$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa File: a725409d-9980-3cc5-89e4-a1049996251a.roa (raw, json) Hash identifier: yFmEvYn8jhZOCrNHD0g2nKKn5raUl4h+TO8IKs0/kC8= Subject key identifier: 8C:DE:21:8B:D3:8C:C5:C4:B1:D9:08:71:F8:E7:71:C4:1F:42:BA:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FF0ADCC4A7D88722D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397200 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:f0:ad:cc:4a:7d:88:72:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=eef299bc-3875-4806-8a6d-8346922e17c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:3a:28:a9:8c:59:5f:da:93:74:6b:65:33: ab:8a:3a:7f:89:e6:2d:24:74:58:1c:cc:03:54:c6: 02:a0:2c:26:16:86:c5:fa:d3:76:ae:be:4c:9c:3a: 2b:5b:1d:99:25:67:af:1d:60:56:8a:e6:e0:43:89: df:9c:00:7d:01:49:33:56:3a:e1:b3:63:2e:b5:70: ce:1f:0d:5d:a8:03:41:33:a2:ee:2d:b0:96:b0:b4: b1:06:19:97:ef:0f:99:d2:45:02:5b:7b:59:92:f5: 0e:c3:88:38:10:38:5e:73:80:6f:28:2a:d1:35:19: e1:ba:4b:a7:d3:2f:3b:d6:e2:a0:35:b8:eb:91:9f: a1:d3:e1:0e:f8:58:8d:ac:53:89:b4:02:e7:11:c2: 20:01:52:bb:82:87:55:71:fb:82:65:4b:53:f9:fb: 86:ff:a5:b9:7e:8f:c7:dd:69:d5:03:8d:4c:1e:a6: 0c:17:e3:ff:47:b0:cd:92:15:9a:9d:2c:65:60:d0: c7:fd:ea:ea:ec:fb:6c:39:fc:1d:30:c9:b7:30:65: 69:f1:4b:b1:4a:33:45:7c:d8:64:c8:f2:9b:44:1a: 0f:07:a0:10:94:1c:fa:7d:da:37:98:f4:06:01:bb: 19:23:cf:ab:db:92:72:03:cd:85:c5:4e:c8:f1:20: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:21:8B:D3:8C:C5:C4:B1:D9:08:71:F8:E7:71:C4:1F:42:BA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9b:b3:62:46:e1:a4:5a:c9:f5:91:39:0c:75:5b:3c:79:06: 7a:48:6b:52:96:13:02:65:12:07:6e:38:87:87:d3:27:96:0a: 11:ee:0c:44:ec:7a:b2:44:7a:29:30:09:b0:f6:db:97:58:95: 15:0a:38:a2:7e:92:b2:4d:a2:dd:97:ae:48:6c:81:e7:48:8e: be:ac:9a:ba:ab:ec:67:6d:c9:81:47:0e:5d:47:15:73:02:86: 46:e2:02:18:ac:2a:f6:6a:9d:6e:6d:db:68:b7:c3:72:2c:49: 76:ea:6a:13:15:5f:66:89:da:d3:7d:f8:aa:87:24:51:e1:e5: 3a:39:e8:58:0b:16:8e:20:24:d7:27:ee:3e:9e:9c:af:29:85: 92:2e:74:af:af:e3:20:bf:fc:3d:63:e8:ea:cc:24:b3:8b:e3: 50:e9:90:27:cb:80:39:7c:b3:09:54:46:52:f2:11:ea:00:d3: 9a:16:97:1e:b3:fe:dd:ab:79:9a:93:a1:7b:84:1c:a8:f8:a0: c9:05:56:29:e7:90:58:32:6c:53:52:0e:51:ce:dc:e8:1f:74: ce:12:1b:31:f3:f9:c6:b2:dc:4d:0d:66:1c:e5:02:48:53:ce: 46:c6:73:06:a3:6c:a8:5e:3d:27:70:0b:a9:8f:15:8b:6f:d1: 9e:1d:e1:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh/wrcxKfYhyLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWVmMjk5YmMtMzg3NS00ODA2LThhNmQtODM0NjkyMmUxN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHM6KKmMWV/ak3RrZTOrijp/ieYtJHRYHMwD VMYCoCwmFobF+tN2rr5MnDorWx2ZJWevHWBWiubgQ4nfnAB9AUkzVjrhs2MutXDO Hw1dqANBM6LuLbCWsLSxBhmX7w+Z0kUCW3tZkvUOw4g4EDhec4BvKCrRNRnhukun 0y871uKgNbjrkZ+h0+EO+FiNrFOJtALnEcIgAVK7godVcfuCZUtT+fuG/6W5fo/H 3WnVA41MHqYMF+P/R7DNkhWanSxlYNDH/erq7PtsOfwdMMm3MGVp8UuxSjNFfNhk yPKbRBoPB6AQlBz6fdo3mPQGAbsZI8+r25JyA82FxU7I8SA4nwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIzeIYvTjMXEsdkIcfjnccQfQrrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcyNTQwOWQtOTk4MC0z Y2M1LTg5ZTQtYTEwNDk5OTYyNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZm7NiRuGkWsn1kTkMdVs8eQZ6SGtSlhMCZRIHbjiHh9MnlgoR7gxE 7HqyRHopMAmw9tuXWJUVCjiifpKyTaLdl65IbIHnSI6+rJq6q+xnbcmBRw5dRxVz AoZG4gIYrCr2ap1ubdtot8NyLEl26moTFV9midrTffiqhyRR4eU6OehYCxaOICTX J+4+npyvKYWSLnSvr+Mgv/w9Y+jqzCSzi+NQ6ZAny4A5fLMJVEZS8hHqANOaFpce s/7dq3mak6F7hByo+KDJBVYp55BYMmxTUg5RztzoH3TOEhsx8/nGstxNDWYc5QJI U85GxnMGo2yoXj0ncAupjxWLb9GeHeGe -----END CERTIFICATE-----Generated at Sun May 11 05:38:34 2025 by rpki-client