$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa File: 4605a289-a470-365a-9c64-776d74fe8ae3.roa (raw, json) Hash identifier: BbscyoOngR6IUdNJ59pQpXiGgPVtgYCrJdN6MjOmRFU= Subject key identifier: 0D:00:58:6E:12:20:B0:1F:A6:69:BD:63:DD:21:13:25:24:EF:86:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A21ACAAB8CAB5F9C91440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36619 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:ac:aa:b8:ca:b5:f9:c9:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=faa2e046-2173-4c16-9ed1-59d4de539817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fe:d8:28:dd:94:3c:20:1e:58:7d:13:00:12: 5a:cf:3f:34:7d:cc:d7:1f:07:9a:03:2a:dc:b0:53: e8:6f:87:70:24:7a:7d:55:fe:57:5f:3c:64:6e:5c: a6:9f:2e:ee:90:ff:61:49:41:d3:4b:b2:6d:77:e1: 39:b2:24:2c:35:cb:83:7c:c7:d1:ca:15:81:b7:95: 4d:23:b7:cb:64:4d:e2:cb:79:d1:49:77:90:6e:c3: c6:93:be:ae:3d:85:98:83:85:6b:22:5a:6e:d9:50: bd:66:8a:22:39:38:b4:18:e2:c7:eb:06:5a:67:e4: 2a:52:78:97:7b:a6:55:0a:74:cb:74:9e:35:54:e6: b6:03:fd:5f:ae:b9:1c:d6:c6:03:85:f3:7b:01:80: aa:0d:ca:fd:b5:2a:18:d5:47:09:1c:d5:67:68:e4: f6:16:2d:78:a3:d3:0d:e9:7f:3a:07:80:80:e1:21: bc:63:c0:4f:86:30:02:50:af:9a:3d:a9:61:95:cb: 14:e3:c4:c4:4f:b6:7b:71:56:51:4d:48:6e:b4:19: 25:cf:43:f3:4e:7a:f6:1e:3f:2d:0e:5c:42:6a:5e: 3e:65:99:1a:69:ec:d8:a2:43:e8:da:8b:b6:66:7c: 12:35:0d:29:81:ff:bd:4d:66:22:ce:ee:45:c9:2b: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:00:58:6E:12:20:B0:1F:A6:69:BD:63:DD:21:13:25:24:EF:86:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2d:48:fd:99:44:a2:c2:5c:3d:f3:05:ae:8d:bd:e6:e1:95: 3c:78:56:0e:9b:8e:c7:74:a7:77:bf:e3:6e:0c:d3:3b:80:f2: 99:b0:f8:3c:dc:72:a7:d6:16:77:09:a5:e2:9c:d4:09:91:d9: 44:fa:c5:ef:7a:e0:0b:04:82:a5:46:3e:f8:93:7e:c7:95:9b: fb:b7:eb:e3:b6:ff:bc:f2:7f:1b:97:05:98:38:40:fe:42:f5: bd:ac:72:69:e0:da:18:e7:1d:e7:1b:ce:7d:1b:15:6c:26:8d: b9:08:7e:e0:5d:a7:8b:f4:a1:b8:a6:be:71:d7:12:63:34:ee: 8f:ef:cf:0f:df:e0:d3:42:a3:34:b9:1a:29:e5:24:14:5f:e0: 6c:bf:47:8b:ba:88:6c:53:56:b0:8f:7c:7c:cf:e0:d2:bf:14: d9:5f:66:ed:38:98:24:ba:b5:2a:78:20:9d:eb:ba:5a:8c:fc: 2f:7b:8e:5e:b3:de:6d:0f:2d:d0:33:0c:98:17:d7:3a:21:e9: e9:30:3d:22:b4:3b:24:52:fa:a1:f6:02:5d:42:80:2b:7b:f9: bc:1d:13:4a:e6:8f:38:e8:55:f9:0e:23:b1:76:f7:69:3a:b9: 61:e8:d3:ee:e9:be:bf:f7:91:a8:92:22:ae:69:68:c8:bc:bd: fd:8b:79:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiGsqrjKtfnJFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmFhMmUwNDYtMjE3My00YzE2LTllZDEtNTlkNGRlNTM5ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f7YKN2UPCAeWH0TABJazz80fczXHweaAyrc sFPob4dwJHp9Vf5XXzxkblymny7ukP9hSUHTS7Jtd+E5siQsNcuDfMfRyhWBt5VN I7fLZE3iy3nRSXeQbsPGk76uPYWYg4VrIlpu2VC9ZooiOTi0GOLH6wZaZ+QqUniX e6ZVCnTLdJ41VOa2A/1frrkc1sYDhfN7AYCqDcr9tSoY1UcJHNVnaOT2Fi14o9MN 6X86B4CA4SG8Y8BPhjACUK+aPalhlcsU48TET7Z7cVZRTUhutBklz0PzTnr2Hj8t DlxCal4+ZZkaaezYokPo2ou2ZnwSNQ0pgf+9TWYizu5FySvgawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA0AWG4SILAfpmm9Y90hEyUk74aXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYwNWEyODktYTQ3MC0z NjVhLTljNjQtNzc2ZDc0ZmU4YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAELUj9mUSiwlw98wWujb3m4ZU8eFYOm47HdKd3v+NuDNM7gPKZsPg8 3HKn1hZ3CaXinNQJkdlE+sXveuALBIKlRj74k37HlZv7t+vjtv+88n8blwWYOED+ QvW9rHJp4NoY5x3nG859GxVsJo25CH7gXaeL9KG4pr5x1xJjNO6P788P3+DTQqM0 uRop5SQUX+Bsv0eLuohsU1awj3x8z+DSvxTZX2btOJgkurUqeCCd67pajPwve45e s95tDy3QMwyYF9c6IenpMD0itDskUvqh9gJdQoAre/m8HRNK5o846FX5DiOxdvdp Orlh6NPu6b6/95GokiKuaWjIvL39i3nv -----END CERTIFICATE-----Generated at Sun May 11 05:37:29 2025 by rpki-client