$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7d1bca3c-508f-3bf6-ad05-4e8afaa61370.roa File: 7d1bca3c-508f-3bf6-ad05-4e8afaa61370.roa (raw, json) Hash identifier: MiFYqzk9J/jPqplH4zryAKiLkb4JJkfGRoGmiHJJaTM= Subject key identifier: D7:6A:6C:09:9D:B8:AC:A2:FA:09:28:70:75:5B:BC:7E:48:C5:07:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A25FF9FE6583AA1913C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7d1bca3c-508f-3bf6-ad05-4e8afaa61370.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396586 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:ff:9f:e6:58:3a:a1:91:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=36c6f308-699c-4f99-a187-e6229258af89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:e4:16:a7:70:15:33:c6:91:19:2d:eb:97: 27:bd:09:f6:ce:aa:87:bb:27:dd:86:81:4b:5a:5c: 9e:e1:95:d7:13:f5:43:51:d1:2f:6b:28:4c:25:53: 06:70:2c:d7:3b:e8:ec:91:ec:71:16:f9:19:2b:f5: b1:d7:2f:c8:d3:16:2b:7f:f7:3b:72:35:3c:7c:8d: 19:04:37:3a:0d:42:48:bf:d1:24:6e:ae:0f:88:87: fe:b7:d9:df:e8:1c:bb:a3:20:d0:25:fb:8d:1f:ea: 73:b0:21:96:e8:7b:ac:15:8b:14:2e:93:d5:1b:66: 39:8d:88:f9:2b:0a:74:e2:cd:ea:68:73:1c:34:68: ae:28:ce:62:86:60:bc:6a:02:f0:16:1b:4a:24:73: d7:23:ef:67:6f:1d:ca:42:d6:c9:16:5d:65:fc:d6: 68:eb:c9:df:97:a9:6a:b3:60:23:3f:37:8a:ff:96: e7:f2:80:c6:74:f9:06:cd:17:17:db:5f:b6:55:69: 99:18:91:fe:f0:53:f8:4c:ec:08:b3:3e:6d:25:b2: c5:06:ef:59:94:a1:73:0a:ed:98:1e:f9:02:15:e7: 92:66:59:84:3e:79:5f:ae:ce:18:c4:b1:27:08:e0: 8d:e7:63:e7:44:0f:41:29:9d:6b:c6:33:4b:ef:82: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:6C:09:9D:B8:AC:A2:FA:09:28:70:75:5B:BC:7E:48:C5:07:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7d1bca3c-508f-3bf6-ad05-4e8afaa61370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:17:f1:ff:12:ad:91:da:c4:5f:ae:13:6e:34:60:a8:7a:e9: 7a:9f:1d:39:2e:62:8d:f4:0b:ea:c7:67:6d:fd:af:fb:16:46: 33:65:99:2a:5e:fe:57:0a:d3:28:36:39:97:b9:87:c3:06:3f: 3e:90:78:82:43:3e:a2:62:dc:80:d7:3b:8f:50:94:63:c5:f6: 20:56:65:38:c3:a1:f9:d9:26:52:0d:1a:fc:c8:71:1b:db:34: ca:c5:e6:1a:6b:7a:38:0b:2c:ea:ae:16:34:df:c6:4b:29:bc: c5:c8:f3:70:c6:31:af:7d:0a:a1:da:d7:3d:27:44:b6:e3:bb: 44:32:35:0f:09:0b:19:80:c6:27:3f:30:7c:64:c5:07:c3:47: db:f5:4c:3e:79:82:72:b7:d6:4a:f0:05:d6:5d:0b:73:68:e4: 45:78:aa:27:1d:78:d3:48:4a:37:76:53:ba:31:f0:45:cf:c4: 91:3c:8c:9f:d5:d1:fb:a1:be:1a:f0:fc:1d:86:37:e2:a9:a7: 93:17:ba:4c:5a:63:62:dc:b2:44:f1:7c:14:bc:18:da:29:75: 5f:4d:a8:38:3a:df:f8:6e:5e:9a:33:ef:81:5b:40:d9:8f:21: 09:19:b2:37:2f:fb:cd:73:f0:4b:0a:ca:80:65:1d:8e:34:03: a6:fa:1f:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiX/n+ZYOqGRPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MzZjNmYzMDgtNjk5Yy00Zjk5LWExODctZTYyMjkyNThhZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOjkFqdwFTPGkRkt65cnvQn2zqqHuyfdhoFL Wlye4ZXXE/VDUdEvayhMJVMGcCzXO+jskexxFvkZK/Wx1y/I0xYrf/c7cjU8fI0Z BDc6DUJIv9Ekbq4PiIf+t9nf6By7oyDQJfuNH+pzsCGW6HusFYsULpPVG2Y5jYj5 Kwp04s3qaHMcNGiuKM5ihmC8agLwFhtKJHPXI+9nbx3KQtbJFl1l/NZo68nfl6lq s2AjPzeK/5bn8oDGdPkGzRcX21+2VWmZGJH+8FP4TOwIsz5tJbLFBu9ZlKFzCu2Y HvkCFeeSZlmEPnlfrs4YxLEnCOCN52PnRA9BKZ1rxjNL74JHzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNdqbAmduKyi+gkocHVbvH5IxQdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2QxYmNhM2MtNTA4Zi0z YmY2LWFkMDUtNGU4YWZhYTYxMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJF/H/Eq2R2sRfrhNuNGCoeul6nx05LmKN9Avqx2dt/a/7FkYzZZkq Xv5XCtMoNjmXuYfDBj8+kHiCQz6iYtyA1zuPUJRjxfYgVmU4w6H52SZSDRr8yHEb 2zTKxeYaa3o4CyzqrhY038ZLKbzFyPNwxjGvfQqh2tc9J0S247tEMjUPCQsZgMYn PzB8ZMUHw0fb9Uw+eYJyt9ZK8AXWXQtzaORFeKonHXjTSEo3dlO6MfBFz8SRPIyf 1dH7ob4a8PwdhjfiqaeTF7pMWmNi3LJE8XwUvBjaKXVfTag4Ot/4bl6aM++BW0DZ jyEJGbI3L/vNc/BLCsqAZR2ONAOm+h+F -----END CERTIFICATE-----Generated at Sun May 11 05:35:02 2025 by rpki-client