$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa File: 5c395aa6-82d8-305b-882d-70fc9f94aec8.roa (raw, json) Hash identifier: NFBcWozwb7+Yt0rIPLvoYJHXuRVOuc0Fylc5ffyeM5A= Subject key identifier: AF:E2:2D:AF:BE:B4:5C:06:1C:05:52:5F:22:4B:08:5A:69:FC:84:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A25A8EFC41E05E6C12B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396580 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:a8:ef:c4:1e:05:e6:c1:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d76cda3c-7ae8-4ded-bceb-e32bff6725cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:45:99:3b:de:c5:a1:a7:74:b4:f6:a7:d9:40: 5c:48:45:00:a5:ba:b9:e7:7b:1c:6a:2d:2a:66:be: 2c:67:73:12:70:32:8b:0b:1e:e6:f6:be:b6:d8:0d: fe:83:4e:6f:36:2d:2f:fc:90:87:9d:82:b6:53:fb: 3d:08:b4:27:88:ac:cc:7e:5c:cb:20:44:0a:ab:61: e2:a1:bd:6b:9c:7b:67:bf:f4:46:07:4c:12:d6:51: f2:d7:e6:e3:4c:87:87:55:d0:34:57:ef:ca:86:5a: 63:4c:e9:83:ad:69:b8:43:35:a3:9a:12:45:43:26: 15:45:b6:1a:1b:6d:55:3c:b8:a6:81:cc:73:80:45: 24:46:72:bb:0e:a5:30:a9:87:5b:54:1a:23:6e:80: 5a:8d:fd:7a:8f:94:33:db:c2:d2:f0:15:05:53:e1: a3:62:03:3b:de:64:51:a0:03:b1:bd:df:07:9c:1d: 9a:3d:ba:e5:20:76:88:6a:ce:1c:7f:8f:b2:79:c3: 54:3a:20:64:8e:ac:20:01:d9:3b:af:c8:72:be:f1: 5b:b9:bb:27:f3:6f:db:b3:b5:c2:cb:66:2f:c9:12: eb:59:18:a1:29:68:5b:29:48:3f:15:af:ca:f8:b8: 9e:fe:3f:d0:31:81:c4:1d:30:e0:3d:2e:d7:8e:44: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E2:2D:AF:BE:B4:5C:06:1C:05:52:5F:22:4B:08:5A:69:FC:84:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a0:7b:9f:65:72:bc:86:8f:84:b4:15:f0:43:a1:c4:56:d5: 39:11:f1:8a:b3:38:85:23:2e:02:8f:15:32:a8:86:c3:6e:de: f3:39:09:82:d7:10:ac:6a:9d:a7:d2:f7:ab:7c:2b:5e:d9:f3: d2:53:d1:5c:da:a1:bc:b3:c5:c1:06:29:46:e8:ab:5f:31:10: 78:79:25:4c:45:a4:70:57:3e:be:4c:66:7a:c5:1c:13:0f:59: 9c:e9:8d:a6:bc:e1:f7:ac:3e:92:db:27:46:a4:6c:19:ea:95: 0f:5b:de:11:59:7f:cd:c1:f2:bd:58:48:6b:85:17:d1:80:35: 6d:71:98:a6:d8:a3:37:b6:e7:7f:47:25:fa:06:33:ee:45:5b: 2c:e7:4a:b1:41:38:41:61:5e:e3:1a:25:02:8f:00:83:b4:37: f2:8c:e1:cd:01:21:b8:af:e8:ad:ec:f1:08:1a:d1:29:e7:c4: e2:80:25:86:a4:ec:95:1a:0c:ac:42:20:ed:5a:4a:c5:e1:29: 19:af:7c:87:7b:3e:90:c4:98:9c:16:e7:4a:89:e8:63:ff:d9: 47:cd:ee:2a:fe:db:06:8e:a5:76:7c:c7:58:1f:d1:12:fb:d3: 7b:6b:fc:4b:69:f9:a6:00:5a:06:bb:c1:d3:6c:36:b4:75:81: bb:20:cf:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiWo78QeBebBKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDc2Y2RhM2MtN2FlOC00ZGVkLWJjZWItZTMyYmZmNjcyNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUWZO97Foad0tPan2UBcSEUApbq553scai0q Zr4sZ3MScDKLCx7m9r622A3+g05vNi0v/JCHnYK2U/s9CLQniKzMflzLIEQKq2Hi ob1rnHtnv/RGB0wS1lHy1+bjTIeHVdA0V+/KhlpjTOmDrWm4QzWjmhJFQyYVRbYa G21VPLimgcxzgEUkRnK7DqUwqYdbVBojboBajf16j5Qz28LS8BUFU+GjYgM73mRR oAOxvd8HnB2aPbrlIHaIas4cf4+yecNUOiBkjqwgAdk7r8hyvvFbubsn82/bs7XC y2YvyRLrWRihKWhbKUg/Fa/K+Lie/j/QMYHEHTDgPS7XjkR7uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/iLa++tFwGHAVSXyJLCFpp/ISLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMzOTVhYTYtODJkOC0z MDViLTg4MmQtNzBmYzlmOTRhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtoHufZXK8ho+EtBXwQ6HEVtU5EfGKsziFIy4CjxUyqIbDbt7zOQmC 1xCsap2n0verfCte2fPSU9Fc2qG8s8XBBilG6KtfMRB4eSVMRaRwVz6+TGZ6xRwT D1mc6Y2mvOH3rD6S2ydGpGwZ6pUPW94RWX/NwfK9WEhrhRfRgDVtcZim2KM3tud/ RyX6BjPuRVss50qxQThBYV7jGiUCjwCDtDfyjOHNASG4r+it7PEIGtEp58TigCWG pOyVGgysQiDtWkrF4SkZr3yHez6QxJicFudKiehj/9lHze4q/tsGjqV2fMdYH9ES +9N7a/xLafmmAFoGu8HTbDa0dYG7IM/C -----END CERTIFICATE-----Generated at Sun May 11 08:35:24 2025 by rpki-client