$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: kJ6SchjK7shPobiXI8RP9aPfCDiJu6Cu4McJRQ+HhO8= Subject key identifier: 61:AB:37:6A:48:AF:4F:6A:E0:CA:3B:B9:A8:92:57:BA:48:6C:A8:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A25C6B86B41E9753E8400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:25:c6:b8:6b:41:e9:75:3e:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=11260a44-3156-412b-b5c5-2167d9814cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:08:fc:e6:e3:2b:fb:e4:14:b3:11:b0:85: 39:58:09:1e:83:bc:95:79:0c:d1:82:50:67:e1:89: 2a:11:65:ce:12:7d:27:af:cf:f7:09:79:73:56:bc: a4:ca:8e:ef:30:33:1c:26:23:81:4e:56:6e:d8:ac: 98:00:f7:bb:41:24:1e:8b:05:4e:7d:cc:d7:eb:06: 8b:81:c6:02:f1:ce:8d:aa:59:e4:7b:48:51:94:7d: 0a:43:03:d8:28:e0:4f:94:75:1a:88:85:bf:b1:82: e7:0b:b3:c1:5a:9b:59:dd:dd:ab:1b:ea:33:7d:68: 3e:db:07:58:f6:97:99:14:8d:7c:2d:3d:3c:57:1d: 0c:2f:f3:0d:68:2f:7a:48:b7:14:3a:e6:d2:92:5f: 34:d5:0e:62:c3:ca:3b:d2:93:ed:5f:ab:1c:9e:38: e8:43:21:ab:92:2f:2c:8b:ab:b5:cd:6a:8a:f2:c3: 99:8e:e1:75:5b:c1:4d:de:15:f9:c4:49:f0:1e:88: 20:81:62:f0:c8:b9:a0:c1:e6:0e:7e:e6:41:88:a5: 58:6c:73:1d:ca:3a:e8:f6:a6:55:59:e6:35:40:dc: b0:cb:d5:4d:6a:77:76:30:30:99:9f:2a:57:0b:b6: 3a:21:bc:1c:d3:df:ee:32:14:e8:be:1f:ef:bb:ba: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AB:37:6A:48:AF:4F:6A:E0:CA:3B:B9:A8:92:57:BA:48:6C:A8:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:eb:c0:ec:e8:91:86:4a:a9:75:26:9c:64:0d:e9:68:1e:bf: 2c:94:0a:22:d7:30:ab:77:51:3a:c0:3d:54:ba:17:b1:73:01: d4:c0:86:2d:79:35:76:a0:4a:5e:0a:69:a9:7d:0f:37:5e:6f: b9:f3:b7:b0:88:e2:ec:3e:02:a8:49:50:c0:4b:55:f8:f5:d1: 12:44:bf:4f:7a:99:b5:b2:38:5c:9d:83:1a:22:39:c5:ef:3a: 5b:72:7b:a1:60:25:fa:65:2b:62:a0:04:05:a9:2c:4e:fa:f6: 17:b1:08:f9:a0:a9:e1:1e:66:53:7f:a6:0e:dd:a1:45:cd:a3: a3:1d:a4:ff:41:ed:1f:20:5b:52:e7:9e:f3:7d:bc:b8:f1:5e: 52:24:4c:a7:d4:e2:1f:9e:fd:34:4f:e4:dd:b1:61:b8:8d:f0: d1:10:53:7d:17:c1:4c:95:33:35:f5:12:f5:8d:f4:cd:ea:6e: 60:14:cd:96:53:0f:62:7c:ed:33:a6:af:44:52:2b:d5:e9:77: d7:ba:23:14:7c:0f:c7:ed:ad:21:44:ec:87:1c:a9:2d:22:24: 33:6b:13:5f:2b:55:57:b0:55:fb:16:9f:a1:5e:13:9b:55:43: b7:75:59:4a:7b:09:1e:f5:68:f5:6c:3d:61:60:63:ad:65:88: cf:89:28:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiXGuGtB6XU+hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTEyNjBhNDQtMzE1Ni00MTJiLWI1YzUtMjE2N2Q5ODE0Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTII/ObjK/vkFLMRsIU5WAkeg7yVeQzRglBn 4YkqEWXOEn0nr8/3CXlzVrykyo7vMDMcJiOBTlZu2KyYAPe7QSQeiwVOfczX6waL gcYC8c6Nqlnke0hRlH0KQwPYKOBPlHUaiIW/sYLnC7PBWptZ3d2rG+ozfWg+2wdY 9peZFI18LT08Vx0ML/MNaC96SLcUOubSkl801Q5iw8o70pPtX6scnjjoQyGrki8s i6u1zWqK8sOZjuF1W8FN3hX5xEnwHogggWLwyLmgweYOfuZBiKVYbHMdyjro9qZV WeY1QNywy9VNand2MDCZnypXC7Y6Ibwc09/uMhTovh/vu7qWeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGGrN2pIr09q4Mo7uaiSV7pIbKg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs68Ds6JGGSql1JpxkDeloHr8slAoi1zCrd1E6wD1UuhexcwHUwIYt eTV2oEpeCmmpfQ83Xm+587ewiOLsPgKoSVDAS1X49dESRL9Pepm1sjhcnYMaIjnF 7zpbcnuhYCX6ZStioAQFqSxO+vYXsQj5oKnhHmZTf6YO3aFFzaOjHaT/Qe0fIFtS 557zfby48V5SJEyn1OIfnv00T+TdsWG4jfDREFN9F8FMlTM19RL1jfTN6m5gFM2W Uw9ifO0zpq9EUivV6XfXuiMUfA/H7a0hROyHHKktIiQzaxNfK1VXsFX7Fp+hXhOb VUO3dVlKewke9Wj1bD1hYGOtZYjPiSj6 -----END CERTIFICATE-----Generated at Sun May 11 05:28:09 2025 by rpki-client