$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa File: a34e8751-aef8-3899-a3e5-7cb0ed375def.roa (raw, json) Hash identifier: X8xwFCIwskFGiih4owBhOTIsdqtmFmnRh9O4ovKnJKE= Subject key identifier: 8B:82:83:E8:C2:DF:AA:02:5E:B5:7A:19:65:71:5D:0E:31:93:8E:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F89AD1DE166161436E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396552 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:89:ad:1d:e1:66:16:14:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a190b067-9ed8-483c-b76d-5877a244b716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:ed:4b:a5:d4:5f:74:64:ba:42:1e:6a:15: 27:06:66:7d:8f:23:26:83:90:79:78:c2:0e:08:87: c2:9a:ad:b1:98:4d:85:a6:2c:6f:bc:d2:98:07:c0: 51:a7:c4:4b:bc:a4:c2:34:37:bc:71:49:51:23:18: 4a:d5:32:fc:18:43:aa:9f:72:57:f1:31:fb:da:cd: cd:6a:c8:b6:8f:73:8a:3b:69:2a:b4:d5:a1:51:dd: ea:e2:16:36:b2:dc:42:b5:5f:56:5f:7b:82:ab:e6: c0:b5:45:08:21:e3:38:ee:34:90:c0:d4:29:00:fe: 8e:a5:5b:25:fb:53:20:1f:ae:01:2c:c7:ad:78:cf: 58:1b:7e:ac:91:7e:78:df:c4:c9:51:61:91:bf:1e: b1:e1:80:d7:f6:b0:ac:04:7a:cf:22:38:48:9c:9a: ac:15:33:73:d5:c8:19:92:2c:0f:8c:dc:7b:f0:2d: 33:6f:c3:78:c8:79:14:10:7e:ce:84:52:d5:11:0c: 29:4c:02:43:8f:aa:e2:de:7b:62:2f:27:cd:3e:6b: 95:29:d6:0c:33:0a:2e:b5:c6:52:68:0f:66:fe:10: 31:fe:94:97:32:80:82:c4:d0:7c:81:af:e7:dd:68: 6a:31:07:40:7d:3c:a5:d2:de:23:c3:f3:dd:a5:fb: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:83:E8:C2:DF:AA:02:5E:B5:7A:19:65:71:5D:0E:31:93:8E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7c:07:17:0d:cf:cb:4f:16:0b:ea:af:db:14:26:6c:45:96: 8c:62:4f:38:e9:2a:d0:a7:1d:67:23:c4:2e:27:0c:39:6e:a6: 5e:41:7a:db:24:b6:14:46:4a:d5:ca:c6:78:b4:f1:a8:3a:96: a4:fc:9d:34:2f:f1:79:63:ab:f0:5e:05:6a:d5:ab:d9:5b:39: cb:23:09:98:02:36:f1:2c:26:de:2d:39:a9:88:3c:93:2e:96: 8b:2f:a5:d0:7e:29:ba:70:ea:4d:77:73:6d:9b:93:d0:91:71: f3:0d:0b:84:c1:c5:1b:13:08:4c:21:db:46:48:ee:7b:62:69: 39:ba:91:9b:ab:10:bc:80:0f:55:c2:87:28:ba:11:f6:5b:28: 16:5f:3f:ca:75:aa:1c:9a:a5:94:42:ee:81:f2:5f:7c:07:c8: 5b:85:3b:48:8a:71:5b:cc:a0:cc:68:44:a1:21:e1:4a:6c:fc: 5b:85:e2:5b:f2:77:95:4d:ee:b0:6f:07:68:89:c4:fa:81:be: fc:d1:5f:82:2e:ca:6e:6f:b2:d2:49:61:2a:a4:ac:d5:a1:af: a7:f3:30:3b:f5:ff:b7:dd:3b:2c:8c:4a:7a:32:e7:d8:3e:62: 04:81:fb:f2:13:b4:4c:70:df:31:49:03:c4:6b:72:16:77:64: 2c:52:a5:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh+JrR3hZhYUNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTE5MGIwNjctOWVkOC00ODNjLWI3NmQtNTg3N2EyNDRiNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvbtS6XUX3RkukIeahUnBmZ9jyMmg5B5eMIO CIfCmq2xmE2FpixvvNKYB8BRp8RLvKTCNDe8cUlRIxhK1TL8GEOqn3JX8TH72s3N asi2j3OKO2kqtNWhUd3q4hY2stxCtV9WX3uCq+bAtUUIIeM47jSQwNQpAP6OpVsl +1MgH64BLMeteM9YG36skX5438TJUWGRvx6x4YDX9rCsBHrPIjhInJqsFTNz1cgZ kiwPjNx78C0zb8N4yHkUEH7OhFLVEQwpTAJDj6ri3ntiLyfNPmuVKdYMMwoutcZS aA9m/hAx/pSXMoCCxNB8ga/n3WhqMQdAfTyl0t4jw/PdpfuDHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIuCg+jC36oCXrV6GWVxXQ4xk45yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTM0ZTg3NTEtYWVmOC0z ODk5LWEzZTUtN2NiMGVkMzc1ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKfAcXDc/LTxYL6q/bFCZsRZaMYk846SrQpx1nI8QuJww5bqZeQXrb JLYURkrVysZ4tPGoOpak/J00L/F5Y6vwXgVq1avZWznLIwmYAjbxLCbeLTmpiDyT LpaLL6XQfim6cOpNd3Ntm5PQkXHzDQuEwcUbEwhMIdtGSO57Ymk5upGbqxC8gA9V wocouhH2WygWXz/KdaocmqWUQu6B8l98B8hbhTtIinFbzKDMaEShIeFKbPxbheJb 8neVTe6wbwdoicT6gb780V+CLspub7LSSWEqpKzVoa+n8zA79f+33TssjEp6MufY PmIEgfvyE7RMcN8xSQPEa3IWd2QsUqVf -----END CERTIFICATE-----Generated at Sun May 11 05:23:40 2025 by rpki-client