$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa File: 5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa (raw, json) Hash identifier: 3P3XBVoDeLvc0muEdPdqYUBdJ+h/ZTbPuNzIyjnmyLM= Subject key identifier: 62:DC:9F:93:50:94:9A:E3:87:E1:93:8E:1B:6A:43:63:BF:02:EF:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2448055E0CEF58909080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397211 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:48:05:5e:0c:ef:58:90:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d9bda0ef-1bc5-4c0b-b64b-0bf841062a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:6d:3c:2a:c1:8b:be:52:d7:bc:32:fd:56: 93:48:96:12:80:48:97:17:51:a6:16:5d:38:dd:cb: 55:37:6f:41:68:be:b5:63:67:9e:2e:72:5f:78:dc: 47:f7:ab:44:55:1c:c2:d8:9a:29:28:24:63:01:c2: a4:99:3c:36:03:69:14:1e:05:a1:7e:3d:c2:6a:6a: 5b:fe:44:35:8e:cd:f0:bb:d0:d7:9d:85:a5:4a:cb: b3:5f:4e:71:44:6a:bb:4b:c7:65:ae:6e:84:12:78: 00:8a:fa:14:da:e3:94:26:41:6b:c9:22:39:47:c6: f9:8b:fc:cc:0e:2a:2c:a5:ac:0a:ad:b5:c6:48:69: c7:84:57:45:0a:51:d2:fb:ff:45:75:8f:95:b4:a8: d0:f2:f5:1e:ad:cc:0c:96:0d:55:62:b6:65:b8:17: e0:bd:04:59:6b:71:f2:46:45:71:b6:d8:14:f6:4b: f2:a0:5c:99:cc:04:e2:27:ac:4a:f9:60:95:1d:0e: 45:1a:ef:2c:7b:a1:9e:c0:1e:b2:2b:a2:fc:12:6f: 9b:65:bb:aa:c1:fa:ec:f2:0d:c6:4b:a0:01:5f:c5: d3:5a:08:6c:4a:3b:c9:a3:01:d2:35:1b:7b:0b:58: ba:a2:20:68:1e:6e:fb:cb:75:89:cd:fa:9c:70:98: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DC:9F:93:50:94:9A:E3:87:E1:93:8E:1B:6A:43:63:BF:02:EF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3f:84:6b:11:18:e7:b7:06:b0:e4:21:da:31:77:11:cc:2b: b5:da:13:ae:c8:09:c1:ad:1d:3a:28:3b:be:ec:b9:f2:7d:f1: e3:5a:88:fa:18:e0:b5:3f:3f:e5:fc:1f:90:23:c7:13:94:08: b0:66:bb:ad:33:f2:4b:bd:8c:2e:bc:f1:43:02:98:95:e1:68: 4f:9a:22:88:06:ac:53:9c:e7:20:39:c6:91:e7:a5:08:f7:7e: 26:80:08:d4:73:0b:dc:ab:57:37:51:c1:a9:97:8b:99:a6:5a: de:d0:c1:3d:0f:45:1f:f4:74:16:c9:f4:e5:a4:4c:82:15:26: b2:b6:49:ca:f0:ca:ea:de:b3:6d:1d:87:98:7e:53:b3:8f:71: 88:d7:db:f5:f1:3a:3f:de:ca:74:ab:10:48:91:7d:fd:42:dc: 50:2a:9a:83:a9:c7:8e:a7:46:4f:f0:b4:b5:fc:b9:f1:4b:99: 82:85:e3:7f:65:36:3d:5e:5c:d0:1a:2f:6a:90:3e:b9:ff:d1: c2:4a:0d:ea:d2:5e:73:ab:84:d8:ec:f6:23:d4:87:e0:9f:cd: 17:2c:25:15:14:f1:f7:13:df:b8:13:61:d5:0c:30:2b:10:54: a5:8e:a3:d8:c6:ba:b9:fb:ae:a1:37:bf:d3:77:af:27:11:02: 41:5d:31:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiRIBV4M71iQkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDliZGEwZWYtMWJjNS00YzBiLWI2NGItMGJmODQxMDYyYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJJtPCrBi75S17wy/VaTSJYSgEiXF1GmFl04 3ctVN29BaL61Y2eeLnJfeNxH96tEVRzC2JopKCRjAcKkmTw2A2kUHgWhfj3Campb /kQ1js3wu9DXnYWlSsuzX05xRGq7S8dlrm6EEngAivoU2uOUJkFrySI5R8b5i/zM DiospawKrbXGSGnHhFdFClHS+/9FdY+VtKjQ8vUercwMlg1VYrZluBfgvQRZa3Hy RkVxttgU9kvyoFyZzATiJ6xK+WCVHQ5FGu8se6GewB6yK6L8Em+bZbuqwfrs8g3G S6ABX8XTWghsSjvJowHSNRt7C1i6oiBoHm77y3WJzfqccJh1nwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGLcn5NQlJrjh+GTjhtqQ2O/Au+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk1NGM5ZjktOThhMC0z ZmQ3LTlmYTItZWUzODdmYzliMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAiP4RrERjntwaw5CHaMXcRzCu12hOuyAnBrR06KDu+7LnyffHjWoj6 GOC1Pz/l/B+QI8cTlAiwZrutM/JLvYwuvPFDApiV4WhPmiKIBqxTnOcgOcaR56UI 934mgAjUcwvcq1c3UcGpl4uZplre0ME9D0Uf9HQWyfTlpEyCFSaytknK8Mrq3rNt HYeYflOzj3GI19v18To/3sp0qxBIkX39QtxQKpqDqceOp0ZP8LS1/LnxS5mCheN/ ZTY9XlzQGi9qkD65/9HCSg3q0l5zq4TY7PYj1Ifgn80XLCUVFPH3E9+4E2HVDDAr EFSljqPYxrq5+66hN7/Td68nEQJBXTEM -----END CERTIFICATE-----Generated at Sun May 11 05:24:34 2025 by rpki-client