$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: obakSmS6yWeYbmnQDDQvYFayEOjM+mLefmNIsy/0jso= Subject key identifier: 2D:3A:FC:6C:BD:38:00:D9:5A:A6:22:68:A0:DC:2B:29:27:1B:53:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A245E403E061969A4C480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:5e:40:3e:06:19:69:a4:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9d18e3d6-f85e-49bf-8e58-8f2a66f5ab5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:22:35:fd:27:aa:3b:c6:e3:b7:fa:eb:c2: 2b:57:03:25:3b:e0:53:f5:13:98:97:7c:e7:8c:3c: 3c:f0:b2:b6:34:10:3e:aa:75:de:d3:de:e7:7e:3d: 0f:33:4f:de:e8:b4:d7:43:52:aa:68:65:02:c9:eb: 52:23:46:f9:08:72:da:38:4f:dd:44:eb:18:eb:8e: 49:ff:d3:8f:2c:88:41:75:8c:27:09:60:d5:da:28: e9:4e:9b:4b:5e:39:d5:dd:31:e2:22:db:05:83:e9: 25:7e:fc:8e:f8:8e:49:e6:ac:23:dc:df:00:15:c0: 03:c8:c1:96:f1:73:1c:07:3e:0b:8b:eb:b2:56:bd: b0:6d:a5:3a:4c:54:69:c5:42:36:de:88:75:32:2e: a7:04:49:83:f4:a8:8b:f8:de:87:0e:59:d4:d9:db: 7e:35:89:9c:30:bd:df:38:55:91:bd:25:8a:82:1f: 2a:f5:3a:38:e8:46:4f:a1:94:2c:65:22:0c:97:cf: 1f:5b:f2:6a:24:86:d9:39:87:db:70:a0:69:c6:2d: b1:1c:74:3e:33:44:64:5d:c2:21:63:65:d3:42:d5: 76:c8:3c:ce:cd:2f:a4:5a:0c:ad:a5:c7:78:d8:a4: ab:f0:43:46:f5:84:39:ec:24:7f:00:1d:0e:bb:e5: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3A:FC:6C:BD:38:00:D9:5A:A6:22:68:A0:DC:2B:29:27:1B:53:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:24:47:21:e1:ed:7e:7c:e5:e6:93:80:88:4c:e6:07:35: e7:fe:87:99:9f:ab:1a:da:4c:19:5c:57:98:7b:c5:c6:d4:c0: 6f:16:f8:01:14:76:df:97:60:a8:15:12:6e:30:9d:61:75:f6: a3:b7:55:79:51:7b:c3:fe:8f:be:94:74:ef:ab:b0:da:d2:ef: dc:04:a6:ec:42:2a:c1:98:56:ba:e9:89:2c:10:06:4a:36:6a: 84:c9:c2:cb:57:6a:af:93:2e:fa:4c:f7:0c:b9:d7:73:d2:ed: dd:dc:e5:be:ff:b7:c7:c5:4a:5c:50:c7:53:37:81:e5:12:55: 73:8f:ca:fe:f1:e4:24:03:87:41:6a:0b:46:28:71:be:46:74: 79:9c:1a:0a:af:97:ce:0c:b1:d4:e2:4a:70:57:d6:c0:e8:07: d9:7b:fd:23:e6:4d:a2:16:bd:76:7a:21:b9:b1:ad:c3:8a:81: fd:95:1e:0d:15:c2:30:70:6f:55:9d:b5:d5:94:98:5c:47:ee: 48:03:cc:19:02:80:88:de:92:da:09:cc:35:dd:ff:dd:8e:1f: ce:df:f7:93:c7:24:49:fa:c5:3f:9a:d1:54:29:b4:74:23:f9: bf:99:aa:3c:d2:ab:ce:bc:cc:1d:a8:66:0a:96:81:97:50:65: 19:cd:3f:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiReQD4GGWmkxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OWQxOGUzZDYtZjg1ZS00OWJmLThlNTgtOGYyYTY2ZjVhYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueYiNf0nqjvG47f668IrVwMlO+BT9ROYl3zn jDw88LK2NBA+qnXe097nfj0PM0/e6LTXQ1KqaGUCyetSI0b5CHLaOE/dROsY645J /9OPLIhBdYwnCWDV2ijpTptLXjnV3THiItsFg+klfvyO+I5J5qwj3N8AFcADyMGW 8XMcBz4Li+uyVr2wbaU6TFRpxUI23oh1Mi6nBEmD9KiL+N6HDlnU2dt+NYmcML3f OFWRvSWKgh8q9To46EZPoZQsZSIMl88fW/JqJIbZOYfbcKBpxi2xHHQ+M0RkXcIh Y2XTQtV2yDzOzS+kWgytpcd42KSr8ENG9YQ57CR/AB0Ou+VKGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC06/Gy9OADZWqYiaKDcKyknG1PTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOVyRHIeHtfnzl5pOAiEzmBzXn/oeZn6sa2kwZXFeYe8XG1MBvFvgB FHbfl2CoFRJuMJ1hdfajt1V5UXvD/o++lHTvq7Da0u/cBKbsQirBmFa66YksEAZK NmqEycLLV2qvky76TPcMuddz0u3d3OW+/7fHxUpcUMdTN4HlElVzj8r+8eQkA4dB agtGKHG+RnR5nBoKr5fODLHU4kpwV9bA6AfZe/0j5k2iFr12eiG5sa3DioH9lR4N FcIwcG9VnbXVlJhcR+5IA8wZAoCI3pLaCcw13f/djh/O3/eTxyRJ+sU/mtFUKbR0 I/m/mao80qvOvMwdqGYKloGXUGUZzT99 -----END CERTIFICATE-----Generated at Sun May 11 08:30:51 2025 by rpki-client