$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa File: ffaf012d-2e1a-3583-938a-62a834478f3d.roa (raw, json) Hash identifier: oZEi4i6+ulYtxF1eWMJuUIoV5dBhIcJl1EIVeRRFKdo= Subject key identifier: 52:DE:2A:E4:FC:BE:EA:12:EA:58:CC:BF:39:4A:1B:5E:63:DF:A7:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1EF979DA245F6282EE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36625 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1e:f9:79:da:24:5f:62:82:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=076ce209-c204-4e54-aca4-846f883fb4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:9d:f9:6c:fb:03:a4:8d:14:19:aa:86:dd: 12:09:7e:81:ae:01:76:95:ae:05:cd:20:77:34:c8: 5b:f1:da:0a:69:8d:82:5f:c8:71:a6:09:de:ba:c1: 7d:8c:cf:cc:19:37:86:4d:72:c8:17:81:81:df:80: 57:4e:24:1c:74:32:93:bd:9a:b6:a7:6c:d1:c6:90: 75:ec:9f:c8:c9:14:00:78:d0:bd:32:60:86:9a:6a: 61:7a:e8:71:fc:94:e1:55:b8:87:3c:8d:08:06:74: 9e:1f:d8:1a:ef:30:65:4d:9f:41:a3:33:08:1b:c6: 44:6d:0c:8a:6f:0d:de:45:d4:bd:7d:6f:db:98:0c: 95:c3:b3:ea:1e:5b:ef:e5:81:98:41:51:f0:e6:d8: 72:ed:f7:9c:6b:91:7c:e9:e7:d9:6c:d0:c7:80:66: 1d:75:59:8c:4f:44:56:95:bb:3b:b6:40:de:04:fd: c8:2c:d8:db:01:61:85:ae:7a:dd:f6:ba:81:25:93: 46:d8:59:05:f7:3d:73:3f:4e:82:13:63:65:8a:a0: 39:44:24:4a:87:14:8c:2f:5a:67:a2:ea:af:2c:9b: e0:a9:74:ef:64:cf:86:11:ae:9f:36:a3:59:f2:5b: b5:35:d0:e8:52:8e:f9:b2:35:eb:0d:b5:7b:da:25: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DE:2A:E4:FC:BE:EA:12:EA:58:CC:BF:39:4A:1B:5E:63:DF:A7:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:f8:67:67:96:d4:a0:83:ed:c0:b2:31:8b:10:f4:3a:67: a1:80:59:b3:db:4d:7a:d4:f9:0f:64:97:8f:83:1e:71:0f:4c: 6d:92:30:51:8d:79:06:11:a7:44:4a:47:dc:cb:64:b0:fa:bd: 7d:4f:a0:ad:d7:2e:ea:70:4e:fe:2d:4d:cb:b6:29:4b:f6:99: e9:30:66:66:29:aa:a3:63:7c:a8:3a:2c:95:40:f3:e7:02:a3: f9:bc:c6:13:fa:a0:e8:37:1c:15:dc:37:fe:a9:7a:c4:d1:c4: 6a:2f:3f:17:7b:bd:d4:ca:e5:7d:92:a9:c0:07:6f:90:ba:2d: f5:f9:05:12:fe:15:f7:75:44:34:ed:2e:04:ba:25:85:51:47: b4:ab:41:25:81:41:7c:3f:02:3a:3c:ae:f6:20:27:c3:be:fc: aa:2f:43:0c:6d:70:8c:fe:83:a1:b6:fb:da:82:29:94:36:32: be:a6:08:c2:ad:d6:87:11:9d:2c:a4:fe:f4:80:37:db:b4:ff: b2:8a:c7:ec:47:bb:c8:93:66:46:e2:49:94:f1:6e:a4:17:9e: 4a:a1:f8:1d:c4:d4:77:a8:74:f9:83:2e:0f:7a:1c:45:a8:91: 2a:e1:33:e4:6e:43:bc:a2:66:09:ce:ba:e7:af:17:07:51:20: e1:04:0a:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh75edokX2KC7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDc2Y2UyMDktYzIwNC00ZTU0LWFjYTQtODQ2Zjg4M2ZiNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2d+Wz7A6SNFBmqht0SCX6BrgF2la4FzSB3 NMhb8doKaY2CX8hxpgneusF9jM/MGTeGTXLIF4GB34BXTiQcdDKTvZq2p2zRxpB1 7J/IyRQAeNC9MmCGmmpheuhx/JThVbiHPI0IBnSeH9ga7zBlTZ9BozMIG8ZEbQyK bw3eRdS9fW/bmAyVw7PqHlvv5YGYQVHw5thy7feca5F86efZbNDHgGYddVmMT0RW lbs7tkDeBP3ILNjbAWGFrnrd9rqBJZNG2FkF9z1zP06CE2NliqA5RCRKhxSML1pn ouqvLJvgqXTvZM+GEa6fNqNZ8lu1NdDoUo75sjXrDbV72iX+twIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFLeKuT8vuoS6ljMvzlKG15j36eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZhZjAxMmQtMmUxYS0z NTgzLTkzOGEtNjJhODM0NDc4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmEPhnZ5bUoIPtwLIxixD0OmehgFmz20161PkPZJePgx5xD0xtkjBR jXkGEadESkfcy2Sw+r19T6Ct1y7qcE7+LU3LtilL9pnpMGZmKaqjY3yoOiyVQPPn AqP5vMYT+qDoNxwV3Df+qXrE0cRqLz8Xe73UyuV9kqnAB2+Qui31+QUS/hX3dUQ0 7S4EuiWFUUe0q0ElgUF8PwI6PK72ICfDvvyqL0MMbXCM/oOhtvvagimUNjK+pgjC rdaHEZ0spP70gDfbtP+yisfsR7vIk2ZG4kmU8W6kF55KofgdxNR3qHT5gy4PehxF qJEq4TPkbkO8omYJzrrnrxcHUSDhBApI -----END CERTIFICATE-----Generated at Sun May 11 06:37:17 2025 by rpki-client