$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/767fb55d-1067-3fa0-b26c-a93fe74a56e2.roa File: 767fb55d-1067-3fa0-b26c-a93fe74a56e2.roa (raw, json) Hash identifier: JswD9Z9Szrx4Ru7D5Z5QODC8o5FYnqPUaAsq3jdQnpk= Subject key identifier: 29:A2:1B:B9:88:AC:54:58:8A:D2:87:38:FA:04:80:7E:A8:A3:67:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2093DCD9A331EEAC3440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/767fb55d-1067-3fa0-b26c-a93fe74a56e2.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396605 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:93:dc:d9:a3:31:ee:ac:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=6ba5c3dc-3b03-4d15-a811-ce890d72f7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:c3:70:ee:05:40:e5:2d:af:1e:e5:69:92: 65:ac:28:51:2d:04:b4:e7:53:d1:69:d0:eb:94:a7: 0e:c3:44:88:0f:48:ea:1f:4e:9e:e2:28:fd:ec:28: fe:c5:ee:fd:8c:71:b0:0f:40:f5:9a:22:24:b9:00: c7:21:42:2b:b7:12:0d:5a:32:0f:e7:3c:09:45:6b: 36:5b:68:30:61:7d:fc:0d:40:20:c3:8f:63:f1:40: 24:1e:fe:96:80:eb:41:5a:18:98:43:d4:16:b1:57: 17:fb:74:ef:46:f8:b5:05:22:25:03:d4:1e:6d:a5: c6:43:0f:a1:bb:a8:8a:79:93:db:c5:3c:cd:c0:bf: d9:a3:52:cc:f9:66:9e:c9:aa:02:43:0d:c6:2f:75: 64:82:67:f1:90:ae:a1:ef:b9:fe:8d:3c:00:fc:73: 67:bc:24:37:64:a3:2c:97:29:96:78:4e:fc:d2:96: da:3f:83:f5:56:66:cf:a3:19:b2:cc:8b:66:38:5f: 01:ef:dc:d3:05:b8:a1:ff:0c:25:b5:e5:42:b3:a6: c1:c7:78:45:73:23:92:f4:0f:20:b5:7a:1a:65:35: 5a:a5:a8:f9:82:f6:ca:0c:8f:5e:4e:0b:cb:e8:5b: b4:9d:a4:3c:f2:5e:e7:ce:bc:21:fe:db:b0:5c:f0: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A2:1B:B9:88:AC:54:58:8A:D2:87:38:FA:04:80:7E:A8:A3:67:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/767fb55d-1067-3fa0-b26c-a93fe74a56e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:15:f3:f9:fe:3f:00:9f:ab:85:4b:31:93:42:88:54:1a:63: e1:14:bd:c5:57:a5:c1:5a:dd:3f:67:3c:20:76:ba:0f:c0:d5: b0:67:11:5d:b4:1c:cf:ac:4c:d3:77:1a:22:72:71:52:50:03: c9:e8:c2:cc:ac:76:4d:e7:b4:4a:1b:4d:69:b7:73:e1:8b:9d: 19:d4:26:b7:5b:f1:a1:e9:c1:32:88:ca:5a:18:04:94:de:9b: d7:c8:91:4a:f3:0e:38:11:2f:9b:6e:08:05:57:0a:1d:36:07: 7d:8b:4e:44:5a:a1:97:4c:36:d3:41:60:28:d2:13:d5:08:58: 06:f4:04:90:90:3a:48:88:05:84:89:df:9e:30:a9:6b:25:40: 32:2a:99:c6:22:81:50:3a:e3:a9:f3:d1:15:7b:e5:a5:5c:60: a2:fe:1a:99:ba:ca:97:f1:ca:7d:e9:c9:eb:09:d1:35:f8:99: 4a:7e:48:24:d1:12:ea:0a:7b:57:b6:dc:16:c9:62:09:92:c9: 4e:36:b0:6a:05:b7:53:47:f1:e9:44:f9:79:d0:b7:e5:66:51: 47:f9:c6:79:d1:58:ca:28:08:ff:fd:7e:6f:d6:48:c6:dc:6d: f8:94:32:8e:6c:94:82:d5:70:fd:45:33:d4:2b:d8:0a:6b:47: b4:bb:5a:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiCT3NmjMe6sNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NmJhNWMzZGMtM2IwMy00ZDE1LWE4MTEtY2U4OTBkNzJmN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/DcO4FQOUtrx7laZJlrChRLQS051PRadDr lKcOw0SID0jqH06e4ij97Cj+xe79jHGwD0D1miIkuQDHIUIrtxINWjIP5zwJRWs2 W2gwYX38DUAgw49j8UAkHv6WgOtBWhiYQ9QWsVcX+3TvRvi1BSIlA9QebaXGQw+h u6iKeZPbxTzNwL/Zo1LM+WaeyaoCQw3GL3VkgmfxkK6h77n+jTwA/HNnvCQ3ZKMs lymWeE780pbaP4P1VmbPoxmyzItmOF8B79zTBbih/wwlteVCs6bBx3hFcyOS9A8g tXoaZTVapaj5gvbKDI9eTgvL6Fu0naQ88l7nzrwh/tuwXPAybQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCmiG7mIrFRYitKHOPoEgH6oo2fDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzY3ZmI1NWQtMTA2Ny0z ZmEwLWIyNmMtYTkzZmU3NGE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlFfP5/j8An6uFSzGTQohUGmPhFL3FV6XBWt0/ZzwgdroPwNWwZxFd tBzPrEzTdxoicnFSUAPJ6MLMrHZN57RKG01pt3Phi50Z1Ca3W/Gh6cEyiMpaGASU 3pvXyJFK8w44ES+bbggFVwodNgd9i05EWqGXTDbTQWAo0hPVCFgG9ASQkDpIiAWE id+eMKlrJUAyKpnGIoFQOuOp89EVe+WlXGCi/hqZusqX8cp96cnrCdE1+JlKfkgk 0RLqCntXttwWyWIJkslONrBqBbdTR/HpRPl50LflZlFH+cZ50VjKKAj//X5v1kjG 3G34lDKObJSC1XD9RTPUK9gKa0e0u1qd -----END CERTIFICATE-----Generated at Sun May 11 05:30:42 2025 by rpki-client