$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa File: e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa (raw, json) Hash identifier: 5hp8/Vzephp8wuwsq2Mx5Uzfhbv/Panvg8p0Krg3PiQ= Subject key identifier: 04:5C:DF:19:AE:9A:EE:9A:6A:12:08:58:85:E0:5C:49:6C:CF:C4:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F562C8DC513A891C860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396572 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:56:2c:8d:c5:13:a8:91:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=eaa385cd-d291-458a-993f-4d3bbb836d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:d0:9e:c7:24:4d:62:f2:53:42:66:b1:60: ec:b5:8f:90:83:fc:1e:d2:e6:70:4a:ef:97:43:a1: d2:97:76:76:53:03:b3:af:68:82:bc:76:f6:9a:3d: 21:23:91:91:cb:e2:59:4b:92:83:2b:17:3a:63:56: 4c:cf:db:4d:23:90:16:37:d7:32:20:00:7c:38:b4: f4:ed:9a:45:6d:09:31:69:29:99:09:0d:b9:69:a4: e3:40:46:dc:ae:a4:f6:da:4a:f2:2c:df:d5:55:68: f8:81:97:d8:71:aa:81:05:e9:9f:b5:66:2c:b9:6a: ed:fc:d9:d7:63:31:96:43:98:8b:86:60:09:ad:bc: 25:e9:ff:8c:69:6b:fb:6c:d5:10:75:e9:2c:4a:08: db:e0:29:eb:34:c7:c6:cd:06:57:6a:3d:25:07:bd: 53:ec:1b:0a:f5:49:64:68:72:59:88:7f:1e:70:a1: a9:5c:9b:af:c5:ae:49:c1:e7:7d:3f:18:e8:2f:4d: d9:e5:ea:ff:3e:8e:c2:92:5a:ba:bf:ed:bb:35:4d: a4:35:93:c9:e8:1e:6d:9a:5a:57:56:df:d6:df:3a: 55:9a:bc:28:ef:d8:1a:c1:b2:25:42:7e:84:7b:d5: e5:84:ea:30:08:77:c9:82:dc:9c:b0:4a:05:46:50: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5C:DF:19:AE:9A:EE:9A:6A:12:08:58:85:E0:5C:49:6C:CF:C4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:93:ab:b4:64:7c:58:e4:8b:f1:49:af:79:66:6f:bb:06:63: 06:bf:ca:da:53:c3:ca:ba:68:d8:28:78:3f:29:3d:7d:77:1c: c3:0d:a6:98:57:d3:8a:2c:71:d6:c3:43:86:27:b4:06:1a:19: 22:01:c9:9f:de:4d:a5:12:3e:98:a4:b4:e9:53:71:7c:ef:42: d1:91:2d:6b:1f:0a:65:dc:19:3e:5a:57:cd:17:25:55:59:ec: fb:57:34:fe:56:f0:50:4a:49:1d:a8:e0:c8:66:27:fc:86:ef: 5d:83:43:cb:c7:61:92:4f:e1:32:8b:5d:84:9a:57:10:2c:6a: 43:a5:a7:7d:b3:67:e2:eb:7c:03:81:76:b4:5c:15:12:d6:c0: d4:7d:8b:51:bd:16:4f:4f:5c:31:13:84:13:de:37:a4:33:a8: 62:c7:d4:e1:28:91:11:e3:f0:12:7a:fb:6a:0e:42:49:99:82: d6:fb:f9:25:97:f8:4c:a5:ec:1d:5a:6c:0e:cd:95:56:94:8a: eb:a0:4f:17:c1:6e:40:6f:81:3b:82:56:01:94:fd:6c:64:96: 80:0f:6b:60:2b:40:d3:7c:76:ca:2f:b7:24:cf:b8:f7:c0:fb: 1d:df:43:6b:00:02:41:8c:98:b4:43:53:ce:63:18:19:c0:1a: bb:9e:0f:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh9WLI3FE6iRyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWFhMzg1Y2QtZDI5MS00NThhLTk5M2YtNGQzYmJiODM2ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnenQnsckTWLyU0JmsWDstY+Qg/we0uZwSu+X Q6HSl3Z2UwOzr2iCvHb2mj0hI5GRy+JZS5KDKxc6Y1ZMz9tNI5AWN9cyIAB8OLT0 7ZpFbQkxaSmZCQ25aaTjQEbcrqT22kryLN/VVWj4gZfYcaqBBemftWYsuWrt/NnX YzGWQ5iLhmAJrbwl6f+MaWv7bNUQdeksSgjb4CnrNMfGzQZXaj0lB71T7BsK9Ulk aHJZiH8ecKGpXJuvxa5Jwed9PxjoL03Z5er/Po7Cklq6v+27NU2kNZPJ6B5tmlpX Vt/W3zpVmrwo79gawbIlQn6Ee9XlhOowCHfJgtycsEoFRlBWrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFARc3xmumu6aahIIWIXgXElsz8TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTk4N2QxZTQtMmZlOC0z YjU5LWE5MjAtYjkwZTEzYzBkNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEk6u0ZHxY5IvxSa95Zm+7BmMGv8raU8PKumjYKHg/KT19dxzDDaaY V9OKLHHWw0OGJ7QGGhkiAcmf3k2lEj6YpLTpU3F870LRkS1rHwpl3Bk+WlfNFyVV Wez7VzT+VvBQSkkdqODIZif8hu9dg0PLx2GST+Eyi12EmlcQLGpDpad9s2fi63wD gXa0XBUS1sDUfYtRvRZPT1wxE4QT3jekM6hix9ThKJER4/ASevtqDkJJmYLW+/kl l/hMpewdWmwOzZVWlIrroE8XwW5Ab4E7glYBlP1sZJaAD2tgK0DTfHbKL7ckz7j3 wPsd30NrAAJBjJi0Q1POYxgZwBq7ng8F -----END CERTIFICATE-----Generated at Sun May 11 08:18:07 2025 by rpki-client