$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa File: 33b86f0f-9676-3652-945f-0423095a5069.roa (raw, json) Hash identifier: 7yJmQL1diQIx9PztjOP1bmVb4qUpmHOyuWzDEYcvj0M= Subject key identifier: 64:54:89:6A:28:4E:CB:60:6A:F0:41:1D:38:BC:B6:28:DE:1E:82:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A26118669DDE34E10DC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 25485 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:26:11:86:69:dd:e3:4e:10:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=e9fd8541-b647-4fd6-9b88-2b02a5c693de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:1f:b3:df:e3:33:9d:0d:99:98:66:cb:eb: 46:ac:3b:30:4f:1a:6b:11:f3:90:d6:74:bf:47:22: da:55:bc:04:66:af:ec:7a:f0:3a:67:e4:fc:b2:6f: be:b4:e4:0c:8e:45:a3:bf:8c:be:43:9f:71:56:99: 1c:3c:ff:b2:df:f5:4c:fd:42:be:d3:69:7a:08:64: 90:2d:45:58:2b:4c:16:2d:3c:59:62:1f:33:97:13: 43:ec:e9:de:9f:bc:8d:48:47:b6:c4:c1:ce:3f:f9: bb:b3:a2:f9:ab:47:94:8e:8a:72:ae:5a:c7:6c:a2: 5c:70:b1:ac:f5:ce:cd:a7:d6:17:48:fa:b6:45:0d: a7:0f:44:ab:92:ee:07:28:18:38:bd:b1:76:1f:a2: 34:55:32:22:6d:51:9b:b9:83:42:a0:82:a4:d2:b9: 57:7a:3c:4f:c8:d7:2c:34:7c:08:f4:dd:83:9d:c8: cc:b3:2d:23:41:e1:b6:b1:68:c0:93:00:b0:e8:18: 02:35:7e:d6:64:e1:3d:a7:9f:44:5b:32:5a:76:5a: 13:75:03:f4:d1:4e:5e:f3:0f:15:6e:73:25:e3:30: 8f:c9:da:7b:45:60:6d:cd:7d:18:fb:9e:fd:0b:67: 3d:02:bb:4f:35:7e:63:6f:40:3c:33:e9:0f:7a:85: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:54:89:6A:28:4E:CB:60:6A:F0:41:1D:38:BC:B6:28:DE:1E:82:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7d:73:7d:5e:59:42:fd:d7:90:a6:9d:14:fd:15:b1:c4:b9: b9:a0:8c:f6:1a:98:23:01:76:90:bb:86:84:cc:cd:0d:39:eb: 5e:48:17:3b:a1:9e:6d:e6:ff:da:f3:4d:ae:e7:cb:f3:53:0b: 1d:4c:ae:41:95:93:ca:8c:9e:ee:b5:7b:11:32:22:13:f9:a4: ce:9d:e2:75:a3:86:05:43:6c:be:90:b5:8c:bc:8c:2a:91:31: 10:34:74:3b:22:35:cb:1b:53:3b:a9:7b:18:5a:a2:4f:f7:c6: 45:8c:52:fe:92:44:e7:f1:ba:53:b6:5a:fd:e0:64:fb:1a:4a: 46:e8:3f:9f:76:4a:8a:6a:0d:a5:e7:88:a0:9e:38:6a:40:c5: e8:4f:39:2d:8d:c5:c1:44:a4:da:22:2f:c6:48:c4:95:3f:0a: 42:39:a2:c6:fa:30:c2:67:91:ad:b8:c0:cb:01:f3:a0:5b:6b: 4e:b2:a0:f9:7e:7e:e2:9e:c1:47:c8:8e:ef:d3:6e:4b:91:04: 66:58:7b:d6:39:25:3c:66:e3:b9:04:06:3b:b4:aa:b6:58:76: 58:2e:cb:17:0a:15:8b:2c:b1:cc:8b:d5:ff:a9:bd:33:db:a7: 45:ca:b0:78:13:0a:6f:25:31:98:42:21:d5:64:a6:59:53:e7: 87:c9:68:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiYRhmnd404Q3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZTlmZDg1NDEtYjY0Ny00ZmQ2LTliODgtMmIwMmE1YzY5M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokQfs9/jM50NmZhmy+tGrDswTxprEfOQ1nS/ RyLaVbwEZq/sevA6Z+T8sm++tOQMjkWjv4y+Q59xVpkcPP+y3/VM/UK+02l6CGSQ LUVYK0wWLTxZYh8zlxND7Onen7yNSEe2xMHOP/m7s6L5q0eUjopyrlrHbKJccLGs 9c7Np9YXSPq2RQ2nD0Srku4HKBg4vbF2H6I0VTIibVGbuYNCoIKk0rlXejxPyNcs NHwI9N2DncjMsy0jQeG2sWjAkwCw6BgCNX7WZOE9p59EWzJadloTdQP00U5e8w8V bnMl4zCPydp7RWBtzX0Y+579C2c9ArtPNX5jb0A8M+kPeoVZiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGRUiWooTstgavBBHTi8tijeHoK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNiODZmMGYtOTY3Ni0z NjUyLTk0NWYtMDQyMzA5NWE1MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSfXN9XllC/deQpp0U/RWxxLm5oIz2GpgjAXaQu4aEzM0NOeteSBc7 oZ5t5v/a802u58vzUwsdTK5BlZPKjJ7utXsRMiIT+aTOneJ1o4YFQ2y+kLWMvIwq kTEQNHQ7IjXLG1M7qXsYWqJP98ZFjFL+kkTn8bpTtlr94GT7GkpG6D+fdkqKag2l 54ignjhqQMXoTzktjcXBRKTaIi/GSMSVPwpCOaLG+jDCZ5GtuMDLAfOgW2tOsqD5 fn7insFHyI7v025LkQRmWHvWOSU8ZuO5BAY7tKq2WHZYLssXChWLLLHMi9X/qb0z 26dFyrB4EwpvJTGYQiHVZKZZU+eHyWgy -----END CERTIFICATE-----Generated at Tue Apr 29 00:33:22 2025 by rpki-client