$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa File: b313aef3-68e7-3ec0-a977-f3576f2ee078.roa (raw, json) Hash identifier: FOClofBFEUCUR7NGFtSqE/gFAoGp/2KLnBkQhzN03yw= Subject key identifier: 81:8B:87:B4:4C:F2:5B:26:C3:26:4C:A0:FA:6B:67:D5:0B:4B:BD:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A236C6F79A41DB95E5060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397203 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:23:6c:6f:79:a4:1d:b9:5e:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=5800f367-12d8-4cd2-bc4b-005d0472a13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:04:3a:8b:7c:65:6d:56:3d:05:1a:f5:f2: c2:ac:75:85:1f:5d:f2:a4:3b:8e:64:3c:3f:e9:50: 64:5a:a9:4b:e7:dc:75:1c:38:c4:3b:16:29:83:78: 5b:65:e9:a6:81:b7:c8:fb:37:f3:37:e0:45:37:c4: 50:76:9b:73:05:44:57:85:a1:f3:49:5d:42:20:56: 5d:f5:a0:2a:ad:83:a0:69:ed:17:8f:b3:28:58:c2: 18:1d:a6:46:7f:8d:46:f1:0e:27:ef:2b:07:50:06: 61:98:45:14:b4:d4:a1:70:f8:1f:3a:4c:2a:e9:02: 25:34:3b:ec:5f:ab:d7:a7:23:43:fe:25:09:a5:4a: 4b:f5:9d:bd:63:f3:eb:81:34:e4:a3:af:9e:f0:04: fc:71:b0:ed:71:63:ab:5d:d0:b3:aa:0c:0c:df:b3: 5f:e2:e5:22:04:93:91:b3:6c:ab:32:89:68:6f:ba: 6c:8b:38:10:ac:3e:6d:fa:ae:0f:88:6a:50:14:fe: da:4d:60:aa:e4:82:c6:86:0e:54:76:c7:78:3c:64: 0f:7c:85:4d:b8:00:8f:c2:82:99:59:00:9e:9d:81: 8f:9f:3b:99:74:7b:af:a2:8a:0f:bb:5e:81:ce:58: 3b:9f:c3:39:f1:90:12:dd:c7:1f:6e:6e:30:94:7d: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8B:87:B4:4C:F2:5B:26:C3:26:4C:A0:FA:6B:67:D5:0B:4B:BD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0c:3b:09:19:17:07:cc:0f:92:4d:85:df:15:ef:5f:06:08: 64:7b:21:93:04:75:a4:f4:ba:6a:25:58:38:18:0d:ea:5e:48: e5:f5:17:db:f6:70:e3:56:9b:6b:a0:0d:bb:6c:89:c2:c6:a8: e2:95:a1:85:18:75:55:e2:12:59:a6:6d:84:8a:df:ff:87:a8: 70:47:ca:bd:80:d9:12:d5:20:c0:1c:64:ea:14:d1:4d:1e:64: 29:9b:30:64:7e:07:24:35:d9:83:9a:35:e3:b7:bc:fc:29:57: 71:03:3c:67:54:c5:92:76:6d:9a:01:96:d1:cf:24:44:95:f4: 8a:3d:45:5b:cf:77:61:76:5b:71:d7:33:a5:82:11:7c:54:75: 40:7f:85:74:a8:9c:ed:bc:11:34:9a:05:3a:61:76:27:69:3f: ca:09:9c:71:b5:cd:4b:d4:43:ea:d8:ea:12:a4:8c:ad:0f:f1: 56:ed:56:ee:2f:2e:1e:88:28:3d:fb:32:44:cc:62:9b:15:c1: 98:e5:d6:fc:ac:95:d4:9d:dd:0a:8f:3b:ef:62:e9:bf:a0:94: 22:24:39:48:e7:9e:28:ac:b8:a1:0b:4c:4f:17:ae:52:3c:e3: 4c:e6:41:c8:a0:c9:4e:20:4b:1b:f2:20:5f:09:0f:e7:38:a1: 5e:64:dc:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiNsb3mkHbleUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTgwMGYzNjctMTJkOC00Y2QyLWJjNGItMDA1ZDA0NzJhMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHoEOot8ZW1WPQUa9fLCrHWFH13ypDuOZDw/ 6VBkWqlL59x1HDjEOxYpg3hbZemmgbfI+zfzN+BFN8RQdptzBURXhaHzSV1CIFZd 9aAqrYOgae0Xj7MoWMIYHaZGf41G8Q4n7ysHUAZhmEUUtNShcPgfOkwq6QIlNDvs X6vXpyND/iUJpUpL9Z29Y/PrgTTko6+e8AT8cbDtcWOrXdCzqgwM37Nf4uUiBJOR s2yrMolob7psizgQrD5t+q4PiGpQFP7aTWCq5ILGhg5Udsd4PGQPfIVNuACPwoKZ WQCenYGPnzuZdHuvoooPu16Bzlg7n8M58ZAS3ccfbm4wlH3eMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIGLh7RM8lsmwyZMoPprZ9ULS719MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMxM2FlZjMtNjhlNy0z ZWMwLWE5NzctZjM1NzZmMmVlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNDDsJGRcHzA+STYXfFe9fBghkeyGTBHWk9LpqJVg4GA3qXkjl9Rfb 9nDjVptroA27bInCxqjilaGFGHVV4hJZpm2Eit//h6hwR8q9gNkS1SDAHGTqFNFN HmQpmzBkfgckNdmDmjXjt7z8KVdxAzxnVMWSdm2aAZbRzyRElfSKPUVbz3dhdltx 1zOlghF8VHVAf4V0qJztvBE0mgU6YXYnaT/KCZxxtc1L1EPq2OoSpIytD/FW7Vbu Ly4eiCg9+zJEzGKbFcGY5db8rJXUnd0KjzvvYum/oJQiJDlI554orLihC0xPF65S PONM5kHIoMlOIEsb8iBfCQ/nOKFeZNwD -----END CERTIFICATE-----Generated at Sun May 11 05:28:16 2025 by rpki-client