$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/484b88c1-18d9-3ea7-9635-0630218a83f4.roa File: 484b88c1-18d9-3ea7-9635-0630218a83f4.roa (raw, json) Hash identifier: BmmjKEncLqe++uIaAX6a7LxjA+8NH4xCzMJ6KKY1iKo= Subject key identifier: 8F:E3:6D:16:B0:C0:C3:53:2C:E6:D0:FD:DD:F4:95:82:CC:1E:1D:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2510994730FDD2DD1300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/484b88c1-18d9-3ea7-9635-0630218a83f4.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396570 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:10:99:47:30:fd:d2:dd:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3b91254e-6475-42c0-9f7d-c72af6811623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:6e:9d:2e:89:58:68:af:5c:f2:44:10:bc: a4:db:28:68:17:14:27:88:85:bd:c4:8a:44:b2:dc: 67:d8:30:6b:32:9a:d9:62:94:98:49:ad:40:21:1b: c5:ca:44:6a:e4:a7:8f:99:18:b7:08:e2:f7:71:49: b6:32:44:27:05:00:07:ea:a2:2a:63:d1:7e:54:fd: 8e:e2:91:63:cf:4e:8a:03:9b:a9:3c:49:e0:aa:37: fd:28:e4:65:dc:6d:99:02:1d:53:38:55:60:90:30: 47:3e:8c:b3:95:dc:a6:53:4f:67:43:bd:84:1b:79: 06:71:8b:47:31:87:45:05:2d:91:f2:58:bb:09:d7: 78:29:9e:41:0d:35:01:2e:9d:46:24:a7:d8:1e:19: 1a:a5:b2:82:96:89:e8:e4:c1:0a:25:dd:eb:af:f2: 8f:ea:9f:5c:34:ad:85:bd:cd:76:ca:13:2a:65:17: 96:8e:4f:92:1e:39:20:19:80:69:2f:0d:07:25:18: 77:80:a4:6c:82:33:70:c0:14:21:e3:de:17:ed:b1: a0:e5:85:89:31:63:ec:a8:b8:bd:5f:10:52:b8:35: 44:10:65:e4:c5:ca:5e:29:6d:05:d7:dd:cf:0a:7c: ca:31:a4:2b:7f:32:d8:8a:92:3c:a6:97:de:2f:77: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:6D:16:B0:C0:C3:53:2C:E6:D0:FD:DD:F4:95:82:CC:1E:1D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/484b88c1-18d9-3ea7-9635-0630218a83f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0f:3a:02:b6:26:64:51:b4:72:94:fe:9c:8c:fb:72:fd:b8: b7:7b:28:4a:74:da:2c:fd:75:a2:89:00:1e:4a:cf:33:30:d5: ab:65:c2:1e:33:6c:ff:f9:63:d9:2c:d9:8e:ef:9b:60:49:18: d8:c2:9f:0e:27:a5:4b:8d:2d:ee:dc:42:47:4c:2e:86:37:41: f7:36:aa:bb:33:b8:1d:93:b7:db:0e:35:2c:ab:f9:1a:8e:99: a9:7d:be:06:9f:a9:79:2a:ee:28:7d:29:33:dd:d8:e0:59:e1: e5:70:a8:90:7a:54:b4:b2:48:bf:a1:97:31:ee:88:4e:73:d9: b0:08:a9:ed:01:92:54:60:2d:62:1e:26:07:b1:c1:99:53:6b: 0e:93:b1:7c:99:79:29:f4:a4:be:97:8d:0a:b1:e8:ef:9a:27: 02:6b:16:7d:43:83:ef:f0:fa:68:d4:e2:c4:a3:ec:1f:16:dd: d5:10:68:e3:e2:af:d8:7c:c5:5a:e8:e9:4a:e5:f0:a1:e8:66: 0f:6c:6f:6b:cc:1b:75:b7:ba:89:b9:54:7a:1c:09:55:98:81: ea:ba:e2:e9:84:83:a9:f0:0b:bd:58:f2:71:38:8a:dd:c8:59: 89:64:6f:55:18:25:b3:f3:c7:d7:46:a4:3f:1b:59:30:04:b9: b7:51:1c:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiUQmUcw/dLdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2I5MTI1NGUtNjQ3NS00MmMwLTlmN2QtYzcyYWY2ODExNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG1unS6JWGivXPJEELyk2yhoFxQniIW9xIpE stxn2DBrMprZYpSYSa1AIRvFykRq5KePmRi3COL3cUm2MkQnBQAH6qIqY9F+VP2O 4pFjz06KA5upPEngqjf9KORl3G2ZAh1TOFVgkDBHPoyzldymU09nQ72EG3kGcYtH MYdFBS2R8li7Cdd4KZ5BDTUBLp1GJKfYHhkapbKClono5MEKJd3rr/KP6p9cNK2F vc12yhMqZReWjk+SHjkgGYBpLw0HJRh3gKRsgjNwwBQh494X7bGg5YWJMWPsqLi9 XxBSuDVEEGXkxcpeKW0F193PCnzKMaQrfzLYipI8ppfeL3c8AwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI/jbRawwMNTLObQ/d30lYLMHh21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDg0Yjg4YzEtMThkOS0z ZWE3LTk2MzUtMDYzMDIxOGE4M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLDzoCtiZkUbRylP6cjPty/bi3eyhKdNos/XWiiQAeSs8zMNWrZcIe M2z/+WPZLNmO75tgSRjYwp8OJ6VLjS3u3EJHTC6GN0H3Nqq7M7gdk7fbDjUsq/ka jpmpfb4Gn6l5Ku4ofSkz3djgWeHlcKiQelS0ski/oZcx7ohOc9mwCKntAZJUYC1i HiYHscGZU2sOk7F8mXkp9KS+l40KsejvmicCaxZ9Q4Pv8Ppo1OLEo+wfFt3VEGjj 4q/YfMVa6OlK5fCh6GYPbG9rzBt1t7qJuVR6HAlVmIHquuLphIOp8Au9WPJxOIrd yFmJZG9VGCWz88fXRqQ/G1kwBLm3URxU -----END CERTIFICATE-----Generated at Sun May 11 06:07:00 2025 by rpki-client