$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa File: 5aae1681-a715-398d-93e4-ba01ef68fe79.roa (raw, json) Hash identifier: 0yEtiZVCZ7efw+cx7WGEk59CkduIxHPOoSK9u+jqUlA= Subject key identifier: 14:D0:4B:32:69:D9:3D:31:A4:0F:D6:6C:E1:B7:A9:A1:E7:AE:50:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2147DE1A14EE3C094B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:47:de:1a:14:ee:3c:09:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=201e70a2-cc19-4528-a104-0ca9ad7a5dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:13:53:2f:6b:03:29:a9:9e:9b:67:38:6c:48: c6:70:c9:18:3a:33:60:22:a5:49:8f:27:b4:27:26: 30:ab:8b:c0:10:ed:b9:d8:2e:18:2d:5c:60:bf:61: f5:3b:e0:b0:e9:e0:2b:2e:e8:92:f4:29:a5:f3:2e: 4f:91:c7:d9:36:a7:c1:92:29:01:6d:91:de:6c:5f: 47:d1:ad:31:57:ef:3c:b3:0f:e4:61:2c:f0:b3:7b: f9:6d:a4:68:58:91:07:c4:2a:fe:d8:ac:d8:9a:d2: 3b:51:8e:63:b0:b4:c2:d4:c8:4d:fa:c0:bc:56:8b: 7d:60:e9:07:b6:60:3b:34:67:59:ed:17:05:66:f2: 5d:da:7f:3e:03:88:f9:38:61:36:59:a7:94:93:44: 92:b3:61:c4:14:f6:e4:7e:8b:e3:0d:a6:27:fe:a5: d1:a0:04:db:7f:dd:47:f3:47:1a:06:4a:e1:70:7b: 73:21:bf:4d:54:23:4f:8e:01:09:7e:82:1f:83:5f: 35:44:30:6d:ef:69:72:35:a4:63:52:55:7a:17:5d: 07:d3:1a:46:ab:0d:77:cb:eb:d6:90:20:88:11:88: dd:c3:11:13:06:f5:aa:e1:d2:d5:7e:21:7a:9f:74: 0a:e6:b2:18:a5:44:db:dd:12:eb:94:5e:91:2c:2b: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:4B:32:69:D9:3D:31:A4:0F:D6:6C:E1:B7:A9:A1:E7:AE:50:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7e:2c:7e:18:9f:e0:e2:b2:3b:2e:55:51:fa:7f:27:aa:3e: 1c:e7:bb:b5:d5:9a:4f:aa:09:1c:ee:0c:a5:b2:26:2d:47:4b: 83:fc:af:2e:b7:22:c8:79:fd:13:f6:ae:74:fd:b0:1f:99:c5: da:01:04:0d:94:54:b4:fd:0e:d8:6f:76:b5:09:80:e0:0f:8b: a8:19:3e:26:3b:d3:32:6d:9d:25:88:50:e8:3d:01:69:3a:41: 9d:ff:ae:95:f1:10:3b:9f:0f:e7:b8:d4:5d:d8:87:78:d4:f2: 5f:45:3d:9c:ae:49:7f:f9:8f:27:12:7b:e7:17:48:2f:cd:5b: f5:31:fc:b8:2d:d1:68:cd:56:a6:c8:d5:a3:c6:2c:02:36:cf: 65:b4:95:c9:0a:f9:52:55:e1:ce:34:ba:03:fe:33:07:54:4f: 8b:f3:85:2b:b5:d9:d2:74:77:1d:d3:8a:c4:ed:27:3c:13:95: 27:fe:73:00:15:62:20:8d:84:49:72:47:0c:81:82:a2:7e:2b: 7a:26:e9:15:d9:82:33:87:d7:1c:f4:dd:ed:4d:ac:c7:cc:9a: 9a:5b:17:23:db:72:a5:09:3b:d8:61:f1:cc:44:fa:3c:75:34: e9:82:c7:9f:ed:dc:d9:8a:98:0d:60:1a:e2:db:3b:f1:4d:9b: 47:78:31:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiFH3hoU7jwJS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjAxZTcwYTItY2MxOS00NTI4LWExMDQtMGNhOWFkN2E1ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxNTL2sDKamem2c4bEjGcMkYOjNgIqVJjye0 JyYwq4vAEO252C4YLVxgv2H1O+Cw6eArLuiS9Cml8y5PkcfZNqfBkikBbZHebF9H 0a0xV+88sw/kYSzws3v5baRoWJEHxCr+2KzYmtI7UY5jsLTC1MhN+sC8Vot9YOkH tmA7NGdZ7RcFZvJd2n8+A4j5OGE2WaeUk0SSs2HEFPbkfovjDaYn/qXRoATbf91H 80caBkrhcHtzIb9NVCNPjgEJfoIfg181RDBt72lyNaRjUlV6F10H0xpGqw13y+vW kCCIEYjdwxETBvWq4dLVfiF6n3QK5rIYpUTb3RLrlF6RLCtMhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBTQSzJp2T0xpA/WbOG3qaHnrlBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhZTE2ODEtYTcxNS0z OThkLTkzZTQtYmEwMWVmNjhmZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGfix+GJ/g4rI7LlVR+n8nqj4c57u11ZpPqgkc7gylsiYtR0uD/K8u tyLIef0T9q50/bAfmcXaAQQNlFS0/Q7Yb3a1CYDgD4uoGT4mO9MybZ0liFDoPQFp OkGd/66V8RA7nw/nuNRd2Id41PJfRT2crkl/+Y8nEnvnF0gvzVv1Mfy4LdFozVam yNWjxiwCNs9ltJXJCvlSVeHONLoD/jMHVE+L84UrtdnSdHcd04rE7Sc8E5Un/nMA FWIgjYRJckcMgYKifit6JukV2YIzh9cc9N3tTazHzJqaWxcj23KlCTvYYfHMRPo8 dTTpgsef7dzZipgNYBri2zvxTZtHeDEm -----END CERTIFICATE-----Generated at Sun May 11 06:17:41 2025 by rpki-client