$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa File: 1b11d68a-8468-3865-ac41-3035058ea95f.roa (raw, json) Hash identifier: Bufb4RKle4epyanxut1KYLcNavSR0ShwxqHbbWEZKnw= Subject key identifier: EC:19:8E:2F:E8:F3:17:2D:E7:FA:FA:13:C2:FA:8B:9B:AC:AB:30:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A20DBFDB17DFA96D72480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396546 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:20:db:fd:b1:7d:fa:96:d7:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=f4bb2fd3-c5a8-4c2a-ae7e-beff87649faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:37:39:c9:cf:e8:45:dc:f3:20:ff:d7:b1: d7:d6:06:26:bb:0f:b1:10:67:40:24:ee:f4:39:80: e5:a1:e8:5a:d3:2f:57:24:68:a4:d0:4c:77:82:56: 49:a3:6c:6e:43:a3:c8:57:fc:80:f9:b6:ef:f4:c0: 2a:13:e4:92:50:db:fa:0e:57:38:a0:61:6d:9f:35: 6f:ad:31:5a:0c:64:d4:91:83:c2:9f:26:9a:08:a4: 0c:df:bd:59:db:99:a3:eb:63:55:a0:71:d2:9d:0c: 46:16:38:9e:4f:56:ff:7a:d7:bc:15:f5:dc:69:5d: 73:ca:94:28:ce:34:96:db:39:50:88:51:09:b8:12: ce:20:49:84:58:53:dd:b5:83:a3:92:a8:8b:7f:9a: ff:b1:12:c2:62:3f:43:83:04:b5:62:ad:22:8e:df: 4f:11:72:3e:a1:0c:bd:82:25:d2:71:68:4c:79:e0: 52:72:15:98:02:1f:87:9d:71:24:96:f3:8f:dd:35: a8:5b:0d:62:50:87:51:eb:31:8b:c0:19:1b:53:a5: e6:35:a5:e9:dd:08:48:87:70:68:44:d3:fc:fc:26: 64:4c:d3:c6:1a:25:14:13:04:43:85:48:bc:c6:4c: 9b:9a:a1:67:31:d1:e1:d3:c8:9a:3b:8c:c4:c1:01: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:8E:2F:E8:F3:17:2D:E7:FA:FA:13:C2:FA:8B:9B:AC:AB:30:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a2:7d:2d:f7:f1:0b:a7:5b:91:07:42:75:59:52:a3:ca:ff: eb:27:4c:d3:d7:e9:ac:f3:d9:4f:34:38:05:99:57:cc:30:4b: 50:fa:a1:95:85:0a:dc:7b:33:0c:78:fc:5c:e9:d9:00:a8:92: 17:8c:43:29:ee:c8:09:3e:e1:db:f9:7a:8d:1b:51:99:8a:d5: 69:1d:d0:ac:7f:d6:f1:bc:38:db:4e:a6:fa:28:8a:3f:58:b9: 00:0e:24:4a:63:c8:c2:06:46:03:e9:13:bb:e7:70:37:fe:ac: e3:6d:4e:62:87:3a:f0:c4:95:b5:a8:00:d1:49:5c:dc:2a:53: 54:55:54:45:a9:ba:1f:2a:17:9e:5e:18:70:de:de:54:b1:31: e6:e9:d7:46:31:eb:c8:37:53:d5:8a:eb:28:d3:c0:73:fa:0d: 60:8c:3e:2b:24:92:8b:d5:41:95:1a:f1:ec:9b:b4:a4:fe:2a: c6:8b:cd:2b:83:3a:1e:f2:aa:9f:4a:f6:63:cd:ba:32:43:9e: 92:35:b7:1b:6b:9c:83:fd:e6:d2:8a:bd:a9:c7:28:c5:df:cb: e7:7e:dd:4a:26:c1:d4:a7:d2:7d:3a:fa:bd:e5:43:c9:28:ac: a7:8a:83:8c:93:83:68:f6:81:b3:32:d7:85:d8:23:58:1f:c4: 7b:2c:bc:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiDb/bF9+pbXJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZjRiYjJmZDMtYzVhOC00YzJhLWFlN2UtYmVmZjg3NjQ5ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTs3OcnP6EXc8yD/17HX1gYmuw+xEGdAJO70 OYDloeha0y9XJGik0Ex3glZJo2xuQ6PIV/yA+bbv9MAqE+SSUNv6Dlc4oGFtnzVv rTFaDGTUkYPCnyaaCKQM371Z25mj62NVoHHSnQxGFjieT1b/ete8FfXcaV1zypQo zjSW2zlQiFEJuBLOIEmEWFPdtYOjkqiLf5r/sRLCYj9DgwS1Yq0ijt9PEXI+oQy9 giXScWhMeeBSchWYAh+HnXEklvOP3TWoWw1iUIdR6zGLwBkbU6XmNaXp3QhIh3Bo RNP8/CZkTNPGGiUUEwRDhUi8xkybmqFnMdHh08iaO4zEwQEmRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOwZji/o8xct5/r6E8L6i5usqzACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWIxMWQ2OGEtODQ2OC0z ODY1LWFjNDEtMzAzNTA1OGVhOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEon0t9/ELp1uRB0J1WVKjyv/rJ0zT1+ms89lPNDgFmVfMMEtQ+qGV hQrcezMMePxc6dkAqJIXjEMp7sgJPuHb+XqNG1GZitVpHdCsf9bxvDjbTqb6KIo/ WLkADiRKY8jCBkYD6RO753A3/qzjbU5ihzrwxJW1qADRSVzcKlNUVVRFqbofKhee Xhhw3t5UsTHm6ddGMevIN1PViuso08Bz+g1gjD4rJJKL1UGVGvHsm7Sk/irGi80r gzoe8qqfSvZjzboyQ56SNbcba5yD/ebSir2pxyjF38vnft1KJsHUp9J9Ovq95UPJ KKynioOMk4No9oGzMteF2CNYH8R7LLyA -----END CERTIFICATE-----Generated at Tue Apr 29 21:43:45 2025 by rpki-client