$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa File: 5b8b2999-e481-3499-95c4-43200cd0febc.roa (raw, json) Hash identifier: bmixIZebdN9cSKDXtG5KhNA+qTwskud0sCyz+2Jdx7o= Subject key identifier: 5B:67:BD:4F:4C:0C:48:D0:66:02:09:86:33:28:12:FF:D7:04:E2:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A20113A5C034200DCDD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396600 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:11:3a:5c:03:42:00:dc:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a4eec561-abd5-421f-b987-4cb331b7a9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:ea:3f:3f:2e:21:8a:68:0c:9d:25:0a:d4: c0:6f:f3:df:e5:ef:1e:4e:68:f4:8e:fd:f9:55:68: 13:90:5b:8c:f4:be:4b:88:1a:25:19:a3:25:07:d5: 0e:d4:87:8f:74:be:a2:41:1c:77:45:16:72:97:4f: 23:ff:73:73:2f:90:3b:0a:6c:83:01:ae:37:db:26: cd:2e:38:a2:fc:0a:f5:9e:56:cc:4a:40:30:db:42: e5:43:1a:4f:92:61:e8:8c:7e:6c:9e:ff:dc:ce:f9: dc:49:6f:33:eb:b9:11:95:ca:0a:71:24:48:e6:66: a7:fb:0c:40:b6:17:66:f5:18:96:9c:bd:1d:89:7d: 1b:ef:50:e2:fd:af:71:56:e4:e8:c3:51:f2:72:f4: 1c:80:c6:6d:48:7d:21:d6:5c:1c:cd:41:2c:6c:b1: 12:35:4c:ba:58:d7:d0:90:23:c1:7f:66:3a:cb:86: 65:b9:07:94:c3:f6:3b:ef:ca:3e:00:a0:43:62:f2: c7:18:9b:14:9e:fe:ca:a3:2a:3b:68:15:f2:30:d3: 79:b2:e7:25:c8:44:f2:8a:35:ce:18:39:b4:91:95: 80:02:93:79:87:8c:0f:e5:ed:70:9f:05:e9:d6:0d: c7:f5:00:0e:c7:27:6e:cf:f7:72:23:8a:b2:78:be: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:BD:4F:4C:0C:48:D0:66:02:09:86:33:28:12:FF:D7:04:E2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:71:22:74:25:3c:02:f6:c6:c9:de:ec:ff:96:1d:13:f9:13: 92:1c:88:bd:e1:06:3b:5f:97:f5:a9:41:6a:81:79:ad:a7:cc: f9:6d:4a:cf:c3:4d:7d:3d:56:93:fe:44:46:6e:96:4e:f6:54: dd:c3:be:41:9b:05:53:4e:ee:45:da:66:6b:49:00:41:9e:b5: 25:2a:d1:f0:ca:a9:b3:1c:c1:5f:62:a6:d0:82:9e:58:d7:86: 92:fb:20:3e:3f:a6:d1:c9:e5:b5:cc:58:07:8c:c9:4c:0d:b9: 7d:e9:14:b2:bd:9e:64:de:64:66:53:b4:87:14:3a:7c:80:0a: bf:04:50:ca:b0:e7:b0:ae:15:b4:89:22:17:36:ae:f3:0e:0e: 15:a8:66:ca:a4:b8:15:b1:7c:c7:d7:02:79:77:f9:f9:5f:89: 08:67:ee:fa:3b:b9:9a:c3:c3:9b:73:85:60:66:22:90:77:35: e5:d2:8d:a9:b6:5f:98:f6:d2:99:3c:3c:9b:8f:69:7f:18:68: 68:4e:46:62:9d:f8:5d:f2:6c:59:ca:d5:ff:c0:d2:10:27:04: ec:55:84:f6:90:86:58:2a:5d:71:c5:fa:10:be:98:e3:72:d0: 3d:78:58:6f:4d:33:de:46:3f:88:83:f2:34:5a:9f:f0:82:f5: c6:4b:ce:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiAROlwDQgDc3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTRlZWM1NjEtYWJkNS00MjFmLWI5ODctNGNiMzMxYjdhOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltrqPz8uIYpoDJ0lCtTAb/Pf5e8eTmj0jv35 VWgTkFuM9L5LiBolGaMlB9UO1IePdL6iQRx3RRZyl08j/3NzL5A7CmyDAa432ybN Ljii/Ar1nlbMSkAw20LlQxpPkmHojH5snv/czvncSW8z67kRlcoKcSRI5man+wxA thdm9RiWnL0diX0b71Di/a9xVuTow1HycvQcgMZtSH0h1lwczUEsbLESNUy6WNfQ kCPBf2Y6y4ZluQeUw/Y778o+AKBDYvLHGJsUnv7Koyo7aBXyMNN5suclyETyijXO GDm0kZWAApN5h4wP5e1wnwXp1g3H9QAOxyduz/dyI4qyeL7Y/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFtnvU9MDEjQZgIJhjMoEv/XBOKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI4YjI5OTktZTQ4MS0z NDk5LTk1YzQtNDMyMDBjZDBmZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9cSJ0JTwC9sbJ3uz/lh0T+ROSHIi94QY7X5f1qUFqgXmtp8z5bUrP w019PVaT/kRGbpZO9lTdw75BmwVTTu5F2mZrSQBBnrUlKtHwyqmzHMFfYqbQgp5Y 14aS+yA+P6bRyeW1zFgHjMlMDbl96RSyvZ5k3mRmU7SHFDp8gAq/BFDKsOewrhW0 iSIXNq7zDg4VqGbKpLgVsXzH1wJ5d/n5X4kIZ+76O7maw8Obc4VgZiKQdzXl0o2p tl+Y9tKZPDybj2l/GGhoTkZinfhd8mxZytX/wNIQJwTsVYT2kIZYKl1xxfoQvpjj ctA9eFhvTTPeRj+Ig/I0Wp/wgvXGS85M -----END CERTIFICATE-----Generated at Sun May 11 08:45:18 2025 by rpki-client