$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa File: 9de4b45f-637e-3366-a619-7bf6276dd3d8.roa (raw, json) Hash identifier: nlXDej/M0SSNWYFufPbN57VvVTK0QCO4JBMtk/CKqYA= Subject key identifier: 92:5C:53:E9:44:4E:A0:A3:A0:C3:B1:F0:22:7F:76:5A:5A:A9:7F:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A216E4EBFC6028269FD56 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396610 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:6e:4e:bf:c6:02:82:69:fd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=8874b67c-8613-4254-a0cf-274c604a27f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:66:41:9b:c4:ba:fb:8f:fd:09:13:03:fe: 05:d7:3b:00:64:83:c3:68:cd:f0:b3:cb:9d:78:81: f5:c8:e4:61:0e:e1:a9:96:fe:75:f4:56:68:6b:47: cb:ae:e0:54:95:86:b0:73:85:d1:bf:53:1a:f8:2e: d0:be:38:df:b9:aa:97:2e:1f:4d:a4:66:48:a8:97: d6:09:d5:8f:d7:fa:cf:7a:af:e5:85:90:55:06:98: d6:08:a5:4a:a2:9e:aa:69:9e:1e:c3:28:12:1f:20: f2:cd:cf:97:6b:39:ee:cf:d3:10:dd:24:42:60:61: b7:63:39:5d:e2:69:a7:07:9c:47:c6:24:ca:39:1b: 84:aa:c1:b4:c1:a5:83:5b:63:df:b0:f5:5d:be:5b: 8d:c3:43:1b:d3:8a:8c:84:7e:61:a5:c8:8e:0f:9a: ca:f9:80:bc:3b:01:94:4e:db:9d:b0:43:83:1c:0b: 02:a4:fe:92:0e:a4:db:c0:ff:28:12:7e:c5:07:8a: 9f:03:8a:4f:7c:0f:e1:9f:f7:58:8a:90:34:3a:55: 2c:9a:ff:40:8f:16:e6:2e:a6:05:94:dc:55:1c:39: d9:17:83:db:b6:68:b2:d2:57:71:95:fe:01:49:88: 84:ef:7c:9f:da:7e:69:53:c2:51:4d:d9:5e:52:9c: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:53:E9:44:4E:A0:A3:A0:C3:B1:F0:22:7F:76:5A:5A:A9:7F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b7:c5:55:0a:50:a0:94:70:9c:95:f7:64:ce:e9:e7:c0:3e: 1d:58:ad:5a:bf:81:a9:67:de:0f:1c:a9:19:72:73:5b:c8:ac: 0c:7f:73:97:a6:5a:52:a4:37:12:05:07:5d:f8:10:fd:5c:40: 09:94:59:d6:f2:9a:24:cd:fd:da:0c:79:cc:d6:a5:25:58:c1: 3f:8c:af:29:fa:16:01:0d:c9:0d:f0:32:01:21:f4:88:17:65: 4b:2e:8f:03:a8:2e:a2:93:f1:69:99:9c:00:c3:d3:a5:c0:d7: af:d1:ac:ce:78:be:4f:8c:78:04:b6:dd:ac:d3:3b:67:6e:90: 78:fd:b6:9f:e1:c6:d4:26:5e:7f:1c:5f:b4:14:18:90:24:c5: e5:3d:f7:ae:b0:2f:8d:67:7a:dc:5d:2a:59:92:b1:1c:ff:8a: 9f:88:fa:c7:a4:62:11:58:3f:e0:b2:92:32:47:6a:46:67:b4: db:17:76:98:54:9a:f7:31:22:f1:12:0c:86:23:46:e8:20:8a: bf:6a:ad:cc:74:0d:b6:e2:45:ff:97:6a:c1:1c:37:8a:2d:95: a1:2b:31:68:9f:bc:fa:1b:70:34:5e:08:ff:8f:6e:a5:ab:9d: d2:15:a8:d3:11:c6:8d:ea:85:74:a5:f6:a1:56:64:57:f0:b7: 80:e3:f3:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiFuTr/GAoJp/VYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ODg3NGI2N2MtODYxMy00MjU0LWEwY2YtMjc0YzYwNGEyN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DFmQZvEuvuP/QkTA/4F1zsAZIPDaM3ws8ud eIH1yORhDuGplv519FZoa0fLruBUlYawc4XRv1Ma+C7QvjjfuaqXLh9NpGZIqJfW CdWP1/rPeq/lhZBVBpjWCKVKop6qaZ4ewygSHyDyzc+Xaznuz9MQ3SRCYGG3Yzld 4mmnB5xHxiTKORuEqsG0waWDW2PfsPVdvluNw0Mb04qMhH5hpciOD5rK+YC8OwGU TtudsEODHAsCpP6SDqTbwP8oEn7FB4qfA4pPfA/hn/dYipA0OlUsmv9AjxbmLqYF lNxVHDnZF4Pbtmiy0ldxlf4BSYiE73yf2n5pU8JRTdleUpxklwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJJcU+lETqCjoMOx8CJ/dlpaqX9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWRlNGI0NWYtNjM3ZS0z MzY2LWE2MTktN2JmNjI3NmRkM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+t8VVClCglHCclfdkzunnwD4dWK1av4GpZ94PHKkZcnNbyKwMf3OX plpSpDcSBQdd+BD9XEAJlFnW8pokzf3aDHnM1qUlWME/jK8p+hYBDckN8DIBIfSI F2VLLo8DqC6ik/FpmZwAw9OlwNev0azOeL5PjHgEtt2s0ztnbpB4/baf4cbUJl5/ HF+0FBiQJMXlPfeusC+NZ3rcXSpZkrEc/4qfiPrHpGIRWD/gspIyR2pGZ7TbF3aY VJr3MSLxEgyGI0boIIq/aq3MdA224kX/l2rBHDeKLZWhKzFon7z6G3A0Xgj/j26l q53SFajTEcaN6oV0pfahVmRX8LeA4/Ml -----END CERTIFICATE-----Generated at Sun May 11 05:36:22 2025 by rpki-client