$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa File: 78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa (raw, json) Hash identifier: iKxkbrxWkL3Y2wl/SxS3gVgzY3TjFFMS3bgGWDrXkyw= Subject key identifier: 4F:64:5C:59:72:25:B3:26:07:2E:8C:93:85:F8:1C:35:1F:BC:FA:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FAA3C7BD491D4B48300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396826 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:aa:3c:7b:d4:91:d4:b4:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=fa10e969-d02f-48ec-a3f4-aa66e43d9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:4b:b7:1f:4a:c0:16:bc:07:fa:44:2c:52: 1a:63:39:a2:af:6b:55:0a:13:0f:33:e1:86:17:79: 6d:00:df:af:b9:d7:6e:36:7c:98:f6:d7:52:31:58: 11:9c:17:62:f7:32:64:8d:32:d0:b4:2b:a9:4d:4d: 93:f2:bc:60:d6:f7:72:ca:1b:0d:a1:34:1f:89:8f: 9c:f7:e9:a1:22:86:f6:e5:b6:ae:79:95:58:a6:dc: 11:02:e8:31:03:06:a8:e5:4b:d2:95:d2:e8:08:87: 78:18:b1:12:41:a6:9e:e7:e5:11:fd:f7:65:60:a7: 07:70:d1:9b:79:8c:d4:b2:7c:8f:14:45:3c:99:48: 31:83:5a:ab:1e:ca:98:2f:c8:92:36:27:33:ab:29: 84:c6:e6:9b:cc:5e:21:c3:fc:26:0c:58:07:20:e7: 36:65:ed:0f:e8:16:ba:46:dd:6a:8c:82:8f:62:72: 8f:e7:e8:60:63:26:39:01:42:d8:6a:48:5e:e6:2b: bf:e1:fc:8d:85:98:15:86:b8:9b:7b:a2:11:29:27: 88:3a:f6:c4:bf:97:08:c9:ce:be:20:30:ef:68:ec: 62:7e:66:cb:4a:99:2b:87:07:41:82:0d:cd:71:b9: 96:67:79:4c:ed:24:28:63:72:54:6d:c3:c9:d6:7c: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:64:5C:59:72:25:B3:26:07:2E:8C:93:85:F8:1C:35:1F:BC:FA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3b:20:8f:44:35:4f:10:9a:33:d0:b2:50:bc:57:2e:d2:94: 25:b5:b2:0c:c8:71:bd:a9:eb:10:69:ac:f7:73:a3:cd:7a:9e: 18:0d:28:02:3d:a5:10:dc:55:f1:14:45:79:1f:d3:11:e0:49: 26:81:fd:54:e0:a5:d5:3a:b2:79:31:e6:52:d3:3f:61:92:52: db:fb:20:36:92:82:34:3c:be:d1:59:08:ac:79:6e:0c:12:60: a7:0e:b1:21:cf:49:73:4e:e8:90:f1:81:c0:91:28:6e:f3:18: 49:56:76:16:7e:f4:28:ed:bf:ed:22:0e:8b:bc:98:ec:45:70: a0:43:2b:ed:75:e9:0e:e2:3c:4a:78:cb:13:0c:0c:da:20:d8: f1:0a:cb:43:e8:7d:20:0d:2a:ac:5c:2c:f5:ee:7c:40:a5:09: d2:9f:50:4e:02:6c:b5:90:e2:19:12:c2:32:74:dd:19:ed:6e: 63:fe:ff:9f:23:f2:8b:66:61:c0:c8:6e:01:3d:05:ce:77:93: bf:1e:a9:45:2f:14:65:12:d9:82:73:09:72:35:c1:d6:6d:5e: 9c:a0:1b:60:e6:17:3c:88:f7:12:af:89:d4:1b:8c:3e:d4:f7: 72:00:e9:2e:c7:d6:8a:2e:21:05:35:6a:c1:02:84:a9:d1:ea: 0a:23:fb:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh+qPHvUkdS0gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmExMGU5NjktZDAyZi00OGVjLWEzZjQtYWE2NmU0M2Q5YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HRLtx9KwBa8B/pELFIaYzmir2tVChMPM+GG F3ltAN+vudduNnyY9tdSMVgRnBdi9zJkjTLQtCupTU2T8rxg1vdyyhsNoTQfiY+c 9+mhIob25baueZVYptwRAugxAwao5UvSldLoCId4GLESQaae5+UR/fdlYKcHcNGb eYzUsnyPFEU8mUgxg1qrHsqYL8iSNiczqymExuabzF4hw/wmDFgHIOc2Ze0P6Ba6 Rt1qjIKPYnKP5+hgYyY5AULYakhe5iu/4fyNhZgVhribe6IRKSeIOvbEv5cIyc6+ IDDvaOxifmbLSpkrhwdBgg3NcbmWZ3lM7SQoY3JUbcPJ1nzx+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9kXFlyJbMmBy6Mk4X4HDUfvPodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzgyMzhhOGQtYTU1Yy0z YmQyLTg4MWEtYzEwYWI1N2Y0ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfOyCPRDVPEJoz0LJQvFcu0pQltbIMyHG9qesQaaz3c6PNep4YDSgC PaUQ3FXxFEV5H9MR4Ekmgf1U4KXVOrJ5MeZS0z9hklLb+yA2koI0PL7RWQiseW4M EmCnDrEhz0lzTuiQ8YHAkShu8xhJVnYWfvQo7b/tIg6LvJjsRXCgQyvtdekO4jxK eMsTDAzaINjxCstD6H0gDSqsXCz17nxApQnSn1BOAmy1kOIZEsIydN0Z7W5j/v+f I/KLZmHAyG4BPQXOd5O/HqlFLxRlEtmCcwlyNcHWbV6coBtg5hc8iPcSr4nUG4w+ 1PdyAOkux9aKLiEFNWrBAoSp0eoKI/tc -----END CERTIFICATE-----Generated at Sun May 11 08:13:11 2025 by rpki-client