$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa File: f2baeceb-30e7-3132-8913-0bc27a70dc75.roa (raw, json) Hash identifier: ZSvCYdHTfawdrdoB1IHcBnUsAtFbMnffzFjVe1e7ncc= Subject key identifier: 30:FD:F9:A9:26:F7:8E:80:F8:74:68:96:5A:40:A7:94:73:A1:C1:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A255ADC7ED26A747A6200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396581 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:5a:dc:7e:d2:6a:74:7a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=ec05b0c2-7e79-436f-84fe-755d0c21218e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:86:dc:7b:1d:bf:33:0b:55:ce:f5:12:9d: 14:d1:d6:47:67:01:89:2a:5a:9d:30:3e:06:9c:79: ad:8d:8a:02:26:17:00:43:4b:7a:66:20:d1:64:12: 45:f8:b5:6b:8d:af:c4:93:06:ba:ed:73:02:6a:ca: d0:12:37:bf:a0:ed:cd:c1:a6:dd:07:47:37:40:37: 96:25:12:c2:22:ac:ed:28:63:03:4a:7f:4b:3d:d3: d6:3c:ab:95:3e:a8:5d:b3:5f:6d:0e:48:c3:33:0e: 4d:70:3d:69:b3:4b:fd:29:fe:64:f1:1b:af:96:65: 35:77:4d:4f:b2:96:71:70:ac:2e:db:33:ba:a3:13: ed:dd:50:ee:4e:3d:31:1b:9a:2f:0e:a8:ff:9e:2d: c9:ab:51:66:83:79:c8:2d:a2:a5:63:69:e2:d4:4a: 8d:ed:16:af:15:11:ac:b7:c4:c8:59:ea:01:b2:41: 68:77:c0:e6:07:97:33:f9:0f:3e:f1:4b:83:35:69: 56:80:a0:fb:0f:a6:29:52:d0:e9:59:a7:fd:4c:0c: aa:c8:52:e6:ff:bd:cd:d7:47:2a:0d:a6:d7:fd:5c: 4e:08:77:92:ff:c7:b1:09:fb:0c:30:d8:14:d1:43: 14:f0:91:63:a4:ad:a5:14:6c:da:b7:dd:6f:21:0c: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:F9:A9:26:F7:8E:80:F8:74:68:96:5A:40:A7:94:73:A1:C1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9a:e2:02:2a:9c:75:d6:89:0c:04:31:f0:ac:df:64:53:e6: 6c:65:32:ef:66:ed:85:90:b4:a2:26:70:b5:79:9d:d8:0e:ae: e9:20:06:0e:70:0b:ba:9a:b3:b1:77:8c:60:6f:cb:6a:da:fe: 15:10:fa:64:9c:76:4d:23:3b:de:3e:07:52:6f:a8:af:b2:dd: 66:57:67:01:c0:a1:61:22:34:26:1b:0b:64:e3:e7:83:bb:23: 18:2d:3a:92:f3:a6:1b:cd:e7:1e:af:3d:ab:0c:e4:5c:34:09: 1f:ab:7e:0c:1d:f4:b3:ab:a0:a7:a0:f3:1a:b7:d0:04:c2:31: 5c:9e:94:1a:c7:79:e0:61:fe:72:5b:bc:73:c2:83:20:88:02: 57:ab:ab:4d:8f:4c:5d:e2:50:2e:d3:ee:db:55:06:4c:2c:ad: ae:6e:e7:9a:af:9b:01:54:36:68:ec:36:77:af:22:86:fd:42: 43:6d:b9:cd:1e:28:2b:aa:d6:a2:af:59:62:88:e1:5d:e4:f9: 8c:83:30:3a:0b:4d:d8:78:63:d1:38:2e:c5:24:a4:0d:20:3e: d8:d9:85:29:8a:ca:e5:d7:7a:34:08:ce:38:a8:b5:af:a7:a4: f1:11:c3:b6:6c:fe:28:f1:8e:3f:c6:95:57:67:b4:06:31:18: 1f:27:37:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiVa3H7SanR6YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWMwNWIwYzItN2U3OS00MzZmLTg0ZmUtNzU1ZDBjMjEyMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYiG3HsdvzMLVc71Ep0U0dZHZwGJKlqdMD4G nHmtjYoCJhcAQ0t6ZiDRZBJF+LVrja/Ekwa67XMCasrQEje/oO3NwabdB0c3QDeW JRLCIqztKGMDSn9LPdPWPKuVPqhds19tDkjDMw5NcD1ps0v9Kf5k8RuvlmU1d01P spZxcKwu2zO6oxPt3VDuTj0xG5ovDqj/ni3Jq1Fmg3nILaKlY2ni1EqN7RavFRGs t8TIWeoBskFod8DmB5cz+Q8+8UuDNWlWgKD7D6YpUtDpWaf9TAyqyFLm/73N10cq DabX/VxOCHeS/8exCfsMMNgU0UMU8JFjpK2lFGzat91vIQzbuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDD9+akm946A+HRollpAp5RzocGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJiYWVjZWItMzBlNy0z MTMyLTg5MTMtMGJjMjdhNzBkYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABmuICKpx11okMBDHwrN9kU+ZsZTLvZu2FkLSiJnC1eZ3YDq7pIAYO cAu6mrOxd4xgb8tq2v4VEPpknHZNIzvePgdSb6ivst1mV2cBwKFhIjQmGwtk4+eD uyMYLTqS86Ybzecerz2rDORcNAkfq34MHfSzq6CnoPMat9AEwjFcnpQax3ngYf5y W7xzwoMgiAJXq6tNj0xd4lAu0+7bVQZMLK2ubuear5sBVDZo7DZ3ryKG/UJDbbnN Higrqtair1liiOFd5PmMgzA6C03YeGPROC7FJKQNID7Y2YUpisrl13o0CM44qLWv p6TxEcO2bP4o8Y4/xpVXZ7QGMRgfJzfr -----END CERTIFICATE-----Generated at Sun May 11 05:48:21 2025 by rpki-client