$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa File: 58cd867b-ae53-310e-947f-54ef858e3f7a.roa (raw, json) Hash identifier: djco66YbKWm11PAneaU6N899EzomFAJVX7Vj7H7e3iw= Subject key identifier: D8:49:A3:57:12:F1:AF:53:98:A7:87:F7:58:97:D7:91:47:AF:E8:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A212A91518DFA79BD8E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396589 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:2a:91:51:8d:fa:79:bd:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=37cbd24d-ca0c-4ccb-976c-022e1e7e7c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:37:4d:de:94:80:38:38:d0:f4:fb:d7:b7: a4:ab:08:2e:14:3e:df:14:b5:14:ee:f5:1f:c2:98: 1b:fc:35:e9:c9:1b:72:be:59:85:79:3e:88:4b:fe: b8:00:e6:b3:13:8b:64:c7:07:6a:e9:2e:1e:9c:27: db:64:cf:ea:31:e5:06:37:ed:af:a0:52:ef:08:39: 13:ae:b1:0d:4e:1a:77:83:70:a3:bb:8c:e1:9c:a1: 1c:8a:67:b1:16:6a:08:68:b7:6b:06:9b:6a:d9:8e: 0d:32:0d:39:b2:44:dc:3f:67:f0:65:b2:9e:51:eb: d8:98:4d:b1:8b:f4:c6:45:a3:bf:a2:5c:29:a3:20: 8b:bc:d3:a9:ce:eb:07:dd:f7:10:17:bc:fd:21:67: bd:77:7b:2d:57:d3:c5:1c:a4:fc:f1:9d:7f:c6:30: 97:92:64:8f:40:18:0d:6d:30:56:2a:fd:49:81:d1: 1d:7f:59:89:3d:b9:f3:ab:9f:e4:b3:8c:14:1a:60: 2d:a1:7d:97:da:48:24:ac:9b:8b:6c:8f:62:c1:d4: dd:1e:93:5e:ae:b4:4f:79:4b:53:68:46:65:fb:4b: 5e:70:b7:e4:84:92:28:aa:74:cf:6d:d6:71:e8:5a: 96:76:8d:ea:ab:4b:88:da:ad:ed:00:84:f3:22:cb: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:49:A3:57:12:F1:AF:53:98:A7:87:F7:58:97:D7:91:47:AF:E8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ca:7b:ce:75:02:2b:dc:a4:c5:2c:fa:af:19:52:62:12:f0: a6:6f:79:7a:9c:e9:62:85:e6:1d:e2:83:2e:11:45:52:84:f4: 7b:59:cd:56:23:0a:56:37:46:2f:14:b3:4d:c2:e7:28:e5:79: 29:ad:3d:b7:34:c3:c3:f0:08:c5:15:97:bd:c0:99:59:2e:8e: 0d:85:42:c0:0a:0e:c6:42:88:b5:d1:06:03:c3:02:fb:43:0e: 74:e2:b9:23:ab:f4:02:1a:79:bf:08:eb:d5:51:59:00:44:f7: db:c6:96:de:31:7b:9e:06:27:ba:f1:77:6f:cc:8c:ea:c0:e2: ae:2a:4c:12:63:1d:24:0d:22:c2:20:b1:e9:10:d0:e9:e2:d2: d1:87:9b:a2:1e:c1:b7:5b:ec:de:2e:99:5a:84:f0:fa:c0:52: ab:db:4b:f4:91:f5:b1:2d:a1:2a:2b:ec:5b:64:06:66:75:6f: b0:28:af:37:da:b2:9a:aa:2b:c2:3c:3f:4f:66:af:33:1c:45: ee:b7:86:cd:1e:3a:5d:6c:ec:7b:fe:c3:1c:82:a6:eb:45:00: 4a:79:4e:d0:f4:bb:4e:e1:6d:30:25:49:2f:d8:5c:eb:2b:14: 9e:bb:f4:80:b1:d7:78:3c:91:82:e8:90:a6:cb:ee:42:67:20: 90:4a:c3:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiEqkVGN+nm9jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MzdjYmQyNGQtY2EwYy00Y2NiLTk3NmMtMDIyZTFlN2U3YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Q3Td6UgDg40PT717ekqwguFD7fFLUU7vUf wpgb/DXpyRtyvlmFeT6IS/64AOazE4tkxwdq6S4enCfbZM/qMeUGN+2voFLvCDkT rrENThp3g3Cju4zhnKEcimexFmoIaLdrBptq2Y4NMg05skTcP2fwZbKeUevYmE2x i/TGRaO/olwpoyCLvNOpzusH3fcQF7z9IWe9d3stV9PFHKT88Z1/xjCXkmSPQBgN bTBWKv1JgdEdf1mJPbnzq5/ks4wUGmAtoX2X2kgkrJuLbI9iwdTdHpNerrRPeUtT aEZl+0tecLfkhJIoqnTPbdZx6FqWdo3qq0uI2q3tAITzIsvErwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNhJo1cS8a9TmKeH91iX15FHr+hpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThjZDg2N2ItYWU1My0z MTBlLTk0N2YtNTRlZjg1OGUzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuynvOdQIr3KTFLPqvGVJiEvCmb3l6nOliheYd4oMuEUVShPR7Wc1W IwpWN0YvFLNNwuco5XkprT23NMPD8AjFFZe9wJlZLo4NhULACg7GQoi10QYDwwL7 Qw504rkjq/QCGnm/COvVUVkARPfbxpbeMXueBie68XdvzIzqwOKuKkwSYx0kDSLC ILHpENDp4tLRh5uiHsG3W+zeLplahPD6wFKr20v0kfWxLaEqK+xbZAZmdW+wKK83 2rKaqivCPD9PZq8zHEXut4bNHjpdbOx7/sMcgqbrRQBKeU7Q9LtO4W0wJUkv2Fzr KxSeu/SAsdd4PJGC6JCmy+5CZyCQSsPp -----END CERTIFICATE-----Generated at Sun May 11 05:38:40 2025 by rpki-client