$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa File: bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa (raw, json) Hash identifier: NQaUj8IxrL43rv/cunLSbJZrC7Z7aXy2kNI5qpxW6PE= Subject key identifier: AB:75:4A:87:F7:FA:25:EB:84:B8:47:F0:0E:98:B6:40:0A:0F:0D:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A22DD587261C9963F4B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397207 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:22:dd:58:72:61:c9:96:3f:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=92f66a8c-43a3-4da9-bab7-a36b5c5cd6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:9e:16:da:6e:ed:b3:67:ae:3f:9c:83:c4: af:2c:94:c5:74:11:6a:7a:f5:da:cd:2f:41:50:ff: 70:6c:85:6b:37:1c:b3:fa:39:5f:a2:1e:22:fe:36: a8:fb:c9:4a:8b:64:b8:bf:10:69:36:e5:60:9c:c3: 48:23:ad:03:f0:d5:57:e7:25:c7:db:7e:e7:38:04: 3c:6c:36:b9:46:0a:25:ff:a5:f1:22:dc:77:37:0d: 59:93:1a:22:14:8e:8e:8e:99:8c:dc:dc:92:84:cc: 52:ef:7b:6f:e5:df:71:3a:9b:05:5d:23:b5:99:47: b8:66:a9:0d:fa:1e:28:ee:fd:9c:be:59:94:c1:cb: 1c:1b:f9:75:f3:46:2b:fe:af:0e:ee:48:c0:d2:0a: fd:69:2d:7a:18:a0:fc:83:59:b6:ed:5d:1c:b1:b3: 12:2b:c0:c0:a0:42:d2:b5:6c:73:66:eb:a8:5c:9a: 65:f9:db:5e:6d:8b:3d:8e:0c:e3:b8:cd:64:a8:55: 88:7a:d1:8c:c9:a7:30:59:12:48:9a:1f:06:71:cf: 05:0f:49:f2:ab:cb:ab:c0:a1:6a:2e:b7:dc:b4:7e: 1c:8c:69:85:81:e3:1c:d0:36:57:de:8a:02:0d:a8: b4:82:c0:a2:76:58:96:2b:fb:f4:80:00:d7:d9:25: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:4A:87:F7:FA:25:EB:84:B8:47:F0:0E:98:B6:40:0A:0F:0D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:16:81:37:ba:a4:c9:77:6e:64:eb:a7:cf:36:eb:5f:c4:70: c4:65:87:cd:eb:bd:89:1f:69:c5:fc:f9:12:40:92:d9:31:ae: 93:84:8e:66:4d:4d:b7:c3:4e:88:dd:ee:92:34:da:d7:7f:d0: 18:bb:54:3d:40:60:d2:0e:65:2e:28:44:c2:97:95:5f:95:37: 9f:75:c5:6b:51:41:54:94:eb:f7:00:2b:f4:61:fb:6f:22:76: e1:6e:86:57:ca:a5:a3:09:66:1b:ca:e3:d5:61:0b:73:81:67: 4a:b2:b3:55:89:37:c4:cc:63:bb:c1:f4:de:2a:5d:cd:ff:f1: 6c:9b:64:b8:ea:c1:48:ce:d6:ca:87:c5:09:b1:35:ce:eb:66: a2:5e:08:25:41:3a:01:63:fe:7c:44:9b:c9:89:9f:87:6f:2b: b8:54:db:f1:26:b6:77:c3:0b:f0:5e:d1:d5:97:0e:9f:f1:85: bc:85:32:c8:89:95:61:c8:58:0c:a7:19:d7:af:6b:8b:85:d3: 97:49:da:16:36:4f:35:8e:2d:7d:a5:ff:32:09:e6:e3:57:1a: e1:8c:24:5f:4a:91:b4:82:e4:2d:bb:db:ce:c8:64:de:f4:f5: 9b:4c:97:ac:cf:f7:a7:e3:f9:cd:0e:89:b8:eb:dc:60:15:02: 17:08:55:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiLdWHJhyZY/S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTJmNjZhOGMtNDNhMy00ZGE5LWJhYjctYTM2YjVjNWNkNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRSeFtpu7bNnrj+cg8SvLJTFdBFqevXazS9B UP9wbIVrNxyz+jlfoh4i/jao+8lKi2S4vxBpNuVgnMNII60D8NVX5yXH237nOAQ8 bDa5Rgol/6XxItx3Nw1ZkxoiFI6OjpmM3NyShMxS73tv5d9xOpsFXSO1mUe4ZqkN +h4o7v2cvlmUwcscG/l180Yr/q8O7kjA0gr9aS16GKD8g1m27V0csbMSK8DAoELS tWxzZuuoXJpl+dtebYs9jgzjuM1kqFWIetGMyacwWRJImh8Gcc8FD0nyq8urwKFq LrfctH4cjGmFgeMc0DZX3ooCDai0gsCidliWK/v0gADX2SWU9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKt1Sof3+iXrhLhH8A6YtkAKDw2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJkZGZmZDEtZTczYS0z OWI2LWE3YjktMmRjMTQ5Y2MxMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEFoE3uqTJd25k66fPNutfxHDEZYfN672JH2nF/PkSQJLZMa6ThI5m TU23w06I3e6SNNrXf9AYu1Q9QGDSDmUuKETCl5VflTefdcVrUUFUlOv3ACv0Yftv InbhboZXyqWjCWYbyuPVYQtzgWdKsrNViTfEzGO7wfTeKl3N//Fsm2S46sFIztbK h8UJsTXO62aiXgglQToBY/58RJvJiZ+Hbyu4VNvxJrZ3wwvwXtHVlw6f8YW8hTLI iZVhyFgMpxnXr2uLhdOXSdoWNk81ji19pf8yCebjVxrhjCRfSpG0guQtu9vOyGTe 9PWbTJesz/en4/nNDom469xgFQIXCFVP -----END CERTIFICATE-----Generated at Sun May 11 05:41:34 2025 by rpki-client