$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: YrlW0SHxYTlTMP0j9Ck+DtFqapmqQiSgsMdK2aTAFLM= Subject key identifier: 87:0C:32:4C:C4:55:91:7E:F1:D2:8F:99:38:14:80:EB:38:F2:24:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A211C76144581E186CD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:21:1c:76:14:45:81:e1:86:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=71778af1-62ef-4118-bfd2-e7f1ea5b1dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:e3:47:23:53:67:e1:6a:13:75:3d:3d:4c: 4f:26:c2:e7:7d:4e:c3:95:c9:d2:65:80:c7:99:60: 0f:ec:58:48:75:87:9d:e3:45:ec:88:71:e4:86:b3: 09:88:0a:fb:f4:c2:ce:91:59:26:89:b0:59:f8:e4: 8c:44:0a:43:d1:d6:6e:87:c1:52:5c:4d:95:4d:e8: 76:de:b2:65:36:12:1f:f4:fc:68:05:4b:59:54:18: 5a:df:97:f0:0f:50:5f:3b:c1:da:65:0a:6f:63:03: 51:2a:66:9e:f0:c4:ab:29:8e:be:a9:7d:02:af:67: 42:6e:9c:88:14:de:62:8c:4c:70:44:bb:34:bb:fe: e4:c8:b5:44:86:71:aa:62:e1:13:b1:6c:1a:4a:28: 08:ba:30:dd:a0:5d:35:e2:05:bf:e0:86:5b:9f:17: c1:2c:fa:c4:31:cd:ed:c5:81:2e:63:be:1a:62:6c: 2f:d6:e4:db:df:71:4b:39:ed:66:08:43:f2:91:20: a2:83:c6:e5:67:d6:73:82:e8:f8:3d:bd:59:8e:22: ea:7a:48:17:71:4b:85:86:eb:0f:5a:f6:4f:c7:eb: a4:fa:dc:22:20:bd:cb:c9:68:bf:da:28:0e:d1:e1: 4b:96:30:b8:84:80:40:8d:3b:f7:48:26:dd:f6:3e: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0C:32:4C:C4:55:91:7E:F1:D2:8F:99:38:14:80:EB:38:F2:24:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:66:97:bb:b0:de:36:11:22:c5:f1:95:0f:0f:96:e8:b1: 09:8d:1b:05:90:c5:f1:a4:21:92:58:19:a7:95:20:40:75:6f: 4a:ba:7b:6c:b9:54:22:62:6b:51:dd:54:15:70:d9:f0:03:d8: c3:6e:41:3b:43:31:6e:6c:0c:76:e9:4a:5c:ed:7d:7a:34:03: 1f:a0:93:f6:81:bb:bf:8e:9b:e8:48:04:59:8b:aa:7f:6c:5b: 6d:05:d3:fb:05:de:16:d9:b8:a0:5b:05:6a:d3:ba:4e:4d:da: 57:ac:6d:5c:5c:83:97:92:aa:f6:a7:03:f2:67:c3:72:01:fb: e1:e7:46:29:29:d3:13:dd:98:2c:c3:42:8c:82:34:19:ea:00: fd:f2:49:6d:37:90:43:5a:ec:99:ff:e9:ab:af:65:2e:d9:31: 9d:c5:00:90:b9:12:fe:77:89:8e:31:67:c5:d5:25:37:2d:24: c1:46:b1:80:1f:13:a0:88:49:35:8b:c1:55:48:c7:a8:4d:57: e6:7b:d1:7a:b4:1a:3f:3b:82:56:67:7b:ab:b0:e3:78:3a:1c: ad:03:e0:0e:2e:7f:07:ad:b8:75:f6:c1:e7:a8:bd:1f:24:16: 73:a2:d2:5d:6d:5a:08:f1:72:b5:be:86:91:8f:19:78:05:5e: a2:44:b2:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiEcdhRFgeGGzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NzE3NzhhZjEtNjJlZi00MTE4LWJmZDItZTdmMWVhNWIxZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcLjRyNTZ+FqE3U9PUxPJsLnfU7DlcnSZYDH mWAP7FhIdYed40XsiHHkhrMJiAr79MLOkVkmibBZ+OSMRApD0dZuh8FSXE2VTeh2 3rJlNhIf9PxoBUtZVBha35fwD1BfO8HaZQpvYwNRKmae8MSrKY6+qX0Cr2dCbpyI FN5ijExwRLs0u/7kyLVEhnGqYuETsWwaSigIujDdoF014gW/4IZbnxfBLPrEMc3t xYEuY74aYmwv1uTb33FLOe1mCEPykSCig8blZ9Zzguj4Pb1ZjiLqekgXcUuFhusP WvZPx+uk+twiIL3LyWi/2igO0eFLljC4hIBAjTv3SCbd9j7UOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIcMMkzEVZF+8dKPmTgUgOs48iRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBACWaXu7DeNhEixfGVDw+W6LEJjRsFkMXxpCGSWBmnlSBAdW9Kunts uVQiYmtR3VQVcNnwA9jDbkE7QzFubAx26Upc7X16NAMfoJP2gbu/jpvoSARZi6p/ bFttBdP7Bd4W2bigWwVq07pOTdpXrG1cXIOXkqr2pwPyZ8NyAfvh50YpKdMT3Zgs w0KMgjQZ6gD98kltN5BDWuyZ/+mrr2Uu2TGdxQCQuRL+d4mOMWfF1SU3LSTBRrGA HxOgiEk1i8FVSMeoTVfme9F6tBo/O4JWZ3ursON4OhytA+AOLn8Hrbh19sHnqL0f JBZzotJdbVoI8XK1voaRjxl4BV6iRLIU -----END CERTIFICATE-----Generated at Mon May 12 02:21:53 2025 by rpki-client