$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa File: eda64886-9941-3fb3-b88a-e697a40b6a40.roa (raw, json) Hash identifier: VvX5KsWzmgPMyRc4iudF/0kPSGendmTwMAiVLRVv7NM= Subject key identifier: BF:72:96:E8:D1:4E:B8:B1:37:7E:F6:0C:B2:20:D6:F3:CB:8D:9C:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A238F23A8C50421EFA880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396566 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:23:8f:23:a8:c5:04:21:ef:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=ae09803c-2bb5-4e18-88dc-c19be162c911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:c0:28:52:7b:f0:17:63:8b:0b:83:95:e7: 99:68:f0:d4:32:19:b3:65:92:36:7e:5f:6d:e5:61: eb:2c:4c:fd:80:a0:e0:18:67:41:43:3a:fa:ec:ea: 7f:51:32:50:7d:eb:bb:cf:41:52:9c:7b:cf:ef:df: b7:ae:56:9e:5d:a5:6c:51:7b:d1:1e:c1:7a:fb:a0: 6c:a0:92:3b:76:6e:e4:22:44:24:fb:cc:fd:45:5f: 10:31:1c:02:2c:ee:c8:2b:19:fc:3c:02:b5:7f:5a: 97:17:e1:bf:36:17:c5:09:bd:58:3f:33:2d:3f:c1: 13:a4:50:0d:6f:a7:b8:41:13:06:0b:04:a4:71:d7: 56:d4:da:ca:4f:9e:50:b1:e0:25:fa:e8:a1:63:34: a4:5f:5c:8d:7e:de:98:41:2c:fc:3c:f5:5c:d7:f0: 39:d2:91:e4:a8:10:05:59:e4:dd:99:6d:88:69:04: 4b:16:76:49:95:f4:9d:3a:aa:39:27:44:12:28:0e: 8b:29:18:29:ad:5e:c3:d6:e9:92:e6:6c:ae:47:27: cd:6b:ef:ec:58:f5:58:5d:d0:59:4e:38:ac:16:bd: be:17:da:db:a1:87:2c:66:fe:a7:a2:ee:48:c3:13: 2b:5d:60:0f:c3:9b:46:c4:6b:a5:31:01:6f:ee:4e: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:96:E8:D1:4E:B8:B1:37:7E:F6:0C:B2:20:D6:F3:CB:8D:9C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:3e:02:4e:b1:e7:9c:57:fa:6b:29:f9:29:26:17:89:b4: 3f:28:af:f6:05:65:ba:c3:61:7d:ba:4c:ec:ab:e2:d9:7b:31: 88:65:37:55:e5:4d:0f:63:2c:35:2a:75:f5:01:0b:ee:80:b8: 61:e4:06:98:a5:8f:46:90:0c:1d:fa:c7:d0:43:6f:20:43:fd: d3:c4:50:09:14:11:f7:43:47:45:77:44:8f:bb:84:b9:e9:f7: 16:44:a7:90:0a:37:24:c8:6a:ce:6e:ec:c9:a7:d3:fe:77:c4: 2f:ca:e2:0a:bb:70:cc:42:dd:e1:22:15:17:18:39:15:ce:3f: fd:11:32:02:c1:f3:14:8e:a0:79:24:20:f8:84:dc:81:4b:24: 71:89:18:ee:f1:1f:58:69:15:7b:4f:ff:28:f4:b2:31:f2:e3: 5a:2a:d2:9d:1b:00:c9:55:0b:77:c4:09:57:3a:d2:8b:c1:54: cd:c9:13:25:57:34:47:5d:9f:73:3a:a6:c0:8c:6c:23:02:b2: 23:f1:1f:89:a0:74:c0:66:9a:b7:06:9a:1b:4c:5b:2c:08:f7: f0:6d:8a:95:eb:9f:b9:b0:be:f5:c2:fd:6a:9d:b9:82:e0:4c: ae:3b:b8:f5:9f:43:1b:98:41:9e:2b:77:1a:d6:ca:2d:5e:47: 7b:2d:3f:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiOPI6jFBCHvqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YWUwOTgwM2MtMmJiNS00ZTE4LTg4ZGMtYzE5YmUxNjJjOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQfAKFJ78BdjiwuDleeZaPDUMhmzZZI2fl9t 5WHrLEz9gKDgGGdBQzr67Op/UTJQfeu7z0FSnHvP79+3rlaeXaVsUXvRHsF6+6Bs oJI7dm7kIkQk+8z9RV8QMRwCLO7IKxn8PAK1f1qXF+G/NhfFCb1YPzMtP8ETpFAN b6e4QRMGCwSkcddW1NrKT55QseAl+uihYzSkX1yNft6YQSz8PPVc1/A50pHkqBAF WeTdmW2IaQRLFnZJlfSdOqo5J0QSKA6LKRgprV7D1umS5myuRyfNa+/sWPVYXdBZ TjisFr2+F9rboYcsZv6nou5IwxMrXWAPw5tGxGulMQFv7k6ggQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL9ylujRTrixN372DLIg1vPLjZwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRhNjQ4ODYtOTk0MS0z ZmIzLWI4OGEtZTY5N2E0MGI2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAy5z4CTrHnnFf6ayn5KSYXibQ/KK/2BWW6w2F9ukzsq+LZezGIZTdV 5U0PYyw1KnX1AQvugLhh5AaYpY9GkAwd+sfQQ28gQ/3TxFAJFBH3Q0dFd0SPu4S5 6fcWRKeQCjckyGrObuzJp9P+d8QvyuIKu3DMQt3hIhUXGDkVzj/9ETICwfMUjqB5 JCD4hNyBSyRxiRju8R9YaRV7T/8o9LIx8uNaKtKdGwDJVQt3xAlXOtKLwVTNyRMl VzRHXZ9zOqbAjGwjArIj8R+JoHTAZpq3BpobTFssCPfwbYqV65+5sL71wv1qnbmC 4EyuO7j1n0MbmEGeK3ca1sotXkd7LT+Q -----END CERTIFICATE-----Generated at Sun May 11 05:33:46 2025 by rpki-client