$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa File: 5976b022-9a0f-3266-b2d2-0c6408056bad.roa (raw, json) Hash identifier: TVNr/DQ+lqXgLm+wTJ5i1NJMBJi3gBhsJyDDXRtqHKM= Subject key identifier: C7:A1:DC:C9:CA:A4:E8:A7:90:41:0F:D1:B3:DE:31:10:0C:FB:AE:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1EABF707BC03BBAE4460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396545 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1e:ab:f7:07:bc:03:bb:ae:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d489c336-0cce-483c-b39f-08bc8c332cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:83:3b:9a:29:09:23:08:61:33:6a:8f:ff: 89:40:27:f2:da:b7:0d:2a:b2:f3:4f:b8:87:17:7e: fd:03:91:64:08:07:45:63:53:13:dd:89:87:67:be: d2:4a:85:2a:36:f0:87:5b:4d:03:16:7b:6b:ce:01: 11:e6:98:dc:17:24:fe:96:69:6c:e6:f2:5c:5a:46: e5:0b:b6:5e:b4:5e:90:fc:77:50:34:32:a7:2d:39: 86:82:85:08:2e:9d:af:09:f1:92:c3:6e:2e:9b:20: b2:59:8b:50:42:6a:84:83:cd:6b:07:8c:4e:d8:34: b7:26:1b:d0:93:af:4b:9e:d4:af:d4:db:d8:ac:1c: 9e:49:9a:ed:e9:da:50:e7:d5:05:64:72:76:f6:38: d8:01:b9:0f:06:78:d0:15:d6:df:31:98:77:29:3d: 26:eb:aa:c1:b2:25:a2:54:2d:7c:bb:10:7f:81:ab: ca:80:c2:d5:21:a2:12:84:28:2c:ed:d5:73:70:9d: 48:4a:da:04:8e:27:d4:c3:e5:16:17:f7:9b:41:c4: 6f:99:e3:e6:63:08:c2:0f:5c:11:35:89:08:f5:da: 73:c3:b0:06:d9:c0:2c:14:0d:af:4b:20:79:2b:19: 2e:31:7e:f8:9b:84:d0:3c:31:4f:5f:ee:cb:3d:73: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A1:DC:C9:CA:A4:E8:A7:90:41:0F:D1:B3:DE:31:10:0C:FB:AE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a4:39:dc:65:e2:7c:56:32:79:33:4c:1a:a8:14:68:26:ef: e5:7f:fe:31:fc:5d:65:be:4b:99:99:b7:ee:ae:09:10:af:7e: d4:76:67:b0:a8:a8:ab:cc:d4:32:04:00:26:e8:e7:23:33:87: cf:dd:5d:6e:84:0e:e8:8e:10:02:d2:1d:6e:72:43:d1:9d:09: 48:b6:72:4b:c2:8c:db:27:2a:f7:9b:eb:49:3c:16:92:ef:b1: 31:38:42:38:4d:a9:9a:2f:9c:77:e5:7d:aa:e6:50:c2:0b:b4: ce:49:7a:71:e6:c2:81:f7:44:f5:64:39:50:de:cb:46:82:85: 8a:c7:8e:62:1a:6c:1e:67:c7:23:a9:59:3c:bd:60:2a:7b:90: 15:b1:fb:df:62:96:f0:03:e2:28:30:b1:9a:00:ea:0f:8f:9c: eb:c7:c2:07:7e:09:25:e3:09:27:cf:d3:10:73:98:71:08:43: b2:e5:31:0f:63:91:dc:3f:a5:d0:b8:7e:6c:23:8a:c1:3f:82: 3e:4f:f8:b7:a1:45:7c:64:7a:98:81:9a:ac:ee:a1:05:56:27: ea:98:1e:5c:9d:01:60:37:b2:44:8a:5e:28:54:1a:2a:49:69: 64:3e:ac:26:55:7e:8f:cc:e9:77:97:14:b3:bb:30:c4:cb:34: e1:05:e5:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh6r9we8A7uuRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ4OWMzMzYtMGNjZS00ODNjLWIzOWYtMDhiYzhjMzMyY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnamDO5opCSMIYTNqj/+JQCfy2rcNKrLzT7iH F379A5FkCAdFY1MT3YmHZ77SSoUqNvCHW00DFntrzgER5pjcFyT+lmls5vJcWkbl C7ZetF6Q/HdQNDKnLTmGgoUILp2vCfGSw24umyCyWYtQQmqEg81rB4xO2DS3JhvQ k69LntSv1NvYrByeSZrt6dpQ59UFZHJ29jjYAbkPBnjQFdbfMZh3KT0m66rBsiWi VC18uxB/gavKgMLVIaIShCgs7dVzcJ1IStoEjifUw+UWF/ebQcRvmePmYwjCD1wR NYkI9dpzw7AG2cAsFA2vSyB5KxkuMX74m4TQPDFPX+7LPXMkoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMeh3MnKpOinkEEP0bPeMRAM+67WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk3NmIwMjItOWEwZi0z MjY2LWIyZDItMGM2NDA4MDU2YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJpDncZeJ8VjJ5M0waqBRoJu/lf/4x/F1lvkuZmbfurgkQr37Udmew qKirzNQyBAAm6OcjM4fP3V1uhA7ojhAC0h1uckPRnQlItnJLwozbJyr3m+tJPBaS 77ExOEI4TamaL5x35X2q5lDCC7TOSXpx5sKB90T1ZDlQ3stGgoWKx45iGmweZ8cj qVk8vWAqe5AVsfvfYpbwA+IoMLGaAOoPj5zrx8IHfgkl4wknz9MQc5hxCEOy5TEP Y5HcP6XQuH5sI4rBP4I+T/i3oUV8ZHqYgZqs7qEFVifqmB5cnQFgN7JEil4oVBoq SWlkPqwmVX6PzOl3lxSzuzDEyzThBeWN -----END CERTIFICATE-----Generated at Sun May 11 08:46:47 2025 by rpki-client