$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1869fa4c-1dfa-3865-bbf4-5d011450264c.roa File: 1869fa4c-1dfa-3865-bbf4-5d011450264c.roa (raw, json) Hash identifier: zzGVvJFOhtzUgFzjA85leVc9SYd/mNEOtSms4Y18hlA= Subject key identifier: 31:D3:AA:76:D8:16:F2:7C:A6:9D:A1:11:0F:DB:8B:05:50:67:89:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1F3B1A0CEB508B4FF880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1869fa4c-1dfa-3865-bbf4-5d011450264c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396587 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:3b:1a:0c:eb:50:8b:4f:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=04b85100-e251-4dc9-acc2-bf4de984f3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:1d:48:50:a7:9d:86:00:24:d1:d1:21:79: ff:c9:51:6a:96:74:4f:d6:2c:d3:33:b1:f5:d9:ee: 2e:58:e0:81:57:8d:e8:ce:4b:cd:94:7d:53:3a:66: f1:5a:63:a0:0d:8a:e2:0b:30:d7:dc:b4:b8:09:24: 41:ed:49:4c:e8:e9:7b:84:7e:12:0b:63:67:99:81: d9:ca:96:78:0b:57:20:65:55:2d:93:e7:7d:38:ae: d9:c9:ca:4c:a2:80:8d:0e:39:a6:b4:53:29:b1:47: ec:bc:f5:90:c4:aa:47:01:d8:46:5b:88:75:09:44: aa:e1:b0:a2:ac:da:72:49:45:59:4b:95:7e:93:29: eb:89:92:25:1b:4a:79:26:0d:71:34:dc:cb:29:f0: 29:f3:8b:7d:ad:58:a5:fb:10:4b:cb:c0:42:e9:03: 6e:71:91:f3:cf:c4:89:ab:8f:29:6d:45:65:cc:86: c1:bf:34:e4:81:b1:38:3e:ce:c4:6b:29:ec:93:84: e1:75:48:20:36:10:90:f5:73:9a:44:a9:d4:0d:87: ad:f7:44:51:23:ad:42:e9:0d:05:6e:3d:25:4a:b1: 33:4a:94:fa:ec:18:44:74:93:0d:28:31:4c:9c:f6: 06:60:ab:66:f3:e5:d5:e3:6d:d9:d0:c6:57:62:eb: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D3:AA:76:D8:16:F2:7C:A6:9D:A1:11:0F:DB:8B:05:50:67:89:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1869fa4c-1dfa-3865-bbf4-5d011450264c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0e:16:91:e5:e1:61:73:eb:f2:64:42:b7:93:82:5c:16:cb: de:98:96:a7:2c:79:93:c2:53:22:bd:d6:df:b0:db:7a:9f:82: c4:2f:8c:7b:03:88:97:47:fb:8d:1d:82:0f:ba:45:04:fb:f5: 96:36:06:b1:55:82:b3:0f:19:6e:0b:4e:fc:de:61:e2:5e:00: 98:14:2c:fa:14:d2:64:4f:0e:ac:a8:47:c9:f5:58:30:d0:75: 83:2d:20:aa:bd:f4:d8:c5:0d:41:36:83:0e:a1:52:08:78:28: 48:ff:7f:b7:86:25:43:61:73:2e:2a:a6:2d:c6:95:23:16:4d: f1:c3:a9:97:9f:d8:6d:93:03:bf:2b:eb:ef:df:ef:3d:68:01: 4b:b2:48:39:17:2a:85:c3:35:17:59:e7:e6:82:a8:7d:49:5b: b3:ac:cf:9a:57:86:13:06:5e:4e:5d:3e:94:06:d7:5a:0a:2d: 83:9c:95:4a:83:b8:e1:00:4f:09:ca:41:91:c7:59:a5:0b:fc: 9f:0f:d0:fe:47:50:cc:af:74:ff:2e:df:88:d1:6c:6c:38:50: a0:57:f9:42:a8:e9:28:15:e4:44:72:46:a7:22:5d:f3:a0:b6: e0:5e:17:49:e9:df:05:c7:62:c0:e9:22:35:0b:f3:14:99:e1: 29:05:d1:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh87GgzrUItP+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDRiODUxMDAtZTI1MS00ZGM5LWFjYzItYmY0ZGU5ODRmM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1odSFCnnYYAJNHRIXn/yVFqlnRP1izTM7H1 2e4uWOCBV43ozkvNlH1TOmbxWmOgDYriCzDX3LS4CSRB7UlM6Ol7hH4SC2NnmYHZ ypZ4C1cgZVUtk+d9OK7ZycpMooCNDjmmtFMpsUfsvPWQxKpHAdhGW4h1CUSq4bCi rNpySUVZS5V+kynriZIlG0p5Jg1xNNzLKfAp84t9rVil+xBLy8BC6QNucZHzz8SJ q48pbUVlzIbBvzTkgbE4Ps7Eaynsk4ThdUggNhCQ9XOaRKnUDYet90RRI61C6Q0F bj0lSrEzSpT67BhEdJMNKDFMnPYGYKtm8+XV423Z0MZXYusbnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDHTqnbYFvJ8pp2hEQ/biwVQZ4nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg2OWZhNGMtMWRmYS0z ODY1LWJiZjQtNWQwMTE0NTAyNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjDhaR5eFhc+vyZEK3k4JcFsvemJanLHmTwlMivdbfsNt6n4LEL4x7 A4iXR/uNHYIPukUE+/WWNgaxVYKzDxluC0783mHiXgCYFCz6FNJkTw6sqEfJ9Vgw 0HWDLSCqvfTYxQ1BNoMOoVIIeChI/3+3hiVDYXMuKqYtxpUjFk3xw6mXn9htkwO/ K+vv3+89aAFLskg5FyqFwzUXWefmgqh9SVuzrM+aV4YTBl5OXT6UBtdaCi2DnJVK g7jhAE8JykGRx1mlC/yfD9D+R1DMr3T/Lt+I0WxsOFCgV/lCqOkoFeREckanIl3z oLbgXhdJ6d8Fx2LA6SI1C/MUmeEpBdHr -----END CERTIFICATE-----Generated at Mon Apr 28 16:05:58 2025 by rpki-client