$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa File: d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa (raw, json) Hash identifier: lz2T8nnArcjMjCmzzOoR2Y3alVMnQ5zXNfgKueUvizA= Subject key identifier: 9F:80:41:F1:6B:A8:5A:CF:1D:E3:F6:F8:69:0C:B6:13:37:AB:E6:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F492F67799043273200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397197 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:49:2f:67:79:90:43:27:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a1c2a48e-7438-46ec-a0c2-618cf04b6ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:60:28:a6:f5:13:51:7f:3d:84:b4:3f:5c: 76:9c:3a:40:fe:1f:3a:21:77:29:fc:fc:fb:bb:ee: 93:3f:16:83:6b:b3:6d:5a:09:d8:c7:d3:9d:47:8a: 14:5e:00:ec:45:0e:d1:c6:a6:ba:82:6a:ad:f6:d6: 8d:f2:25:d5:be:41:0e:dd:f1:bc:f6:b9:da:2a:f5: e9:18:7a:ee:59:e7:01:e0:17:6b:cf:e7:03:6b:2f: c3:70:18:19:e2:22:83:1e:45:9e:92:9a:01:0d:b0: fb:48:14:3e:f4:1c:d0:00:d9:88:83:47:a0:fc:2b: 24:24:1b:c4:ed:cb:a7:11:15:89:99:48:ce:e9:ed: e3:13:35:8f:09:ac:fc:fc:18:61:1d:b7:c3:26:b3: 8a:cf:e8:bf:18:a2:b9:76:ef:21:b9:70:98:c6:55: d3:80:65:e1:22:cc:3c:ca:18:34:2c:d8:6d:a7:ec: 5d:c0:25:20:32:dd:5e:9b:d2:d2:83:14:b8:08:7e: 9c:68:91:b9:c6:61:9f:16:8d:16:74:a9:28:57:4b: c1:2b:68:37:de:5f:61:4f:56:2a:76:d1:3f:c7:42: 53:95:34:0f:48:fa:5c:a5:1e:13:d2:46:9f:61:7e: df:92:bd:0f:f2:54:2c:5f:54:0b:aa:e8:7b:7c:0b: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:41:F1:6B:A8:5A:CF:1D:E3:F6:F8:69:0C:B6:13:37:AB:E6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a1:22:a6:c3:05:57:bc:b1:f9:d9:1f:6b:3f:cc:28:42:57: 57:f1:a1:0b:77:8b:ce:5a:5d:66:7d:4e:8b:b5:71:c9:08:82: a6:1c:06:ab:15:f9:fb:53:b0:2b:3c:f9:17:2e:68:f9:28:af: 24:8b:50:95:78:eb:4e:41:88:be:aa:ef:1b:65:6c:9f:d8:2a: 19:13:08:37:00:9e:3b:51:9f:25:a5:24:94:93:86:c3:f4:50: 9b:6a:9c:ff:65:1a:6e:b2:25:1d:6c:22:67:85:c4:1e:2a:7b: 73:3d:ec:00:aa:df:14:8a:6c:6e:57:f7:8d:77:49:19:60:a8: 42:1d:cd:42:86:a0:1e:ce:6d:17:94:49:12:e0:80:e5:12:fe: aa:14:a3:0f:68:c2:7c:1c:78:76:17:e7:9b:62:6b:e6:df:10: f5:10:27:3a:d8:fc:aa:8a:b7:3f:e4:5f:0c:b7:8d:17:e5:0d: c6:6f:bd:a9:c3:ee:91:12:ff:cc:c2:5b:dd:f9:1e:02:5f:81: be:6a:70:a4:3d:c2:82:2c:f2:f1:16:3e:ce:7b:2a:f1:d1:68: b2:ec:b5:45:2e:43:b5:be:86:a7:9d:b0:b6:3c:15:5e:c2:16: 90:9f:98:0c:05:db:73:85:e7:fe:b2:b3:17:e8:5a:19:a3:05: 4d:3a:c0:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh9JL2d5kEMnMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTFjMmE0OGUtNzQzOC00NmVjLWEwYzItNjE4Y2YwNGI2ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJBgKKb1E1F/PYS0P1x2nDpA/h86IXcp/Pz7 u+6TPxaDa7NtWgnYx9OdR4oUXgDsRQ7Rxqa6gmqt9taN8iXVvkEO3fG89rnaKvXp GHruWecB4Bdrz+cDay/DcBgZ4iKDHkWekpoBDbD7SBQ+9BzQANmIg0eg/CskJBvE 7cunERWJmUjO6e3jEzWPCaz8/BhhHbfDJrOKz+i/GKK5du8huXCYxlXTgGXhIsw8 yhg0LNhtp+xdwCUgMt1em9LSgxS4CH6caJG5xmGfFo0WdKkoV0vBK2g33l9hT1Yq dtE/x0JTlTQPSPpcpR4T0kafYX7fkr0P8lQsX1QLquh7fAsIEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+AQfFrqFrPHeP2+GkMthM3q+YvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBhNmY2OWItYzc5ZS0z YWE2LWEyOWYtZTE2NTU3YmU4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+oSKmwwVXvLH52R9rP8woQldX8aELd4vOWl1mfU6LtXHJCIKmHAar Ffn7U7ArPPkXLmj5KK8ki1CVeOtOQYi+qu8bZWyf2CoZEwg3AJ47UZ8lpSSUk4bD 9FCbapz/ZRpusiUdbCJnhcQeKntzPewAqt8UimxuV/eNd0kZYKhCHc1ChqAezm0X lEkS4IDlEv6qFKMPaMJ8HHh2F+ebYmvm3xD1ECc62Pyqirc/5F8Mt40X5Q3Gb72p w+6REv/Mwlvd+R4CX4G+anCkPcKCLPLxFj7Oeyrx0Wiy7LVFLkO1voannbC2PBVe whaQn5gMBdtzhef+srMX6FoZowVNOsA9 -----END CERTIFICATE-----Generated at Sun May 11 05:22:24 2025 by rpki-client