$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa File: 24a91ee2-c3ed-3ba1-9469-640cde946175.roa (raw, json) Hash identifier: 8n+2v0KK5p83xSaICpuFQxRChWqnYQ52KXm7q1qSqqM= Subject key identifier: D2:2F:50:BB:50:C5:CA:DA:B0:0C:3C:48:DE:A7:DD:97:7C:E9:7F:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE103FB6C209B9CF3EFF7E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:03:fb:6c:20:9b:9c:f3:ef:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=9e8dbc83-f394-48e7-8e10-e9a6d0a9c5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:54:45:e9:2e:c9:f4:2b:e6:7f:4f:7d:9f: ee:9e:7a:09:c7:4e:0a:50:0c:06:28:82:44:fa:56: 8e:76:8c:0d:47:cc:f6:7e:66:1e:86:26:4e:3f:fd: 90:a5:c7:24:c4:d9:4d:1b:07:e2:bf:3e:50:55:92: 87:8f:1a:6d:46:15:58:1a:f3:50:e7:c2:f7:ac:7c: ad:61:fe:96:18:85:58:de:6a:25:cb:0e:04:ff:68: 9d:96:89:5f:ac:71:5b:b5:bd:ad:3a:ba:a5:fc:c3: 08:98:2b:d8:0b:3c:3c:c6:7b:f5:b2:2c:3a:f1:91: 8a:c6:c5:4e:7a:74:bb:0e:38:51:8f:44:c6:a6:bb: d5:76:89:28:2f:1f:bb:f4:ae:be:b3:86:4c:f8:fe: ee:43:d4:7a:96:d3:39:11:29:9d:20:e8:a2:c9:8a: ab:9b:aa:53:35:f7:8f:49:3b:0d:d4:04:a6:d1:0f: 04:2a:d7:a4:bd:41:f5:1e:3e:f5:54:f6:5d:78:d8: e7:22:db:49:9d:0b:6e:de:63:23:01:36:98:b3:56: 55:ce:78:47:03:cd:c3:de:f9:ba:c0:10:17:ed:99: 78:94:37:01:87:ad:9b:cb:35:fd:94:0b:4a:15:72: 27:f2:f5:0a:39:c2:30:30:1b:05:98:69:c4:20:d0: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:50:BB:50:C5:CA:DA:B0:0C:3C:48:DE:A7:DD:97:7C:E9:7F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9b:0e:3e:01:56:13:c6:17:23:20:45:a2:33:53:80:e3:1b: a8:b9:1c:b0:52:e1:1e:ab:bb:86:eb:b9:57:bf:84:53:6a:9e: 02:0e:48:f5:51:e5:4b:24:0c:78:1e:97:9a:8a:59:7f:ae:67: 71:cb:a1:6b:8a:94:13:d1:da:38:f3:96:5e:5a:44:ac:c9:dc: 75:24:2d:d6:b9:f2:39:2e:a1:1c:18:be:b0:08:8f:d8:58:c7: e6:b6:1a:e4:29:cb:06:0e:a7:32:48:83:03:14:f1:49:69:8d: 43:2d:65:f5:f0:ba:2b:e8:f0:e6:69:ec:63:cf:6c:69:c9:2e: 30:dc:49:7d:99:4f:9e:03:01:47:c1:14:e3:93:a0:96:fe:d4: e7:8e:d4:3e:11:1e:84:9d:d9:fe:e0:02:dc:7d:56:7b:43:03: e3:2e:28:b9:d9:1f:8d:b9:cd:14:46:fd:07:d8:6e:06:05:0e: 4e:10:92:b1:ea:5c:17:9d:b3:4b:6b:17:aa:d6:44:54:58:7d: 64:f0:d1:42:36:ab:97:e4:0b:84:62:7e:49:69:e5:30:22:35: d3:18:e7:26:17:28:cb:88:35:4a:36:ce:74:1d:56:21:69:e3: d8:7b:c9:87:68:b4:c5:2c:0d:c2:4e:49:d1:9b:6b:58:ed:b4: e7:bc:96:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QP7bCCbnPPv9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OWU4ZGJjODMtZjM5NC00OGU3LThlMTAtZTlhNmQwYTljNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0BURekuyfQr5n9PfZ/unnoJx04KUAwGKIJE +laOdowNR8z2fmYehiZOP/2QpcckxNlNGwfivz5QVZKHjxptRhVYGvNQ58L3rHyt Yf6WGIVY3molyw4E/2idlolfrHFbtb2tOrql/MMImCvYCzw8xnv1siw68ZGKxsVO enS7DjhRj0TGprvVdokoLx+79K6+s4ZM+P7uQ9R6ltM5ESmdIOiiyYqrm6pTNfeP STsN1ASm0Q8EKtekvUH1Hj71VPZdeNjnIttJnQtu3mMjATaYs1ZVznhHA83D3vm6 wBAX7Zl4lDcBh62byzX9lAtKFXIn8vUKOcIwMBsFmGnEINBdkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNIvULtQxcrasAw8SN6n3Zd86X/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhOTFlZTItYzNlZC0z YmExLTk0NjktNjQwY2RlOTQ2MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFmw4+AVYTxhcjIEWiM1OA4xuouRywUuEeq7uG67lXv4RTap4CDkj1 UeVLJAx4Hpeaill/rmdxy6FripQT0do485ZeWkSsydx1JC3WufI5LqEcGL6wCI/Y WMfmthrkKcsGDqcySIMDFPFJaY1DLWX18Lor6PDmaexjz2xpyS4w3El9mU+eAwFH wRTjk6CW/tTnjtQ+ER6Endn+4ALcfVZ7QwPjLii52R+Nuc0URv0H2G4GBQ5OEJKx 6lwXnbNLaxeq1kRUWH1k8NFCNquX5AuEYn5JaeUwIjXTGOcmFyjLiDVKNs50HVYh aePYe8mHaLTFLA3CTknRm2tY7bTnvJZU -----END CERTIFICATE-----Generated at Mon Apr 28 00:42:07 2025 by rpki-client