$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: KaXYpOTClv4qvXEqrHRZHUJ00vhaFHLfUvhPV90NV9Y= Subject key identifier: 4C:2F:71:49:91:69:2C:07:70:D8:91:3D:C7:F6:14:68:80:6B:C8:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A258C343689D2E710C600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:8c:34:36:89:d2:e7:10:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9f15730e-3977-45b3-9b09-7dd12ac45a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:7f:7e:68:05:6a:62:07:39:c2:0f:bf:14: 39:43:16:d6:37:64:e9:93:08:cc:d6:6f:10:d5:79: 0c:31:6e:b7:66:3c:f5:4e:96:ee:35:8f:98:92:2d: 58:f2:65:ba:f1:aa:d0:c3:83:ac:7b:70:c7:94:cf: dc:d1:65:7f:10:38:1c:a2:c5:0d:1e:2d:13:b5:96: 6a:d4:46:b4:34:02:62:ac:3b:8d:37:66:ea:2c:aa: c4:e3:c4:14:8e:98:8c:0e:50:5a:43:6c:f1:1e:ca: 04:5d:80:98:ec:47:f1:aa:4c:b8:88:00:8f:5c:59: 04:f4:c7:6c:44:60:55:85:27:ac:66:0e:a4:1a:dd: fd:e6:72:ac:92:d4:ca:e1:d8:e9:6f:7f:4a:d8:fd: cf:e8:2f:f2:a5:1a:23:d7:72:5e:75:49:65:0f:2f: fa:e2:25:bb:69:b9:ca:3a:5a:37:23:1b:4a:8f:a2: 0d:14:b0:c3:b2:30:3e:eb:dc:f5:13:6e:2e:38:4a: 6f:02:ce:5f:b4:9e:22:e3:1c:18:fb:b0:d1:d6:96: f6:0e:14:79:6c:6b:69:71:f4:65:8c:af:75:6b:32: de:9d:d5:5c:f5:57:a4:e4:0a:8b:68:c6:f6:fd:e9: 3c:dc:90:bd:eb:c8:b2:31:46:31:fe:a3:c2:93:a1: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:71:49:91:69:2C:07:70:D8:91:3D:C7:F6:14:68:80:6B:C8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:04:b9:69:c6:82:ae:1f:1c:38:13:49:4e:fc:26:c4:74:f4: 66:b8:d4:fd:54:49:39:6e:01:f9:b2:d8:80:33:07:06:62:db: 44:65:76:37:5e:82:7f:93:87:58:5e:2b:1f:c7:c2:89:dd:23: 55:cc:d0:2c:2a:6b:ae:40:2f:c0:c9:aa:d2:36:0e:2d:51:ba: 3e:b3:dd:b6:ff:d9:0b:ab:ce:0c:00:df:dd:07:a4:8e:30:a9: d1:04:86:5b:f1:68:56:95:9f:50:22:28:af:19:9d:8a:86:0d: 9a:a1:da:ec:96:c5:5c:81:aa:54:db:79:ae:b9:3e:6b:e4:57: f2:a9:5b:d2:bb:4f:e9:6c:26:d8:dc:1a:98:e7:ce:1a:d8:76: 09:2c:57:fc:01:38:83:c6:7f:13:e8:be:89:c5:90:67:30:6e: 1f:06:41:e4:65:10:6d:ae:61:40:5b:e7:0e:37:7e:0e:01:8e: ac:2c:73:9a:12:95:28:b0:67:29:d3:80:3c:dd:44:89:2f:04: 2d:d6:f3:2b:60:38:24:7e:8e:ef:13:64:15:ec:26:fd:ca:92: 2c:22:15:93:09:9d:a5:f7:02:7b:69:86:e7:8a:ab:db:76:3a: 1b:bb:f7:96:29:1d:a4:45:0c:4f:60:5b:41:38:b0:f1:27:09: 2f:e2:dc:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiWMNDaJ0ucQxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OWYxNTczMGUtMzk3Ny00NWIzLTliMDktN2RkMTJhYzQ1YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5/fmgFamIHOcIPvxQ5QxbWN2TpkwjM1m8Q 1XkMMW63Zjz1TpbuNY+Yki1Y8mW68arQw4Ose3DHlM/c0WV/EDgcosUNHi0TtZZq 1Ea0NAJirDuNN2bqLKrE48QUjpiMDlBaQ2zxHsoEXYCY7Efxqky4iACPXFkE9Mds RGBVhSesZg6kGt395nKsktTK4djpb39K2P3P6C/ypRoj13JedUllDy/64iW7abnK Olo3IxtKj6INFLDDsjA+69z1E24uOEpvAs5ftJ4i4xwY+7DR1pb2DhR5bGtpcfRl jK91azLendVc9Vek5AqLaMb2/ek83JC968iyMUYx/qPCk6H4MwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEwvcUmRaSwHcNiRPcf2FGiAa8jGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBABLlpxoKuHxw4E0lO/CbEdPRmuNT9VEk5bgH5stiAMwcGYttEZXY3 XoJ/k4dYXisfx8KJ3SNVzNAsKmuuQC/AyarSNg4tUbo+s922/9kLq84MAN/dB6SO MKnRBIZb8WhWlZ9QIiivGZ2Khg2aodrslsVcgapU23muuT5r5FfyqVvSu0/pbCbY 3BqY584a2HYJLFf8ATiDxn8T6L6JxZBnMG4fBkHkZRBtrmFAW+cON34OAY6sLHOa EpUosGcp04A83USJLwQt1vMrYDgkfo7vE2QV7Cb9ypIsIhWTCZ2l9wJ7aYbniqvb djobu/eWKR2kRQxPYFtBOLDxJwkv4tz2 -----END CERTIFICATE-----Generated at Sun May 11 08:46:44 2025 by rpki-client