fa:e6:0b:81:25:c3:a7: ae:77:ac:4a:a1:6f:ea:89:12:9b:1f:79:e0:4b:a5:34:e2:c9: f0:ce:c9:08:eb:a8:97:7c:4e:47:e7:0c:d0:0e:6d:a3:e9:d3: 51:49:2b:d1:c9:74:56:64:c4:e9:b2:45:81:80:80:85:ed:c0: 0c:e0:b5:ed:b0:ef:c5:f8:d4:82:cd:74:35:cb:e2:7f:bc:ab: 06:67:9e:33:a1:a6:68:ce:67:0c:b0:ed:12:c6:f6:f7:e6:99: 66:c4:c7:56:da:9d:e0:65:c7:ef:74:ac:03:56:4d:bc:52:8a: 46:0e:06:95:77:dd:69:68:34:1e:e8:ff:81:91:7c:da:90:59: 41:b9:27:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiBy04QBzym9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Y2I1NGE5NDUtMjU5Ny00ZTc5LTg4ODctYWEyNTdiNzcwYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6AFTz0bxJ3i+0QtiRgoLas2U+o+tkNpah8n f9KeYKabe+svsYgmdil2v1v296JpAadJnKSGbfrTZ4WwuYSJuSGaPbYAPAyt6bvh 7zHSsYsBAGfZ79/bylVT7AJ+CG6ZY2f3cU3QkH4HF7NgmnTO4PsW0fx+jT0d60vs wK5Gr5PUqA2S5hpjY8+cXJc7YbeEz7YGH3oLp1oYQMuh9tBsfgYQReINcrdTos4G QTJyfCgb5JNyYWOQxxZ6GtXPgDixXCJqJL7CuY0D8oOgnV9C5OfkYr8Ojezidfzd p51g2R6Qdq74AjRjI4gB3dWgCht7We/eGPniG/PAatNUqYbLOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMbZQfnE4QAcPcT/VCPxczC8VwF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA1OTVhOTYtZTFmYi0z MWI2LTg1MDktOGJkYTBhY2UxYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4rsc3wDGz5kJkGy2zgURYW/niQ80gNY6hbcBFpTB6kh8CfT49EyGz YnDT753M1h8u5P30paSgCNjU3TZN/z0idRb6sJCMVimAg4uS3SoCmbsyPwy+/OxE uHZzjt8RtGNLC79vy/2s5JYCCPksTfQCd0Ring0exvrmC4Elw6eud6xKoW/qiRKb H3ngS6U04snwzskI66iXfE5H5wzQDm2j6dNRSSvRyXRWZMTpskWBgICF7cAM4LXt sO/F+NSCzXQ1y+J/vKsGZ54zoaZozmcMsO0Sxvb35plmxMdW2p3gZcfvdKwDVk28 UopGDgaVd91paDQe6P+BkXzakFlBuSdV -----END CERTIFICATE-----Generated at Sun May 11 08:36:41 2025 by rpki-client