$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4adecc-cedb-39de-acc6-236565999793.roa File: ae4adecc-cedb-39de-acc6-236565999793.roa (raw, json) Hash identifier: XOZZ5VJ5oqa+u8GQiZOtFrb5rVKctyyQzzwASgp3zck= Subject key identifier: EA:C3:84:3F:93:07:E1:E9:30:DC:79:80:37:A2:E3:35:D2:A8:EE:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A204888499DDEB5D77600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4adecc-cedb-39de-acc6-236565999793.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396603 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:48:88:49:9d:de:b5:d7:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=019a4a69-11fb-4b22-ba91-ea662f4eb8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:cd:f2:01:25:43:67:08:c8:ca:40:b5:c1: 0a:56:4f:d6:0a:f4:02:1f:82:f1:ad:89:b3:02:b0: e0:8a:a7:45:b6:10:37:8d:fc:d4:bc:7c:84:7d:33: 9d:f0:01:1f:f1:69:33:0f:bd:87:ea:4c:66:5b:d5: 8a:09:ec:f1:fa:0a:da:32:bd:63:3e:ec:69:bf:a0: f0:9f:67:2c:35:b7:1c:5e:93:6a:9e:d6:70:82:2e: e4:2b:86:d6:52:66:65:f3:d2:52:96:fe:e1:73:6d: 34:a1:52:56:32:21:37:75:64:c2:8c:da:f6:8c:0e: 21:24:8d:28:e2:42:f9:86:f3:4e:8f:8f:0f:1b:e3: d1:a3:b4:ad:82:1d:4b:e3:b4:da:77:c1:b7:03:5e: 53:d5:cd:d1:fa:5d:fb:12:f1:9b:47:85:0d:11:c2: d2:dd:49:c2:66:f2:8c:3f:b4:54:d6:5a:84:0a:f0: d6:e2:5a:ba:0b:43:8a:2f:8c:eb:07:aa:b2:b9:13: 22:a1:ad:fc:6e:b8:40:10:e1:57:af:6b:d3:84:f6: 33:a3:7a:b5:1a:81:7e:8e:73:a9:2a:da:ff:13:ed: 3f:ec:b6:b7:83:b7:2e:e8:bd:ba:45:4e:44:5c:84: fd:07:07:ac:33:17:00:7a:bc:5e:3b:a8:f1:01:d0: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:84:3F:93:07:E1:E9:30:DC:79:80:37:A2:E3:35:D2:A8:EE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4adecc-cedb-39de-acc6-236565999793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:02:0c:d6:0c:5b:8c:38:9e:4b:9b:1a:8b:a7:8c:5f:6f:20: 83:3b:c3:c5:ec:e3:10:5a:02:7a:d3:67:79:56:27:f6:ae:1c: e9:b5:15:3a:a6:17:48:c1:28:ef:57:78:49:2c:da:15:ed:24: 2f:66:07:ed:65:0f:e6:72:87:98:ee:0f:35:bd:75:3c:f8:eb: 7f:21:23:72:2a:97:72:8b:db:25:db:84:66:e8:af:f4:a5:43: 0e:47:f7:00:b5:ef:68:0d:38:c1:98:27:b6:84:8e:a1:96:8c: 4b:fc:c5:b8:37:df:0e:05:47:2a:b3:9c:5c:52:2c:8d:6a:e7: 81:60:79:d6:5e:0c:1a:5e:11:0d:81:ae:16:1e:f4:eb:0e:86: 28:1f:4e:81:62:d6:a6:1e:35:20:cb:62:2a:ad:1e:d2:75:80: 66:a1:fd:8b:e2:bb:84:98:22:cc:3e:3b:b1:fe:e4:bc:79:b4: 8d:60:f0:67:79:fa:08:16:9c:93:d9:97:cc:ca:d3:9f:30:22: 5c:c1:37:95:95:68:d8:d1:21:d8:12:5e:45:38:40:7f:ab:b7: ff:cc:b8:e6:24:f3:24:f7:4b:28:21:52:f1:51:6b:e3:97:20: d0:37:d7:2f:9c:4b:93:27:8b:82:31:d8:4e:dd:99:3f:2a:a4: cd:9d:83:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiBIiEmd3rXXdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDE5YTRhNjktMTFmYi00YjIyLWJhOTEtZWE2NjJmNGViOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04rN8gElQ2cIyMpAtcEKVk/WCvQCH4LxrYmz ArDgiqdFthA3jfzUvHyEfTOd8AEf8WkzD72H6kxmW9WKCezx+graMr1jPuxpv6Dw n2csNbccXpNqntZwgi7kK4bWUmZl89JSlv7hc200oVJWMiE3dWTCjNr2jA4hJI0o 4kL5hvNOj48PG+PRo7Stgh1L47Tad8G3A15T1c3R+l37EvGbR4UNEcLS3UnCZvKM P7RU1lqECvDW4lq6C0OKL4zrB6qyuRMioa38brhAEOFXr2vThPYzo3q1GoF+jnOp Ktr/E+0/7La3g7cu6L26RU5EXIT9BwesMxcAerxeO6jxAdBL1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOrDhD+TB+HpMNx5gDei4zXSqO7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU0YWRlY2MtY2VkYi0z OWRlLWFjYzYtMjM2NTY1OTk5NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsAgzWDFuMOJ5LmxqLp4xfbyCDO8PF7OMQWgJ602d5Vif2rhzptRU6 phdIwSjvV3hJLNoV7SQvZgftZQ/mcoeY7g81vXU8+Ot/ISNyKpdyi9sl24Rm6K/0 pUMOR/cAte9oDTjBmCe2hI6hloxL/MW4N98OBUcqs5xcUiyNaueBYHnWXgwaXhEN ga4WHvTrDoYoH06BYtamHjUgy2IqrR7SdYBmof2L4ruEmCLMPjux/uS8ebSNYPBn efoIFpyT2ZfMytOfMCJcwTeVlWjY0SHYEl5FOEB/q7f/zLjmJPMk90soIVLxUWvj lyDQN9cvnEuTJ4uCMdhO3Zk/KqTNnYOE -----END CERTIFICATE-----Generated at Sun May 11 08:15:23 2025 by rpki-client