$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa File: bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa (raw, json) Hash identifier: 5cZBlWAZRw0CzBggoLeq00h1gBLgYFUK7LjTWaxSrrw= Subject key identifier: 0D:D5:28:DB:ED:50:71:2C:39:C1:B0:D3:92:44:A6:5E:67:04:1B:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2637FFE61FAFF879913C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 211369 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:26:37:ff:e6:1f:af:f8:79:91:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9820ed3f-040d-4e6e-a03f-4744264d56d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:af:45:09:32:98:d3:a9:37:73:99:d1:18: 53:56:f8:ac:26:fa:d6:d6:c1:52:00:ad:ee:f6:8b: bc:ad:bd:bc:c2:98:f8:ab:e8:c3:bf:4b:ac:e1:b7: 70:a5:3c:ee:72:44:03:63:88:e2:cd:47:8d:cb:6e: b0:05:f7:d2:c7:1c:1a:1a:20:b5:c4:d0:1b:c8:9d: 04:e2:cd:0e:56:9d:32:00:b9:f0:15:22:7c:ea:dd: 2e:1c:56:d0:1a:c4:71:79:99:59:1e:4a:c2:03:c4: 2d:7f:68:a1:b8:73:03:7f:2d:18:a4:ab:10:38:08: 6d:d1:15:eb:dc:de:87:46:2d:07:e3:87:5b:37:18: f7:15:e7:bc:fc:b4:2d:86:29:3e:6a:cf:a3:d4:5c: 78:6e:53:49:aa:cd:0b:ac:f2:3d:1b:5e:61:53:7f: 43:b0:d0:22:59:ae:83:8c:07:f8:5f:a4:74:4c:8a: 92:96:88:ad:cc:eb:79:74:87:35:4d:c6:c8:ba:de: a1:da:6d:c4:6e:01:eb:38:33:2e:06:8a:7f:d8:11: a1:81:f8:c1:1e:3c:fd:de:24:8a:1f:4a:3f:26:75: 40:8f:01:a4:f4:a8:3c:3b:92:f9:70:8f:c6:21:67: b2:15:2c:89:86:6b:2d:12:08:e1:c5:f1:62:5d:93: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:28:DB:ED:50:71:2C:39:C1:B0:D3:92:44:A6:5E:67:04:1B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:88:a5:31:ea:26:13:79:9e:b7:e0:61:26:98:81:cb:bc:d4: f2:9c:ac:12:40:08:86:fa:db:a9:9a:21:aa:43:b9:cd:92:40: b5:5f:51:3c:43:d0:cb:45:93:a0:90:d5:a6:f2:50:16:5e:30: e1:0d:d9:36:00:96:c8:55:93:67:46:77:4e:a0:13:6e:73:e6: 44:9a:58:2a:0d:2c:92:c5:cf:1f:1a:6e:62:b8:50:dc:0c:fb: f4:bf:9d:17:db:64:f2:09:38:b4:91:4a:d7:8e:5d:fa:cf:61: 64:31:54:fd:25:7d:66:75:78:4a:8d:b6:53:d7:65:6f:6f:38: b5:56:99:74:ac:d1:4e:76:7d:40:ba:1c:1d:d9:b4:3c:1f:2b: 1e:f4:11:90:1e:ec:fe:11:25:73:d7:80:79:fe:80:49:8a:fc: c2:df:34:96:96:cf:fc:ee:1b:df:c8:fa:c9:a3:0e:25:25:d1: 4a:ad:88:9d:5a:ea:10:5d:35:7d:4b:1d:48:03:11:fe:18:b9: ca:4f:3b:3e:7a:c7:7e:e0:25:4a:bb:ac:7d:a4:ba:56:66:c5: bb:b4:3a:59:e9:60:93:02:c3:fe:58:85:2d:1e:8c:48:54:28: f8:c4:84:12:e6:cf:fd:0f:04:31:00:0e:42:c2:97:17:eb:5f: 33:ea:b7:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiY3/+Yfr/h5kTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTgyMGVkM2YtMDQwZC00ZTZlLWEwM2YtNDc0NDI2NGQ1NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6evRQkymNOpN3OZ0RhTVvisJvrW1sFSAK3u 9ou8rb28wpj4q+jDv0us4bdwpTzuckQDY4jizUeNy26wBffSxxwaGiC1xNAbyJ0E 4s0OVp0yALnwFSJ86t0uHFbQGsRxeZlZHkrCA8Qtf2ihuHMDfy0YpKsQOAht0RXr 3N6HRi0H44dbNxj3Fee8/LQthik+as+j1Fx4blNJqs0LrPI9G15hU39DsNAiWa6D jAf4X6R0TIqSloitzOt5dIc1TcbIut6h2m3EbgHrODMuBop/2BGhgfjBHjz93iSK H0o/JnVAjwGk9Kg8O5L5cI/GIWeyFSyJhmstEgjhxfFiXZPwmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA3VKNvtUHEsOcGw05JEpl5nBBvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM2Zjk2MjctMGM1ZC0z OTU3LThiMmEtNDkxMDY0YmIzYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIiKUx6iYTeZ634GEmmIHLvNTynKwSQAiG+tupmiGqQ7nNkkC1X1E8 Q9DLRZOgkNWm8lAWXjDhDdk2AJbIVZNnRndOoBNuc+ZEmlgqDSySxc8fGm5iuFDc DPv0v50X22TyCTi0kUrXjl36z2FkMVT9JX1mdXhKjbZT12Vvbzi1Vpl0rNFOdn1A uhwd2bQ8Hyse9BGQHuz+ESVz14B5/oBJivzC3zSWls/87hvfyPrJow4lJdFKrYid WuoQXTV9Sx1IAxH+GLnKTzs+esd+4CVKu6x9pLpWZsW7tDpZ6WCTAsP+WIUtHoxI VCj4xIQS5s/9DwQxAA5CwpcX618z6rdr -----END CERTIFICATE-----Generated at Sun May 11 08:46:43 2025 by rpki-client