$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa File: 5aa49181-7067-32b3-a458-81e58ac1d399.roa (raw, json) Hash identifier: pwPtaR7u0qxOllljBn5pkJfZ8scyfbHhsKs4eNIORgw= Subject key identifier: 1F:EA:FB:A4:30:38:3C:92:F1:52:75:31:2D:2D:D9:C2:CC:C3:AB:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FE18929899E4B2F5000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396554 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:e1:89:29:89:9e:4b:2f:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=c11077d8-6684-414b-bdf3-18119ee5f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:fd:fa:40:2a:71:71:73:2e:4c:a4:29:92: f1:7f:ac:7c:d2:58:41:d4:c0:79:40:3f:d7:db:32: 40:86:b0:83:20:3b:24:71:6e:be:67:c0:e2:4b:a8: 9f:c1:27:3d:6d:7a:ae:a7:63:f1:1d:a0:e2:3b:70: 23:c1:cf:63:6c:90:d3:bb:00:2a:99:2c:5d:70:b1: 53:07:c5:66:26:2c:aa:f6:28:18:49:06:46:a3:59: 10:5e:fa:a0:2f:53:5f:77:99:1d:e9:db:4f:20:d3: db:e3:82:eb:43:72:4d:fe:f5:c4:20:42:48:c7:0f: 76:55:ce:02:be:64:6d:18:68:d0:8d:90:f6:38:99: 87:8d:cc:78:7d:46:30:91:7a:2a:07:59:46:02:70: 4a:2c:e9:1a:ed:e4:f6:36:d9:a6:f1:68:e5:9e:de: fe:c9:e2:ff:c2:fa:9e:5c:91:15:37:fe:35:d8:3a: 61:c5:4a:33:d4:e9:67:2c:96:dc:eb:a7:0b:3c:c7: 99:1f:cb:fe:e6:ce:23:ce:60:e1:c6:ea:1b:84:17: d5:6c:fc:ef:98:f0:4e:d1:61:4f:db:57:1c:8e:6e: c9:70:d0:fc:5f:8c:fc:74:e5:db:f7:b6:c6:81:9c: bc:58:2f:bc:40:b1:55:23:dd:ff:e9:d4:f8:40:59: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EA:FB:A4:30:38:3C:92:F1:52:75:31:2D:2D:D9:C2:CC:C3:AB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ce:90:1b:16:8d:d4:dc:2a:88:4f:c7:99:e4:67:b5:88:e9: 1c:40:9a:1a:95:df:9f:c7:cf:de:5d:b8:da:6a:9d:34:0c:20: 2e:b6:45:0a:89:77:0b:1f:69:2f:57:1c:d5:f2:03:c6:60:bc: de:2f:79:b0:9e:fa:b9:18:4f:2a:93:40:ac:4d:d5:42:1f:41: 03:bf:91:da:e0:be:71:fb:0f:29:7e:2b:8c:a0:a6:09:bd:85: 73:ab:e2:67:ee:b1:36:8e:7b:ab:fc:d5:f5:9f:ad:ad:97:75: 8a:67:91:78:c1:e6:fd:e6:cf:e2:aa:8e:2c:02:5e:23:89:80: 70:9a:5a:35:42:70:5f:57:59:12:2f:85:25:52:0f:93:b8:1c: 1a:ea:eb:82:fb:d5:df:13:ff:9b:f0:18:52:29:1b:e1:e0:40: 4e:d6:d8:17:52:fa:a5:56:68:ce:ae:21:2a:53:86:bf:ac:ec: 10:c2:a3:bb:63:09:49:a7:39:d7:ac:41:3e:2d:07:4e:df:22: 9a:e8:1c:09:d3:58:11:0e:1d:c3:b8:61:bb:8b:44:d9:e8:98: f9:2c:c7:13:45:cc:4e:60:bb:b6:7a:59:98:e6:2d:fe:3d:5a: fa:d7:89:3c:90:6f:e2:56:4e:f6:b0:13:a8:fa:5a:45:09:35: d9:19:de:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh/hiSmJnksvUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YzExMDc3ZDgtNjY4NC00MTRiLWJkZjMtMTgxMTllZTVmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a39+kAqcXFzLkykKZLxf6x80lhB1MB5QD/X 2zJAhrCDIDskcW6+Z8DiS6ifwSc9bXqup2PxHaDiO3Ajwc9jbJDTuwAqmSxdcLFT B8VmJiyq9igYSQZGo1kQXvqgL1Nfd5kd6dtPINPb44LrQ3JN/vXEIEJIxw92Vc4C vmRtGGjQjZD2OJmHjcx4fUYwkXoqB1lGAnBKLOka7eT2Ntmm8Wjlnt7+yeL/wvqe XJEVN/412DphxUoz1OlnLJbc66cLPMeZH8v+5s4jzmDhxuobhBfVbPzvmPBO0WFP 21ccjm7JcND8X4z8dOXb97bGgZy8WC+8QLFVI93/6dT4QFnWmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB/q+6QwODyS8VJ1MS0t2cLMw6vGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDkxODEtNzA2Ny0z MmIzLWE0NTgtODFlNThhYzFkMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPzpAbFo3U3CqIT8eZ5Ge1iOkcQJoald+fx8/eXbjaap00DCAutkUK iXcLH2kvVxzV8gPGYLzeL3mwnvq5GE8qk0CsTdVCH0EDv5Ha4L5x+w8pfiuMoKYJ vYVzq+Jn7rE2jnur/NX1n62tl3WKZ5F4web95s/iqo4sAl4jiYBwmlo1QnBfV1kS L4UlUg+TuBwa6uuC+9XfE/+b8BhSKRvh4EBO1tgXUvqlVmjOriEqU4a/rOwQwqO7 YwlJpznXrEE+LQdO3yKa6BwJ01gRDh3DuGG7i0TZ6Jj5LMcTRcxOYLu2elmY5i3+ PVr614k8kG/iVk72sBOo+lpFCTXZGd7w -----END CERTIFICATE-----Generated at Sun May 11 05:37:35 2025 by rpki-client