$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa File: bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa (raw, json) Hash identifier: HHKvqykkcRUJGKtqGJGxghhtMnmIPLUgPUcIj1gEd6Q= Subject key identifier: 13:91:38:E3:C4:8F:0D:AA:2B:40:1C:B0:C1:5E:88:E8:36:A5:24:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A254A99CD93337B473E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396584 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:4a:99:cd:93:33:7b:47:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=baedcb6d-99df-41e0-a8f5-58401d59b919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:88:d9:fd:9d:ff:5d:71:63:44:45:94:36: bc:83:35:bb:f9:ea:2a:a9:43:8a:9c:50:c5:75:64: ec:f8:b4:00:a7:92:b6:92:1a:0e:ef:1b:8c:74:c6: de:31:3e:6e:12:4d:60:fc:0f:be:ab:ac:d8:fd:5d: 0c:1f:13:9f:8a:32:d2:03:75:40:a7:c7:f3:d9:05: c3:af:ae:32:49:9b:6e:4d:f3:36:1f:34:80:85:7d: 51:f0:ec:a4:41:e0:93:4a:c0:a6:71:46:66:67:3c: 5c:ce:81:74:69:ae:d6:aa:ab:fd:b4:7e:06:f7:4d: c9:ea:2b:4d:52:d1:2b:ed:2b:1d:73:38:31:5d:48: ca:3e:b6:92:bc:7f:83:b2:24:dd:84:79:b4:c0:f4: b1:5d:ea:8c:49:fa:ed:87:31:23:c3:1d:f0:6e:b4: 6a:ff:9d:96:7d:96:c3:e6:97:89:0f:4e:2a:cb:3e: e6:71:e1:7a:af:c1:6f:7a:95:18:4b:c7:4c:16:ce: 39:b6:55:1c:6a:fb:69:23:d1:b8:ac:92:02:06:35: f6:0d:5a:06:b2:9c:d9:1e:57:6a:ac:e8:c1:1d:ca: 31:ac:19:d7:81:52:f8:c8:a9:dc:6d:7c:f5:b8:db: 8c:5b:6a:0d:6f:ef:6d:99:2f:76:9f:4d:3f:5e:5d: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:91:38:E3:C4:8F:0D:AA:2B:40:1C:B0:C1:5E:88:E8:36:A5:24:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:25:ac:51:fb:0b:c1:cb:06:84:a6:ba:e4:fb:f9:1c:f4:03: 5d:73:4f:e6:63:46:05:7d:d5:b8:9e:85:35:8d:e3:7c:1c:30: 36:75:c6:3f:cb:79:33:c1:d6:10:d7:35:64:e7:81:79:ae:ec: 2e:e9:a8:20:4d:ae:04:a3:a2:49:31:28:15:9c:c8:f0:74:08: 73:3c:63:fa:23:82:6d:9a:b0:c7:32:4a:31:35:9d:fb:6f:7b: 41:a3:dd:8e:fa:3d:e6:47:21:70:ad:ed:46:c7:68:72:c2:25: e0:09:dd:61:1a:2b:3f:fd:2f:e7:78:d9:a3:8d:29:94:7b:4a: 1a:83:ec:b9:df:a7:04:c1:6b:f5:ef:fc:69:d7:a6:57:ac:44: 2b:e4:b3:be:cc:c1:b3:7c:cc:78:56:5e:02:cd:9e:c0:1d:cd: 9c:07:cf:8f:ae:55:b0:28:37:bb:d5:3d:6b:b0:06:f2:69:1d: db:29:a7:c3:c7:73:69:e5:5d:e3:9f:2c:38:b8:dd:0f:73:8e: 41:b7:0c:91:c4:89:97:5a:a3:c9:a1:54:19:2d:b4:02:fb:92: e4:3f:83:7a:e2:05:fa:c5:00:6f:b4:29:32:5f:da:65:cb:46: d7:08:ac:97:d9:80:95:a4:f5:61:f7:5b:32:1a:85:2e:c9:53: 8e:8f:53:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiVKmc2TM3tHPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YmFlZGNiNmQtOTlkZi00MWUwLWE4ZjUtNTg0MDFkNTliOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WaI2f2d/11xY0RFlDa8gzW7+eoqqUOKnFDF dWTs+LQAp5K2khoO7xuMdMbeMT5uEk1g/A++q6zY/V0MHxOfijLSA3VAp8fz2QXD r64ySZtuTfM2HzSAhX1R8OykQeCTSsCmcUZmZzxczoF0aa7Wqqv9tH4G903J6itN UtEr7SsdczgxXUjKPraSvH+DsiTdhHm0wPSxXeqMSfrthzEjwx3wbrRq/52WfZbD 5peJD04qyz7mceF6r8FvepUYS8dMFs45tlUcavtpI9G4rJICBjX2DVoGspzZHldq rOjBHcoxrBnXgVL4yKncbXz1uNuMW2oNb+9tmS92n00/Xl0d6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBOROOPEjw2qK0AcsMFeiOg2pSTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmZhNTkxOTEtYjgxYi0z ODJiLWFmZmYtMGNiNWRkOGVjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXJaxR+wvBywaEprrk+/kc9ANdc0/mY0YFfdW4noU1jeN8HDA2dcY/ y3kzwdYQ1zVk54F5ruwu6aggTa4Eo6JJMSgVnMjwdAhzPGP6I4JtmrDHMkoxNZ37 b3tBo92O+j3mRyFwre1Gx2hywiXgCd1hGis//S/neNmjjSmUe0oag+y536cEwWv1 7/xp16ZXrEQr5LO+zMGzfMx4Vl4CzZ7AHc2cB8+PrlWwKDe71T1rsAbyaR3bKafD x3Np5V3jnyw4uN0Pc45BtwyRxImXWqPJoVQZLbQC+5LkP4N64gX6xQBvtCkyX9pl y0bXCKyX2YCVpPVh91syGoUuyVOOj1OC -----END CERTIFICATE-----Generated at Sun May 11 05:38:41 2025 by rpki-client