$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa File: 536cc683-07f6-38b3-b079-b2c0fd050c3b.roa (raw, json) Hash identifier: Bkbo0w93KG39LZRhqyNQthWR+W4FsNT3NVBzrybWquo= Subject key identifier: 79:3A:EC:A2:5D:FF:07:52:29:2A:C5:C0:C5:EF:56:E9:9B:AC:B4:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A213798920BA444440D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396571 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:37:98:92:0b:a4:44:44:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=2d110d2b-7527-4a63-9ed7-99d0b9895fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:21:22:91:74:07:eb:ab:c0:02:3f:ba:76: b7:bb:eb:8f:e1:94:a1:23:83:85:c5:f0:01:1c:86: 11:d1:b2:b2:11:67:57:62:c9:a8:76:8f:93:35:73: 08:dd:d7:82:c9:21:24:c5:42:df:08:a0:47:1f:86: 17:f7:eb:f3:c7:88:b9:b5:4a:50:de:bb:51:16:23: 21:7a:e7:9e:f9:ac:8e:6c:a5:ae:2e:72:34:2e:db: 89:97:33:77:a5:79:4e:b5:ab:b2:8f:43:9f:89:d5: 2f:19:4a:6f:fe:7f:a5:6f:3a:7f:2f:99:b1:f5:1d: 42:3c:44:43:d0:75:30:61:4e:2b:ab:51:6b:ab:43: 78:a6:e5:13:10:22:f9:02:3b:7f:c7:79:3c:e6:80: 1e:a6:f9:4a:52:c1:7f:98:70:21:24:6e:27:3b:b3: 7e:a4:12:1a:d5:c8:e0:be:98:8a:70:45:9d:f2:30: 44:79:75:09:44:2d:23:42:e3:ac:3d:85:d0:8a:ae: ef:50:b7:6e:2d:15:58:76:65:c4:d6:a8:fa:d7:e0: 34:b7:18:dd:01:d4:47:f4:f0:22:f3:6e:7d:d6:d6: dc:02:32:25:d0:63:8d:82:22:cd:5b:36:fd:aa:23: 3c:48:9a:e4:b2:03:eb:04:4e:d6:03:b3:59:ac:7a: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:EC:A2:5D:FF:07:52:29:2A:C5:C0:C5:EF:56:E9:9B:AC:B4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3d:d8:5b:e6:cc:6f:13:4b:86:b7:e3:a3:15:ab:c2:41:7d: d3:16:e2:9a:cd:d6:cf:be:dc:85:37:3b:a5:3a:1b:4b:7e:f8: 85:0a:92:0f:45:b0:c4:6d:f3:6e:58:a3:cf:e9:71:c4:ad:e7: 4f:60:35:6d:4d:76:de:6a:27:01:9e:c4:9e:1e:e5:b9:40:04: e6:3a:b1:5d:b1:a0:f5:ef:2d:ab:86:13:6d:ff:86:8e:84:66: 87:a8:b4:a3:6f:3d:ab:20:28:60:17:75:30:06:04:f9:14:47: 80:b4:3a:d2:c5:87:9c:ca:e0:5c:e4:1b:c0:24:e9:df:7b:d6: ba:9b:f8:51:2d:c4:19:71:9a:35:ba:58:a1:65:03:f9:38:0e: 75:2f:ef:8b:da:29:51:ee:3d:ff:6c:46:bc:4f:6e:5f:c7:77: a9:5f:8b:2e:2c:ce:06:29:8a:39:9f:c5:f4:5d:e9:d5:1e:f5: 83:3b:fa:25:1c:8d:b6:9f:63:b2:d4:24:de:b5:62:53:8b:2a: 26:a4:11:5f:06:6e:1c:23:62:80:83:f1:ba:61:36:73:d2:ae: 74:18:8a:ff:ff:76:a4:61:cc:11:75:0f:66:87:aa:e2:2d:28: 58:5f:75:9e:02:84:06:54:5f:f5:30:dc:8b:b1:05:82:79:0d: 44:86:0f:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiE3mJILpEREDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MmQxMTBkMmItNzUyNy00YTYzLTllZDctOTlkMGI5ODk1ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/shIpF0B+urwAI/una3u+uP4ZShI4OFxfAB HIYR0bKyEWdXYsmodo+TNXMI3deCySEkxULfCKBHH4YX9+vzx4i5tUpQ3rtRFiMh euee+ayObKWuLnI0LtuJlzN3pXlOtauyj0OfidUvGUpv/n+lbzp/L5mx9R1CPERD 0HUwYU4rq1Frq0N4puUTECL5Ajt/x3k85oAepvlKUsF/mHAhJG4nO7N+pBIa1cjg vpiKcEWd8jBEeXUJRC0jQuOsPYXQiq7vULduLRVYdmXE1qj61+A0txjdAdRH9PAi 82591tbcAjIl0GONgiLNWzb9qiM8SJrksgPrBE7WA7NZrHq5VQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHk67KJd/wdSKSrFwMXvVumbrLTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM2Y2M2ODMtMDdmNi0z OGIzLWIwNzktYjJjMGZkMDUwYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPPdhb5sxvE0uGt+OjFavCQX3TFuKazdbPvtyFNzulOhtLfviFCpIP RbDEbfNuWKPP6XHEredPYDVtTXbeaicBnsSeHuW5QATmOrFdsaD17y2rhhNt/4aO hGaHqLSjbz2rIChgF3UwBgT5FEeAtDrSxYecyuBc5BvAJOnfe9a6m/hRLcQZcZo1 ulihZQP5OA51L++L2ilR7j3/bEa8T25fx3epX4suLM4GKYo5n8X0XenVHvWDO/ol HI22n2Oy1CTetWJTiyompBFfBm4cI2KAg/G6YTZz0q50GIr//3akYcwRdQ9mh6ri LShYX3WeAoQGVF/1MNyLsQWCeQ1Ehg9o -----END CERTIFICATE-----Generated at Sun May 11 08:46:28 2025 by rpki-client