$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa File: 6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa (raw, json) Hash identifier: q/bMczhjoMIJsWVX6JfglCBjbs0qf1qLyZLxLTEbq9w= Subject key identifier: 31:D0:A7:90:B8:C0:E1:5D:E8:51:B0:D9:19:54:90:E3:D4:99:6B:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A202065C4B8F4443BF080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396597 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:20:65:c4:b8:f4:44:3b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d2b50946-d67b-4103-bed5-08da14376a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:a9:8e:d4:f1:6e:bb:68:42:94:09:05:6a: dc:61:98:67:47:61:73:c8:eb:16:84:02:bb:42:87: 9e:79:8f:e6:37:b8:de:6b:b1:f5:49:d6:54:00:84: 2f:1c:26:07:30:19:66:c7:4e:e9:ea:a2:13:a0:5b: c3:ea:a9:4f:e8:89:b2:10:b0:fd:63:7b:06:7e:15: c5:95:c7:7e:9a:4c:2d:8c:b0:21:aa:84:08:4b:1c: 6e:8b:a9:84:8f:c0:6d:9f:ba:10:07:90:4d:70:9c: f9:fa:71:3e:94:ad:70:20:9a:46:0e:8a:3e:36:cd: cb:1a:0d:1b:2f:25:44:8e:07:4d:63:f5:e8:17:9a: 30:59:be:9f:46:c2:5a:95:d3:37:f9:d9:6f:93:f0: ee:f2:17:a6:fc:6e:d2:5a:8c:0f:13:7c:6d:e8:64: 16:c2:57:6c:66:e5:cf:ea:0b:4e:2b:19:16:09:b3: 6a:2a:5e:0c:05:15:d6:7c:3e:c4:d7:1f:ba:59:51: 04:77:29:c6:61:5c:d7:67:4a:4c:38:03:96:7c:cb: 02:0b:67:b4:16:39:99:04:90:3c:04:74:a8:b3:4f: ca:50:94:15:65:c5:9a:67:25:a4:12:b4:6e:e7:10: df:1b:e1:78:2f:15:3d:59:6b:c4:1e:51:8c:82:c0: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:A7:90:B8:C0:E1:5D:E8:51:B0:D9:19:54:90:E3:D4:99:6B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:73:c1:42:a5:f0:d4:6b:15:6b:27:20:ce:b5:6e:24:be:81: 7b:a5:f4:df:16:4d:5d:c4:4b:35:c8:67:0e:8b:fc:38:46:3c: 0e:1c:17:f0:ac:43:7c:ec:b1:e4:bc:e0:97:96:1a:ac:51:65: 32:da:95:d2:4a:89:08:00:27:3b:9f:b7:84:48:27:1d:b9:b0: 71:d6:8b:d0:fd:c3:6a:db:cc:f0:dd:b7:d8:d8:c6:f0:cf:bb: f1:35:8c:29:d9:6c:4b:14:fe:2f:7c:6b:e3:cc:5b:0b:fb:a0: 98:a6:96:bc:67:25:3d:bc:f9:b9:ce:f8:70:b4:a2:28:f9:d6: c3:ef:91:09:d2:c8:df:14:6e:ac:dd:ac:02:42:e2:cb:53:7d: 77:1e:13:ff:ca:5d:7b:15:64:61:2f:12:f0:45:fb:dd:dd:d4: 7a:c4:03:2c:c0:55:3b:7c:60:c7:c1:85:df:77:81:86:c9:83: 60:c5:97:b3:41:fb:07:51:0c:7f:13:5f:f7:96:06:37:8a:ca: 43:73:72:1a:8e:2e:9c:fa:77:57:2f:4e:bd:b3:4c:85:b4:8c: 9a:fd:04:b4:eb:d6:53:75:c4:38:8e:49:d5:e9:fb:18:0c:2b: a9:c8:2a:df:4f:4c:14:17:ae:1b:2a:07:80:b5:fd:b3:c7:f6: 41:10:e7:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiAgZcS49EQ78IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDJiNTA5NDYtZDY3Yi00MTAzLWJlZDUtMDhkYTE0Mzc2YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXmpjtTxbrtoQpQJBWrcYZhnR2FzyOsWhAK7 QoeeeY/mN7jea7H1SdZUAIQvHCYHMBlmx07p6qIToFvD6qlP6ImyELD9Y3sGfhXF lcd+mkwtjLAhqoQISxxui6mEj8Btn7oQB5BNcJz5+nE+lK1wIJpGDoo+Ns3LGg0b LyVEjgdNY/XoF5owWb6fRsJaldM3+dlvk/Du8hem/G7SWowPE3xt6GQWwldsZuXP 6gtOKxkWCbNqKl4MBRXWfD7E1x+6WVEEdynGYVzXZ0pMOAOWfMsCC2e0FjmZBJA8 BHSos0/KUJQVZcWaZyWkErRu5xDfG+F4LxU9WWvEHlGMgsANhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDHQp5C4wOFd6FGw2RlUkOPUmWueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI3MWQzMjItMDhiMS0z MmU4LWE4YjMtZGFiYzFhNGIzM2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANc8FCpfDUaxVrJyDOtW4kvoF7pfTfFk1dxEs1yGcOi/w4RjwOHBfw rEN87LHkvOCXlhqsUWUy2pXSSokIACc7n7eESCcdubBx1ovQ/cNq28zw3bfY2Mbw z7vxNYwp2WxLFP4vfGvjzFsL+6CYppa8ZyU9vPm5zvhwtKIo+dbD75EJ0sjfFG6s 3awCQuLLU313HhP/yl17FWRhLxLwRfvd3dR6xAMswFU7fGDHwYXfd4GGyYNgxZez QfsHUQx/E1/3lgY3ispDc3Iaji6c+ndXL069s0yFtIya/QS069ZTdcQ4jknV6fsY DCupyCrfT0wUF64bKgeAtf2zx/ZBEOf9 -----END CERTIFICATE-----Generated at Sun May 11 05:25:40 2025 by rpki-client