$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa File: ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa (raw, json) Hash identifier: PNn6os2uBkluKs3JdqQAxdKhI2xERuW6LDgFjJ0ADyM= Subject key identifier: 84:0D:88:40:01:23:46:DE:61:5C:1C:DA:0D:F1:8F:7E:F1:C3:31:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1EE9355E7B952C5F3568 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396585 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1e:e9:35:5e:7b:95:2c:5f:35:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=8ab26100-da89-49e0-84b1-144729c6b767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:29:db:1f:06:c4:97:19:bc:d0:fb:2d:72:32: 24:f3:a4:f8:de:d7:3c:f3:f6:2f:ed:1b:5e:ae:62: 0a:c8:0e:ee:91:2d:6e:c2:7d:f7:fa:c1:a7:b2:8b: 3c:7d:44:63:71:ae:68:02:69:83:e2:8d:02:18:14: a7:54:33:fe:71:30:31:1d:37:c2:a6:d3:65:e4:12: 37:7a:7a:87:55:a2:11:0c:69:3a:01:58:8c:9b:36: ec:1f:29:68:01:c9:d1:f8:ff:90:82:f8:76:9c:4a: 2b:0f:19:61:31:61:93:35:08:b0:c9:5f:87:eb:42: ae:76:2c:21:09:0a:ea:db:66:87:e2:54:ee:50:e7: 61:6c:03:8a:04:7b:49:78:6a:8f:bb:e1:7b:3b:5a: 22:78:f5:3f:18:54:d3:70:8f:bf:e8:27:d4:15:7f: a5:f1:7b:ea:1e:4e:1e:6a:d6:0e:74:fa:00:82:8e: 02:a5:ab:49:c2:02:c0:1d:60:3b:8c:a5:fc:b0:1c: f4:dc:b4:74:1d:26:ab:2f:d4:10:54:2f:f5:4e:ac: e0:d3:03:2a:a5:43:f3:2e:9b:5e:16:82:06:d4:5a: a8:d1:5d:9a:4b:50:d0:35:ce:09:0c:bb:74:39:dd: 12:7e:d2:4c:5d:ca:71:ed:57:3c:92:c2:4c:6c:a3: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:88:40:01:23:46:DE:61:5C:1C:DA:0D:F1:8F:7E:F1:C3:31:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8f:68:1a:73:90:02:fa:13:5e:35:37:f3:08:2c:56:a9:e1: 5d:ec:65:a2:10:39:db:da:0c:9c:f1:2a:d9:34:49:df:f3:08: 6c:e4:3b:66:04:ce:d9:46:7a:a3:46:6c:9c:24:55:eb:06:4a: 43:af:a0:64:5b:af:9b:c4:ba:b2:bf:71:66:a2:86:36:75:78: 82:b8:cc:1a:9d:ff:6b:fa:20:ee:28:45:37:a8:4f:65:4b:12: 8f:fc:a8:f3:3d:07:77:bd:3e:d0:69:fb:bb:74:67:fb:ea:86: 9c:52:1a:88:d2:88:32:02:7e:94:8b:78:8c:6a:be:08:02:9b: 98:ba:09:e2:40:70:f1:27:78:f6:d8:ed:3f:5a:26:46:d4:3c: 9c:d8:45:06:23:1e:60:92:7d:ee:1d:ae:50:b1:18:77:bc:29: 2a:6c:1c:e6:69:47:92:f9:a7:53:e6:d1:c8:7b:8c:b7:65:de: bf:49:93:a6:11:78:67:7a:f8:f6:11:60:3c:e8:08:e1:28:e7: 79:93:78:99:ec:c2:77:95:1f:23:5b:58:0b:35:4a:94:47:8e: 15:94:2c:6a:8f:de:37:96:c1:2d:ea:f9:6d:e2:f1:af:f3:d5: 8c:17:ee:36:ac:85:df:71:70:5f:68:ed:6c:64:bc:66:0a:3e: 67:85:2c:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh7pNV57lSxfNWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OGFiMjYxMDAtZGE4OS00OWUwLTg0YjEtMTQ0NzI5YzZiNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SnbHwbElxm80PstcjIk86T43tc88/Yv7Rte rmIKyA7ukS1uwn33+sGnsos8fURjca5oAmmD4o0CGBSnVDP+cTAxHTfCptNl5BI3 enqHVaIRDGk6AViMmzbsHyloAcnR+P+Qgvh2nEorDxlhMWGTNQiwyV+H60Kudiwh CQrq22aH4lTuUOdhbAOKBHtJeGqPu+F7O1oiePU/GFTTcI+/6CfUFX+l8XvqHk4e atYOdPoAgo4CpatJwgLAHWA7jKX8sBz03LR0HSarL9QQVC/1Tqzg0wMqpUPzLpte FoIG1Fqo0V2aS1DQNc4JDLt0Od0SftJMXcpx7Vc8ksJMbKMxmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIQNiEABI0beYVwc2g3xj37xwzELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWJlMzhiNjgtYTJmNC0z NGExLWJkNGEtOWMzODhjNDAxMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAij2gac5AC+hNeNTfzCCxWqeFd7GWiEDnb2gyc8SrZNEnf8whs5Dtm BM7ZRnqjRmycJFXrBkpDr6BkW6+bxLqyv3FmooY2dXiCuMwanf9r+iDuKEU3qE9l SxKP/KjzPQd3vT7Qafu7dGf76oacUhqI0ogyAn6Ui3iMar4IApuYugniQHDxJ3j2 2O0/WiZG1Dyc2EUGIx5gkn3uHa5QsRh3vCkqbBzmaUeS+adT5tHIe4y3Zd6/SZOm EXhnevj2EWA86AjhKOd5k3iZ7MJ3lR8jW1gLNUqUR44VlCxqj943lsEt6vlt4vGv 89WMF+42rIXfcXBfaO1sZLxmCj5nhSwn -----END CERTIFICATE-----Generated at Sun May 11 05:30:33 2025 by rpki-client