$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa File: 98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa (raw, json) Hash identifier: 6T8QOvtSwnLthDIxY+0LrknCdc5xowRNeLLOLd22POI= Subject key identifier: 9E:46:16:06:AC:2A:05:72:68:92:4B:81:05:FB:5C:E0:A6:DB:C2:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F2AD311AD65F0069680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 19836 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:2a:d3:11:ad:65:f0:06:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=591d0c8b-ac98-4147-bdd4-0fc2417f3646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:76:27:47:e5:2c:69:48:8c:7b:be:b9:9b: 15:21:ba:13:29:45:43:f2:95:b9:be:3f:c4:1a:db: ec:9e:62:78:2b:eb:41:2e:8d:f7:d8:91:0b:b9:78: 00:67:70:e0:f1:f1:68:8c:af:85:37:05:d0:72:0a: 21:16:ba:1f:f9:42:8b:01:e7:b0:f6:70:35:7b:ea: c3:7d:7c:6b:f5:b5:7c:a1:0d:db:54:b6:8f:5e:18: 6d:15:43:2f:07:db:79:7c:1a:8d:06:55:dd:2b:11: 2b:2f:2c:2c:b9:25:7a:19:f5:6e:39:8d:1a:1a:65: fd:4c:e7:5a:c6:b9:6e:fe:fc:d3:7c:24:5f:cf:85: 07:ea:e2:85:55:92:ed:23:6d:54:1a:fc:d3:18:2b: ac:2b:c4:07:46:50:60:d5:92:4b:11:13:33:57:ec: 4a:a6:27:a0:97:5d:66:4a:89:20:ad:ef:c1:df:a2: d5:76:d3:85:6d:36:42:64:47:2f:ef:d7:2f:1c:8a: 7f:bf:f0:d2:db:eb:00:84:c7:c3:a7:03:a0:25:a1: ba:af:0d:57:62:3c:9b:c4:7a:1a:ff:82:d4:ca:91: 99:be:8a:35:b7:7d:8e:63:56:a0:7e:71:61:27:b1: 07:8b:df:db:e0:36:59:e3:2b:14:c6:e8:0d:b6:87: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:46:16:06:AC:2A:05:72:68:92:4B:81:05:FB:5C:E0:A6:DB:C2:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:49:5c:da:d0:ef:c5:f9:38:36:a4:e4:43:60:b3:d5:0e:a9: 9e:f0:44:78:3f:47:3c:7c:e9:0a:d2:ba:ec:85:12:5b:53:66: 74:ee:df:2a:a3:13:98:a7:f5:24:ef:96:9a:c1:9b:df:ed:f7: 0d:b4:77:08:97:bc:03:aa:55:4f:56:f4:9a:3b:0e:44:5c:b0: b8:ea:3f:0c:b5:d6:2e:ee:7b:2c:83:94:a9:66:1e:8e:1a:ed: 89:48:de:47:61:7a:a6:b5:df:15:2d:dc:2a:bd:c4:5d:73:59: 2e:91:69:bb:fb:97:10:24:bc:fb:c7:bb:a8:bc:f3:11:9e:f2: 5f:31:1a:2c:da:5b:65:35:a0:14:ac:59:8e:4b:e2:db:10:59: 3d:4e:73:07:9c:45:ce:f4:c2:9f:53:68:a0:cd:f4:98:2d:50: 46:a3:59:ca:24:9f:6b:4e:e6:53:3c:4e:71:04:76:49:ba:cc: 6a:a4:49:87:09:d9:ee:ba:b5:bb:43:67:fe:85:6a:f7:a7:f9: b0:46:50:4f:cf:fd:c9:ce:4d:65:2a:d7:de:f4:ec:7e:72:c7: e7:82:62:12:08:43:3c:06:c7:71:7b:ba:c6:31:0c:de:b6:69: 4d:e2:9f:2f:0e:eb:d5:65:3e:e4:cc:66:bd:d2:63:0c:94:d0: 86:c1:d0:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh8q0xGtZfAGloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTkxZDBjOGItYWM5OC00MTQ3LWJkZDQtMGZjMjQxN2YzNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4N2J0flLGlIjHu+uZsVIboTKUVD8pW5vj/E GtvsnmJ4K+tBLo332JELuXgAZ3Dg8fFojK+FNwXQcgohFrof+UKLAeew9nA1e+rD fXxr9bV8oQ3bVLaPXhhtFUMvB9t5fBqNBlXdKxErLywsuSV6GfVuOY0aGmX9TOda xrlu/vzTfCRfz4UH6uKFVZLtI21UGvzTGCusK8QHRlBg1ZJLERMzV+xKpiegl11m Sokgre/B36LVdtOFbTZCZEcv79cvHIp/v/DS2+sAhMfDpwOgJaG6rw1XYjybxHoa /4LUypGZvoo1t32OY1agfnFhJ7EHi9/b4DZZ4ysUxugNtofVVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ5GFgasKgVyaJJLgQX7XOCm28JlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOThkMDdhNWMtY2U1Zi0z YzNjLWExMzctMDI0MzY0MGI5OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBSVza0O/F+Tg2pORDYLPVDqme8ER4P0c8fOkK0rrshRJbU2Z07t8q oxOYp/Uk75aawZvf7fcNtHcIl7wDqlVPVvSaOw5EXLC46j8MtdYu7nssg5SpZh6O Gu2JSN5HYXqmtd8VLdwqvcRdc1kukWm7+5cQJLz7x7uovPMRnvJfMRos2ltlNaAU rFmOS+LbEFk9TnMHnEXO9MKfU2igzfSYLVBGo1nKJJ9rTuZTPE5xBHZJusxqpEmH CdnuurW7Q2f+hWr3p/mwRlBPz/3Jzk1lKtfe9Ox+csfngmISCEM8Bsdxe7rGMQze tmlN4p8vDuvVZT7kzGa90mMMlNCGwdCF -----END CERTIFICATE-----Generated at Sun May 11 05:25:55 2025 by rpki-client