$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa File: cb33b16f-17fb-389e-941e-cf209709f3d7.roa (raw, json) Hash identifier: YaogHOhUqVs6pN1uC+/uhNyC760Wf5k6zsQvrwHbVNg= Subject key identifier: 28:4E:2E:3C:C5:CC:9C:20:BD:49:18:5F:D2:02:04:CE:E4:14:E0:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FBB00343C61E969EB09 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396615 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:bb:00:34:3c:61:e9:69:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3e31f41b-b7b2-4a3f-90c6-36db2895c724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:67:9a:e6:ae:93:fc:51:64:d9:e2:06:ac: f1:8d:b6:56:b2:ba:e4:2f:a3:cc:6a:c8:fa:73:6c: 4d:00:ab:d7:37:69:76:97:03:db:6c:41:6e:57:c0: 96:1e:fd:88:30:cb:51:3f:d5:98:6b:34:9e:54:8f: cc:da:20:38:86:2d:85:03:4a:84:cc:fb:56:18:2b: 22:b3:e6:ae:5b:6f:4e:ed:ac:1a:06:5c:46:6f:cf: 9c:65:19:84:ac:7b:ae:81:ff:78:50:74:76:b2:aa: eb:1f:08:1d:fa:b4:72:0a:89:09:10:dc:4b:c7:1a: 0c:22:37:9f:8e:d0:77:a5:46:b4:3e:d4:43:07:50: db:fb:4e:57:27:98:6a:74:83:8c:3e:8d:1d:e1:e7: d0:bb:6d:b1:74:01:53:e7:d7:0a:d4:97:7f:57:27: 50:ce:7c:5d:8c:38:06:93:a1:0c:4f:8f:70:e7:c9: 4c:6f:7b:38:f5:7c:7e:80:de:9e:08:97:3e:a4:11: c0:5f:61:66:ca:80:df:35:4d:2c:07:05:6c:35:49: eb:50:2d:31:a5:0b:52:6b:1a:b5:5a:33:85:4b:c1: 29:48:85:df:96:0a:da:03:42:d1:65:41:b0:dd:31: 17:ee:0e:9d:b1:b3:66:f0:d3:32:c5:c4:ee:a9:44: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:2E:3C:C5:CC:9C:20:BD:49:18:5F:D2:02:04:CE:E4:14:E0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4e:ee:44:8c:9d:da:d2:17:b9:e0:22:fa:e0:21:d8:85:ed: f1:2b:ba:14:8e:7f:32:b9:e7:d0:c3:a4:64:20:94:11:f9:1d: 0a:15:04:c1:c5:42:60:f8:db:16:c4:6c:c4:09:ee:55:de:cb: cd:e9:0a:f0:07:42:c0:6a:16:d6:15:c7:c2:e1:42:68:cb:96: 0c:92:eb:3b:b0:32:63:85:63:52:07:0c:36:0a:53:72:1c:2d: 95:2c:fe:fc:ad:ca:8a:5d:8c:34:44:f9:71:28:4f:52:94:ce: ab:ad:3e:d8:53:9b:fd:7e:28:8f:93:2e:14:70:e2:3a:c9:e8: 62:58:5f:07:6b:ac:3f:60:06:01:0f:6a:0e:f4:a6:34:c3:d3: fc:9b:37:82:d7:99:27:29:fc:28:53:bc:1e:96:d2:21:fe:2b: 5b:30:2b:b4:b0:55:8a:48:38:d5:47:59:c2:7d:68:5c:05:ab: d7:b6:aa:7c:cd:f5:24:1f:1e:42:df:3f:24:dd:b6:71:b2:e1: c2:05:ed:44:ba:a1:e4:7e:74:02:6d:12:ec:f2:91:20:37:54: fd:94:3e:0e:48:c6:e2:2d:b0:be:d1:cb:da:be:b8:0d:85:0d: ff:ff:a4:71:32:3c:8b:28:c5:ed:89:f7:fd:7a:21:91:46:d0: d3:5f:b7:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh+7ADQ8Yelp6wkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2UzMWY0MWItYjdiMi00YTNmLTkwYzYtMzZkYjI4OTVjNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE9nmuauk/xRZNniBqzxjbZWsrrkL6PMasj6 c2xNAKvXN2l2lwPbbEFuV8CWHv2IMMtRP9WYazSeVI/M2iA4hi2FA0qEzPtWGCsi s+auW29O7awaBlxGb8+cZRmErHuugf94UHR2sqrrHwgd+rRyCokJENxLxxoMIjef jtB3pUa0PtRDB1Db+05XJ5hqdIOMPo0d4efQu22xdAFT59cK1Jd/VydQznxdjDgG k6EMT49w58lMb3s49Xx+gN6eCJc+pBHAX2FmyoDfNU0sBwVsNUnrUC0xpQtSaxq1 WjOFS8EpSIXflgraA0LRZUGw3TEX7g6dsbNm8NMyxcTuqUSorQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChOLjzFzJwgvUkYX9ICBM7kFOCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2IzM2IxNmYtMTdmYi0z ODllLTk0MWUtY2YyMDk3MDlmM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbTu5EjJ3a0he54CL64CHYhe3xK7oUjn8yuefQw6RkIJQR+R0KFQTB xUJg+NsWxGzECe5V3svN6QrwB0LAahbWFcfC4UJoy5YMkus7sDJjhWNSBww2ClNy HC2VLP78rcqKXYw0RPlxKE9SlM6rrT7YU5v9fiiPky4UcOI6yehiWF8Ha6w/YAYB D2oO9KY0w9P8mzeC15knKfwoU7weltIh/itbMCu0sFWKSDjVR1nCfWhcBavXtqp8 zfUkHx5C3z8k3bZxsuHCBe1EuqHkfnQCbRLs8pEgN1T9lD4OSMbiLbC+0cvavrgN hQ3//6RxMjyLKMXtiff9eiGRRtDTX7e6 -----END CERTIFICATE-----Generated at Sun May 11 05:21:31 2025 by rpki-client