$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa File: aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa (raw, json) Hash identifier: lBbu8LQMtui2rBBQQd5GN0AT+YCyIsLaxvV/TXelKP8= Subject key identifier: F7:78:13:88:03:1E:A0:09:3C:BB:28:E9:03:33:79:1B:DF:81:A4:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A22121131AE1219CC6900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396574 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:22:12:11:31:ae:12:19:cc:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=606bf64d-9d0a-44c9-a0a4-523885a810d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:e9:41:28:05:66:02:02:c0:8d:9e:0d:04: b6:ac:dc:95:09:64:30:25:2b:01:69:1d:5a:ee:bd: 28:76:a1:6a:5c:45:c2:d3:1a:6f:dd:a1:a9:ba:d4: 1a:c0:71:c9:cc:2d:85:98:7c:85:40:3b:4b:e5:8c: cf:33:d2:3e:d6:50:9f:24:5c:46:ed:84:d5:46:7c: aa:f1:d2:b2:8d:f1:89:dc:5e:e5:61:84:08:2f:d1: e4:71:ee:bc:4d:68:00:2b:a5:00:7a:56:29:6a:2e: 5a:f4:5f:da:79:11:6b:bc:cc:1b:4d:d2:f7:b1:06: 8b:30:dc:87:b9:1a:5a:e6:67:bc:36:98:bb:bd:04: 67:59:e6:23:d8:3e:ca:00:1e:a2:52:0c:b7:8b:3e: 21:e2:da:25:2d:01:67:87:e7:4c:6a:99:b4:02:5f: ad:e4:92:19:77:70:94:2a:01:a0:6b:f7:c3:c5:f9: e3:c8:af:b5:c2:b8:f8:18:e2:23:96:bf:0f:0c:75: 8d:86:7b:eb:99:1a:b2:6f:e5:4f:33:3c:d0:b5:7d: bd:74:79:0e:1f:b3:6c:ff:b2:41:e0:7d:63:b5:89: c3:84:36:ba:df:f5:9e:e6:6c:8c:02:5e:14:69:7b: 5c:b7:3b:f1:09:ff:be:48:0e:9a:56:9b:2d:cb:bf: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:13:88:03:1E:A0:09:3C:BB:28:E9:03:33:79:1B:DF:81:A4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f3:f4:39:1e:46:e0:68:82:64:89:b3:66:6f:1e:28:41:27: a1:56:21:33:cd:ca:f5:d4:f1:d1:1c:81:78:33:84:3d:4e:2f: 5c:43:b5:70:c4:2e:fb:4e:10:99:eb:4f:a8:be:81:61:36:e7: 1c:1c:08:e4:5d:42:76:de:f3:f9:6d:5a:34:7a:f9:23:bc:0c: 0d:b0:39:92:f5:37:72:c7:a5:95:90:99:c9:9d:5c:15:cf:44: 29:97:fa:57:d8:17:d4:91:4d:82:27:c2:d7:af:01:3b:ff:3e: 57:50:bb:79:a9:2e:ee:8c:86:76:f9:31:a3:9f:06:c5:f7:a3: fa:64:a5:01:86:60:a5:c2:05:62:95:11:f8:a4:ef:05:22:e6: f1:b5:6d:9b:9a:02:73:0b:bc:58:33:11:28:58:8d:c0:b6:07: 0b:40:90:4b:e9:7f:8c:12:5e:9e:1e:07:d6:fc:77:9a:4b:59: 85:15:fc:89:7f:a6:e1:eb:a1:be:d0:6f:25:41:23:87:07:19: b5:c1:67:16:29:19:8a:93:c2:dc:f5:a6:12:b7:36:5e:3c:3d: 6c:3a:28:09:47:f5:03:9f:c3:c4:19:4b:4a:58:e1:c9:d8:ad: 04:4d:39:cb:b3:6c:9e:94:93:8d:d4:f7:9b:16:8f:05:c6:5a: b4:62:9b:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiISETGuEhnMaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NjA2YmY2NGQtOWQwYS00NGM5LWEwYTQtNTIzODg1YTgxMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKjpQSgFZgICwI2eDQS2rNyVCWQwJSsBaR1a 7r0odqFqXEXC0xpv3aGputQawHHJzC2FmHyFQDtL5YzPM9I+1lCfJFxG7YTVRnyq 8dKyjfGJ3F7lYYQIL9Hkce68TWgAK6UAelYpai5a9F/aeRFrvMwbTdL3sQaLMNyH uRpa5me8Npi7vQRnWeYj2D7KAB6iUgy3iz4h4tolLQFnh+dMapm0Al+t5JIZd3CU KgGga/fDxfnjyK+1wrj4GOIjlr8PDHWNhnvrmRqyb+VPMzzQtX29dHkOH7Ns/7JB 4H1jtYnDhDa63/We5myMAl4UaXtctzvxCf++SA6aVpsty7+w3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPd4E4gDHqAJPLso6QMzeRvfgaQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWJhMmE1NGItNmU3Ni0z ZjU4LTk3YzQtMmUzYWNhZWZmOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF8/Q5HkbgaIJkibNmbx4oQSehViEzzcr11PHRHIF4M4Q9Ti9cQ7Vw xC77ThCZ60+ovoFhNuccHAjkXUJ23vP5bVo0evkjvAwNsDmS9Tdyx6WVkJnJnVwV z0Qpl/pX2BfUkU2CJ8LXrwE7/z5XULt5qS7ujIZ2+TGjnwbF96P6ZKUBhmClwgVi lRH4pO8FIubxtW2bmgJzC7xYMxEoWI3AtgcLQJBL6X+MEl6eHgfW/HeaS1mFFfyJ f6bh66G+0G8lQSOHBxm1wWcWKRmKk8Lc9aYStzZePD1sOigJR/UDn8PEGUtKWOHJ 2K0ETTnLs2yelJON1PebFo8Fxlq0YptZ -----END CERTIFICATE-----Generated at Sun May 11 05:23:33 2025 by rpki-client