$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/093ef033-687b-3ec6-8944-f248d2dc5e65.roa File: 093ef033-687b-3ec6-8944-f248d2dc5e65.roa (raw, json) Hash identifier: dT8nqZ3V7x6PXHjEo2wLZmUC2AOxbEebLC8+cCot4+k= Subject key identifier: 8D:A1:A4:AC:55:A6:B0:B2:E0:C5:FA:45:9F:C3:AD:D1:17:5A:F6:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A24D4F181C2E5CEE331C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/093ef033-687b-3ec6-8944-f248d2dc5e65.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396827 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:d4:f1:81:c2:e5:ce:e3:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a0060ebf-70a8-4a42-b0d6-8dce4aff92f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:d0:8f:5f:c2:e9:16:1b:8c:f5:67:c6:a3: ee:a1:f0:5b:e3:5f:bc:6a:17:af:eb:3f:96:c4:c1: 6b:35:d9:da:77:21:79:4f:23:35:87:31:a8:7e:71: d9:ef:e3:df:8c:40:0c:e1:fd:67:91:87:d3:09:10: 8f:53:85:c4:f4:ab:d0:61:34:1d:43:fb:00:0a:4e: c6:cc:69:f3:b9:d3:06:74:a9:ec:87:9a:01:b2:bd: fe:37:7d:8d:5a:25:f4:53:79:51:bc:86:f0:c1:99: cf:61:e8:67:34:b3:5f:1c:44:35:6e:d2:64:b4:3c: 04:5e:0b:1a:51:cb:f9:e4:72:dd:c0:f6:8b:7a:b7: 17:7f:05:61:14:a7:31:2a:d1:c5:12:33:03:16:99: c8:77:49:72:56:f2:38:bf:31:8c:3c:b4:74:76:ae: cd:28:de:b3:30:91:1e:0f:6c:eb:7b:36:35:7f:64: 11:15:24:b7:4b:b2:9c:6e:aa:50:41:8e:a6:9f:bf: d3:50:b6:df:13:5a:7e:04:75:45:7e:a6:28:76:e8: a7:31:72:0b:32:0d:da:b2:90:0d:21:3b:b6:a3:46: 9d:93:63:e0:5e:4e:28:2b:09:53:dd:33:f8:d8:85: e1:7c:46:9a:36:5a:d9:3c:fd:e2:1e:fb:49:47:3b: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A1:A4:AC:55:A6:B0:B2:E0:C5:FA:45:9F:C3:AD:D1:17:5A:F6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/093ef033-687b-3ec6-8944-f248d2dc5e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:50:92:22:f6:1c:1b:bb:42:48:54:e4:b9:9a:7c:21:b9:9e: 0f:7c:b3:23:04:bb:e7:5c:1d:bf:57:b2:be:f4:f4:fc:24:f1: 57:90:42:d8:73:cf:15:cd:d5:34:ac:c2:9b:99:fc:6f:c6:f5: 4d:35:88:be:6c:80:db:39:82:00:09:d1:a6:b1:c5:f2:26:1c: 77:10:10:7c:94:98:e4:a9:3c:77:f9:5e:97:2d:3a:ec:4c:24: a0:d3:4f:37:82:ea:a0:ec:8d:ed:b2:89:04:0f:45:aa:20:5a: 0d:7c:3e:33:fa:32:ee:35:ef:91:6b:35:f6:48:80:f9:a1:06: cf:f4:95:16:1f:68:9f:52:37:ac:b5:e7:5e:e2:8d:82:21:6f: 5a:ab:0d:6d:1e:50:b2:49:37:28:23:a5:c0:b7:11:b4:61:f2: 4a:f5:8e:96:17:55:f7:b3:ed:1a:29:15:ba:4b:8d:ae:6d:fe: 79:3b:8e:2e:a3:18:e2:e7:44:05:1e:92:0d:da:fb:69:19:3b: 9a:36:30:56:f5:09:f5:e7:15:8a:ca:c2:30:a9:74:2a:54:cc: db:b7:03:a2:24:99:2f:33:bd:e9:47:c6:01:55:34:3c:1a:51: a0:ea:7f:c3:99:ca:f9:e3:3d:d2:7a:26:23:8c:87:c2:cd:4e: c9:e6:d4:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiTU8YHC5c7jMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTAwNjBlYmYtNzBhOC00YTQyLWIwZDYtOGRjZTRhZmY5MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXQj1/C6RYbjPVnxqPuofBb41+8ahev6z+W xMFrNdnadyF5TyM1hzGofnHZ7+PfjEAM4f1nkYfTCRCPU4XE9KvQYTQdQ/sACk7G zGnzudMGdKnsh5oBsr3+N32NWiX0U3lRvIbwwZnPYehnNLNfHEQ1btJktDwEXgsa Ucv55HLdwPaLercXfwVhFKcxKtHFEjMDFpnId0lyVvI4vzGMPLR0dq7NKN6zMJEe D2zrezY1f2QRFSS3S7KcbqpQQY6mn7/TULbfE1p+BHVFfqYoduinMXILMg3aspAN ITu2o0adk2PgXk4oKwlT3TP42IXhfEaaNlrZPP3iHvtJRzvDQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2hpKxVprCy4MX6RZ/DrdEXWvZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDkzZWYwMzMtNjg3Yi0z ZWM2LTg5NDQtZjI0OGQyZGM1ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjUJIi9hwbu0JIVOS5mnwhuZ4PfLMjBLvnXB2/V7K+9PT8JPFXkELY c88VzdU0rMKbmfxvxvVNNYi+bIDbOYIACdGmscXyJhx3EBB8lJjkqTx3+V6XLTrs TCSg0083guqg7I3tsokED0WqIFoNfD4z+jLuNe+RazX2SID5oQbP9JUWH2ifUjes tede4o2CIW9aqw1tHlCySTcoI6XAtxG0YfJK9Y6WF1X3s+0aKRW6S42ubf55O44u oxji50QFHpIN2vtpGTuaNjBW9Qn15xWKysIwqXQqVMzbtwOiJJkvM73pR8YBVTQ8 GlGg6n/Dmcr54z3SeiYjjIfCzU7J5tTG -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:59 2025 by rpki-client