$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa File: d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa (raw, json) Hash identifier: zGBOYemoa+bCJU3dKAByJwJl7lE2Izr+Zyn6PiXRuSc= Subject key identifier: F1:7A:6A:99:DC:C4:CD:89:22:3D:BB:4B:AD:DD:EC:B0:17:B9:07:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1ECBF4BE484284B57340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396608 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1e:cb:f4:be:48:42:84:b5:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=adb5990c-98a2-4ee3-8d51-200fecb85872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:1f:61:9a:36:8c:95:97:05:37:4d:ba:d1: f8:5a:4d:67:6a:84:e1:9e:ed:e9:89:07:43:1b:90: 78:90:82:98:f6:9d:70:73:4a:7a:74:6a:48:34:9c: f5:a9:7a:d7:1b:8a:a9:0f:34:7b:97:0a:8b:ff:e3: 60:13:96:4a:b7:31:17:0b:a3:51:e3:f7:a7:dd:c8: d8:77:56:0a:0e:c2:ea:28:99:5b:45:d7:dd:c6:a8: df:6c:23:97:92:63:47:5c:e2:15:48:d3:fc:7d:fd: 4f:87:2a:fb:f3:fb:82:61:a4:dc:20:24:c3:b9:dd: f8:6b:8a:87:8a:44:ac:7b:0b:d7:b3:68:9f:01:3d: b6:2d:be:13:79:b3:59:87:8a:da:8d:41:a6:3a:43: c7:df:ea:8d:01:82:bc:c9:3a:d2:a5:70:25:c2:8c: 1a:0f:7e:11:6f:be:63:24:33:f1:9f:df:89:6e:57: 49:25:b3:78:26:d5:32:cc:2f:05:48:ca:4e:84:03: ae:17:b2:02:b9:97:11:5a:54:59:c0:01:0b:0f:05: cf:5a:02:67:9f:3b:9e:0e:54:6d:d2:bc:c9:23:fb: fa:fd:49:bf:92:10:62:0f:3a:5e:e4:07:06:09:e3: e8:79:d6:0f:6b:66:cc:c2:03:57:d7:04:3f:5f:49: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:6A:99:DC:C4:CD:89:22:3D:BB:4B:AD:DD:EC:B0:17:B9:07:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b6:a8:50:c9:41:4a:87:0a:06:e4:24:51:52:43:dd:95:2e: 07:2d:eb:a4:0b:10:4c:44:68:b2:fe:f0:41:30:71:ed:fe:a0: af:31:f2:32:53:42:0e:99:51:61:7a:a1:de:93:e0:bc:0a:62: ad:93:6f:c3:ff:99:41:e5:55:ab:72:2a:a0:01:e9:89:cc:55: e9:90:55:eb:41:ff:32:95:99:62:2d:3d:54:fd:d2:ee:c0:b1: f7:82:fe:ad:4a:6f:b8:08:a9:07:ec:e2:d8:f5:79:3a:b9:9f: 58:52:f4:71:f5:51:7e:dd:2b:8b:2e:18:2c:7d:b3:ca:7c:41: 61:3c:b3:72:6e:27:37:0c:05:16:d6:cd:70:4e:df:22:17:cb: c6:27:be:8e:80:3f:81:f7:2b:d5:97:11:27:ae:0f:1f:49:72: a2:92:b1:d6:cb:fc:70:7d:40:88:ca:ba:e4:6d:57:47:c3:c2: e0:bf:a1:9b:4f:fd:f0:52:33:c1:15:8a:de:80:ac:27:c3:82: 35:fd:d1:5f:84:23:26:50:43:13:f9:a2:68:c1:a3:ec:bd:b2: a4:d8:57:3b:64:55:55:42:4c:cd:ad:1f:97:63:07:67:93:4d: 8a:f4:15:17:09:1d:82:21:87:8d:36:55:1e:17:50:20:c2:c4: 82:4a:7e:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh7L9L5IQoS1c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YWRiNTk5MGMtOThhMi00ZWUzLThkNTEtMjAwZmVjYjg1ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9UfYZo2jJWXBTdNutH4Wk1naoThnu3piQdD G5B4kIKY9p1wc0p6dGpINJz1qXrXG4qpDzR7lwqL/+NgE5ZKtzEXC6NR4/en3cjY d1YKDsLqKJlbRdfdxqjfbCOXkmNHXOIVSNP8ff1Phyr78/uCYaTcICTDud34a4qH ikSsewvXs2ifAT22Lb4TebNZh4rajUGmOkPH3+qNAYK8yTrSpXAlwowaD34Rb75j JDPxn9+JbldJJbN4JtUyzC8FSMpOhAOuF7ICuZcRWlRZwAELDwXPWgJnnzueDlRt 0rzJI/v6/Um/khBiDzpe5AcGCePoedYPa2bMwgNX1wQ/X0mJHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPF6apncxM2JIj27S63d7LAXuQetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI3MjVlYmEtMmVlZi0z N2UwLTg5MWUtZWJiN2UwNTQ4YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJtqhQyUFKhwoG5CRRUkPdlS4HLeukCxBMRGiy/vBBMHHt/qCvMfIy U0IOmVFheqHek+C8CmKtk2/D/5lB5VWrciqgAemJzFXpkFXrQf8ylZliLT1U/dLu wLH3gv6tSm+4CKkH7OLY9Xk6uZ9YUvRx9VF+3SuLLhgsfbPKfEFhPLNybic3DAUW 1s1wTt8iF8vGJ76OgD+B9yvVlxEnrg8fSXKikrHWy/xwfUCIyrrkbVdHw8Lgv6Gb T/3wUjPBFYregKwnw4I1/dFfhCMmUEMT+aJowaPsvbKk2Fc7ZFVVQkzNrR+XYwdn k02K9BUXCR2CIYeNNlUeF1AgwsSCSn62 -----END CERTIFICATE-----Generated at Sun May 11 08:15:16 2025 by rpki-client