$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa File: 8763fe43-355b-3a57-b1a0-786be7d28ab4.roa (raw, json) Hash identifier: KlJ/ovmXWenT5i9AY2hd3OHmuWhOEagzkrxQQIguixw= Subject key identifier: 60:52:81:BD:86:16:A7:9E:29:07:1A:D2:20:6D:05:C4:21:E3:4C:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F99FB59C08AA9B47B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396555 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:99:fb:59:c0:8a:a9:b4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b6526dd2-03c1-4b4e-83e7-5a3960efebf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:3c:23:89:20:3a:83:02:3a:55:e8:1d:47: 2d:92:b2:30:98:72:be:b7:ef:2d:c1:85:e4:79:6e: 77:a3:86:64:ce:14:4d:29:07:f2:c2:00:08:3d:7a: 91:15:77:51:75:6e:09:7a:d1:17:06:57:e1:a1:dd: 09:44:84:80:9e:a7:a5:15:8a:a6:c7:5b:35:ca:11: 94:a3:ef:0a:c7:9d:2d:fa:80:bc:19:1b:3a:dd:89: c3:32:46:13:3b:c2:86:00:90:46:17:c0:26:21:0d: b5:0b:8b:b0:e2:e2:67:19:90:3e:75:6a:a4:83:27: 55:74:46:ae:73:a8:f4:fc:e6:25:c2:ec:9d:d5:0d: ec:e7:1a:74:7b:41:4b:60:43:49:36:7c:83:81:5f: 77:95:e8:e8:27:e5:cf:f8:c2:0d:c9:04:c3:d0:21: 26:b7:b7:da:2c:6f:e6:00:d7:f5:03:47:1c:e5:71: 5b:c4:85:bc:51:e6:c9:e9:28:8c:32:17:c4:9b:07: a8:7d:f2:de:95:43:a6:8c:4f:3f:0e:b3:c3:6f:01: ad:44:57:a9:cb:65:43:46:c1:0a:fb:ed:c9:2c:39: d7:64:5d:12:79:ab:5e:86:c2:52:43:5a:32:a2:31: 8b:c2:78:c3:f1:3b:29:75:73:13:0a:bc:59:ae:8d: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:81:BD:86:16:A7:9E:29:07:1A:D2:20:6D:05:C4:21:E3:4C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:57:39:67:03:d7:85:3e:b1:db:98:46:40:82:35:4f:c7:9e: 9b:f3:f2:de:1a:6f:db:ac:f7:04:9e:32:8b:cb:69:8d:2a:99: 4b:c5:7a:8b:31:2c:c0:f3:15:32:9e:77:1e:aa:d7:f9:6f:38: 3e:12:dd:66:f8:0b:98:d7:06:d8:0f:10:fd:04:a7:5b:5c:da: 9b:d7:17:6f:2b:7e:50:bf:7c:77:b3:2b:b6:ec:f9:93:79:51: 70:31:ef:31:35:b1:96:0f:58:6c:00:de:f4:ba:3d:18:c9:55: d7:a7:e9:ce:30:2b:e5:10:cd:5c:de:59:39:95:39:ab:36:c6: 48:61:47:94:cf:07:72:6a:4e:48:28:45:69:01:73:40:af:e0: d0:7f:44:f4:33:fa:02:e1:41:28:5d:04:23:61:a9:9b:01:5c: 33:93:b7:ac:b9:98:7d:04:c0:c8:4b:60:3f:fa:64:97:00:f0: 17:b5:fc:9f:17:6b:9a:bd:0c:7a:39:6c:c9:0c:b8:c2:64:03: 63:38:7e:cf:cc:c3:0c:86:9e:b4:79:53:66:a9:7d:15:6d:88: a2:e9:cf:fb:fb:79:7b:77:25:63:8d:55:99:86:cb:21:40:a0: 39:4e:4b:dc:4c:16:1c:00:24:3a:a1:d0:a9:47:64:57:23:c8: c7:fc:c2:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh+Z+1nAiqm0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjY1MjZkZDItMDNjMS00YjRlLTgzZTctNWEzOTYwZWZlYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk08I4kgOoMCOlXoHUctkrIwmHK+t+8twYXk eW53o4ZkzhRNKQfywgAIPXqRFXdRdW4JetEXBlfhod0JRISAnqelFYqmx1s1yhGU o+8Kx50t+oC8GRs63YnDMkYTO8KGAJBGF8AmIQ21C4uw4uJnGZA+dWqkgydVdEau c6j0/OYlwuyd1Q3s5xp0e0FLYENJNnyDgV93lejoJ+XP+MINyQTD0CEmt7faLG/m ANf1A0cc5XFbxIW8UebJ6SiMMhfEmweoffLelUOmjE8/DrPDbwGtRFepy2VDRsEK ++3JLDnXZF0SeatehsJSQ1oyojGLwnjD8TspdXMTCrxZro0mCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGBSgb2GFqeeKQca0iBtBcQh40yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc2M2ZlNDMtMzU1Yi0z YTU3LWIxYTAtNzg2YmU3ZDI4YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIVzlnA9eFPrHbmEZAgjVPx56b8/LeGm/brPcEnjKLy2mNKplLxXqL MSzA8xUynnceqtf5bzg+Et1m+AuY1wbYDxD9BKdbXNqb1xdvK35Qv3x3syu27PmT eVFwMe8xNbGWD1hsAN70uj0YyVXXp+nOMCvlEM1c3lk5lTmrNsZIYUeUzwdyak5I KEVpAXNAr+DQf0T0M/oC4UEoXQQjYambAVwzk7esuZh9BMDIS2A/+mSXAPAXtfyf F2uavQx6OWzJDLjCZANjOH7PzMMMhp60eVNmqX0VbYii6c/7+3l7dyVjjVWZhssh QKA5TkvcTBYcACQ6odCpR2RXI8jH/MIZ -----END CERTIFICATE-----Generated at Sun May 11 06:17:38 2025 by rpki-client