$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: eHxPkBEXSoKW9gI1AUPQE5fxI8af2tiU0Oe88aKaWWs= Subject key identifier: FD:04:82:57:FB:9B:C1:53:48:B5:44:D3:DB:42:AB:96:A0:1E:F8:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A24E4A5B59219E11F83A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:e4:a5:b5:92:19:e1:1f:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1244f79c-f7dc-4a3c-8fb0-07b5d9d6ca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:2a:20:96:77:1e:6b:88:19:5a:84:2d:8e: ac:23:72:22:8f:c1:7d:f3:99:c0:80:74:79:b5:fb: 08:14:a0:0c:81:d5:d2:f0:2e:b3:6d:40:de:2f:fb: 95:70:8b:32:92:82:f0:44:fb:f9:14:f9:3f:f0:4c: 46:0d:24:cf:e4:d0:8e:43:59:91:77:52:83:69:32: 04:f9:be:67:b5:80:7d:85:ff:d8:ab:15:7d:c8:c1: a2:1f:af:71:7d:9a:7a:49:2e:1f:ae:a9:22:1a:9b: 7c:65:66:25:97:b4:59:f9:20:75:e4:4b:ec:da:27: aa:71:af:a4:4d:21:c6:4c:ae:9a:3c:28:79:c9:04: a5:2a:53:ff:de:af:3d:f8:1b:74:80:b6:ee:31:81: d7:69:fe:ff:27:af:f7:35:70:34:bf:95:7c:4a:4f: 39:8a:7f:1b:07:0a:d8:54:d7:c4:da:04:65:08:26: d2:5f:b4:25:e5:90:e7:ca:49:27:66:4f:6d:2c:7a: 15:7c:2a:34:cc:36:69:fb:86:54:eb:82:83:6d:ee: ae:e5:54:83:52:b2:77:a2:4f:0b:aa:88:48:1c:e6: 24:bd:cd:b7:95:16:d4:2d:db:b7:1d:f0:08:c0:8c: 8a:ce:5b:c4:5d:e0:6e:4d:8c:58:cd:e6:64:7a:bf: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:04:82:57:FB:9B:C1:53:48:B5:44:D3:DB:42:AB:96:A0:1E:F8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:17:c9:43:7b:1e:d5:61:93:2d:19:c7:ad:df:4c:26:3d:31: 05:58:b8:83:64:17:ce:f6:22:38:66:02:03:be:e8:44:23:73: f6:13:21:db:9e:44:a9:57:e4:b9:72:13:ff:3a:46:d2:c0:4a: db:52:69:44:9a:eb:b2:4d:e6:ae:8f:16:04:c0:bf:9d:ef:15: ee:71:c0:68:43:eb:6e:94:63:d0:af:31:4a:15:6a:25:a3:51: da:d1:2f:70:ce:d8:32:86:dd:a2:45:07:9a:84:39:ae:b6:f1: 47:61:32:ad:5d:7c:cf:88:bc:2b:89:75:36:71:c9:7a:9a:16: de:f8:90:f1:ee:08:89:58:78:c4:33:33:d8:c3:47:29:57:ad: 09:f2:7e:4e:d4:9d:f4:5c:82:b8:ff:79:f8:20:b3:6d:b9:63: 86:60:0b:19:7a:27:4f:0d:a3:26:ac:67:3d:09:2b:95:d3:b2: f3:d3:27:48:70:dd:f6:25:9c:3e:ee:a2:15:cb:4d:b1:e6:ef: 82:0b:11:2c:e4:2b:6f:7a:08:7a:b0:10:9e:0b:c6:1a:4a:38: d3:57:b0:d9:96:e3:5f:6b:80:28:cd:ea:16:71:a7:1d:09:c1: 83:cb:63:59:59:14:6b:cb:d8:5f:9c:a4:92:e2:f0:c5:38:05: 4c:1f:c5:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiTkpbWSGeEfg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTI0NGY3OWMtZjdkYy00YTNjLThmYjAtMDdiNWQ5ZDZjYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfEqIJZ3HmuIGVqELY6sI3Iij8F985nAgHR5 tfsIFKAMgdXS8C6zbUDeL/uVcIsykoLwRPv5FPk/8ExGDSTP5NCOQ1mRd1KDaTIE +b5ntYB9hf/YqxV9yMGiH69xfZp6SS4frqkiGpt8ZWYll7RZ+SB15Evs2ieqca+k TSHGTK6aPCh5yQSlKlP/3q89+Bt0gLbuMYHXaf7/J6/3NXA0v5V8Sk85in8bBwrY VNfE2gRlCCbSX7Ql5ZDnykknZk9tLHoVfCo0zDZp+4ZU64KDbe6u5VSDUrJ3ok8L qohIHOYkvc23lRbULdu3HfAIwIyKzlvEXeBuTYxYzeZker8lMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP0Eglf7m8FTSLVE09tCq5agHvjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgF8lDex7VYZMtGcet30wmPTEFWLiDZBfO9iI4ZgIDvuhEI3P2EyHb nkSpV+S5chP/OkbSwErbUmlEmuuyTeaujxYEwL+d7xXuccBoQ+tulGPQrzFKFWol o1Ha0S9wztgyht2iRQeahDmutvFHYTKtXXzPiLwriXU2ccl6mhbe+JDx7giJWHjE MzPYw0cpV60J8n5O1J30XIK4/3n4ILNtuWOGYAsZeidPDaMmrGc9CSuV07Lz0ydI cN32JZw+7qIVy02x5u+CCxEs5Ctvegh6sBCeC8YaSjjTV7DZluNfa4AozeoWcacd CcGDy2NZWRRry9hfnKSS4vDFOAVMH8Uy -----END CERTIFICATE-----Generated at Sun May 11 05:38:44 2025 by rpki-client