$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa File: 79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa (raw, json) Hash identifier: razca+e497LEctC9cnZFdDA8M7vW+Niguv76hj8q5qk= Subject key identifier: 7F:6A:32:71:C5:74:08:B8:38:4D:72:D5:DC:73:9D:FC:B8:86:8F:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A24F23D255B3235AB0A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397195 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:f2:3d:25:5b:32:35:ab:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1a89d52c-1162-45ae-bc2d-f42a1bfd52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:ac:91:01:78:43:e7:6b:69:a5:7c:7e:03: 72:c7:07:15:2e:0b:fb:ff:32:60:13:6e:b1:f3:00: 02:94:22:6e:f7:23:83:1a:a3:ec:61:c7:3d:fa:b2: e4:e8:4a:40:23:be:82:c0:db:45:ce:44:d2:52:ae: 18:82:86:cb:ad:90:9c:f1:dc:33:ae:de:42:c2:9d: e0:51:15:09:8b:3d:92:72:ca:ed:8e:1c:6e:de:d7: da:8b:7a:75:2a:86:cc:35:49:30:0a:9b:45:2c:e6: 95:ee:2b:f2:fd:79:5f:ae:08:b9:c3:f8:ed:e7:e3: e9:44:97:ae:eb:92:47:f5:81:fb:58:1e:73:87:50: 09:5b:9e:bc:c4:71:a9:ca:d5:8f:ad:26:16:fd:35: 3b:17:99:09:58:8f:7c:43:1a:bf:f7:45:38:23:a8: 24:72:35:b2:f9:ec:8b:43:c5:1f:03:99:7d:81:ba: 6c:84:79:21:7a:22:f2:fd:a6:70:18:a6:14:1d:02: 79:01:f9:b1:d8:cb:e3:90:b5:8d:3b:a0:8a:99:ac: 29:5c:82:2f:6d:83:6d:f9:71:3a:04:cb:67:a0:77: 49:7e:bf:83:43:f2:e0:60:c0:f3:e7:b1:f5:72:04: e6:74:bd:7d:85:24:83:e6:16:49:79:0d:5b:9a:ff: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6A:32:71:C5:74:08:B8:38:4D:72:D5:DC:73:9D:FC:B8:86:8F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1d:97:6c:75:ac:79:c3:70:2b:ae:04:9a:a6:cc:44:42:33: d3:8b:08:ba:31:5d:9a:76:b7:f9:ed:cc:a4:cd:b0:2e:e6:6d: 54:f1:32:e4:a2:1b:9b:ae:7a:45:31:78:fd:5e:db:9b:fc:b9: fa:68:b4:11:2a:64:81:75:28:1e:32:fe:71:92:1b:10:a3:c4: b5:d7:95:51:8b:a1:63:9f:67:36:c7:ad:cf:a0:dc:6b:99:6b: 9f:c9:f1:a7:a0:a4:a8:42:68:9d:97:1f:4e:db:e6:46:e4:3e: 51:d0:86:1b:89:f6:3b:9f:e2:d8:bd:ea:96:2f:cb:19:7d:cc: 87:e7:fa:81:0c:8d:42:62:47:8a:d3:44:bd:be:f6:6e:2f:73: f8:f6:66:aa:68:fc:49:18:ce:69:3b:be:2a:f6:05:31:13:6d: ab:3c:13:d2:31:8f:10:99:31:8a:51:4f:4e:ed:88:6d:41:5a: b5:06:67:85:26:12:a3:47:0c:f3:66:80:cb:08:ca:62:2b:17: 14:04:1b:8f:7f:e5:e3:ab:f5:94:fa:a3:be:85:eb:2e:71:a9: c5:fb:70:dc:2a:e3:5a:3c:75:44:1e:be:fb:5c:ae:80:ae:75: 26:14:a1:50:f3:9c:8d:41:cb:2e:06:61:67:a8:17:a2:e1:d8: 9f:4f:7e:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiTyPSVbMjWrCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MWE4OWQ1MmMtMTE2Mi00NWFlLWJjMmQtZjQyYTFiZmQ1MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2WskQF4Q+draaV8fgNyxwcVLgv7/zJgE26x 8wAClCJu9yODGqPsYcc9+rLk6EpAI76CwNtFzkTSUq4YgobLrZCc8dwzrt5Cwp3g URUJiz2Scsrtjhxu3tfai3p1KobMNUkwCptFLOaV7ivy/Xlfrgi5w/jt5+PpRJeu 65JH9YH7WB5zh1AJW568xHGpytWPrSYW/TU7F5kJWI98Qxq/90U4I6gkcjWy+eyL Q8UfA5l9gbpshHkheiLy/aZwGKYUHQJ5Afmx2MvjkLWNO6CKmawpXIIvbYNt+XE6 BMtnoHdJfr+DQ/LgYMDz57H1cgTmdL19hSSD5hZJeQ1bmv+rywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH9qMnHFdAi4OE1y1dxznfy4ho/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzlmZmY2NGEtNDRiNy0z ZmRkLWFhOGMtMzk4YTUzOWY2ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyHZdsdax5w3ArrgSapsxEQjPTiwi6MV2adrf57cykzbAu5m1U8TLk ohubrnpFMXj9Xtub/Ln6aLQRKmSBdSgeMv5xkhsQo8S115VRi6Fjn2c2x63PoNxr mWufyfGnoKSoQmidlx9O2+ZG5D5R0IYbifY7n+LYveqWL8sZfcyH5/qBDI1CYkeK 00S9vvZuL3P49maqaPxJGM5pO74q9gUxE22rPBPSMY8QmTGKUU9O7YhtQVq1BmeF JhKjRwzzZoDLCMpiKxcUBBuPf+Xjq/WU+qO+hesucanF+3DcKuNaPHVEHr77XK6A rnUmFKFQ85yNQcsuBmFnqBei4difT37n -----END CERTIFICATE-----Generated at Sun May 11 05:26:52 2025 by rpki-client