$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa File: 4de38486-00f8-322f-ab21-b6f3878c6517.roa (raw, json) Hash identifier: jGdjkiJAwUSuoKQieF1swNx80FthCgl7OXZuP0BD7eg= Subject key identifier: 3C:CA:60:12:DA:7E:5C:81:F1:E9:4D:E7:84:6D:A1:D1:AE:64:7D:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FD4863339723EDA3680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36630 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:d4:86:33:39:72:3e:da:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=cdc01d3e-ad5f-4d0a-b0d6-cb359927478c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:1e:f3:0a:53:40:b2:82:9e:d3:cc:df:b3: 56:78:0e:df:5d:79:b1:23:e7:fd:01:05:64:64:ce: 0e:90:97:62:f4:14:99:e3:23:ee:4a:c6:e6:f5:50: 57:c9:72:83:ba:39:8c:59:50:3e:51:8d:2b:15:82: 56:4d:89:35:7a:f8:53:28:81:16:79:9b:ab:2a:da: a9:c6:27:24:94:0c:79:6f:f0:1b:b9:dc:98:ca:f0: de:e2:04:44:5f:7c:1f:37:7e:fc:f8:bd:5c:be:85: 63:2c:2a:46:e5:51:67:9a:86:b9:25:04:5b:7f:9a: 78:db:f6:6b:a2:c8:d6:9c:77:a4:83:ff:c8:97:71: e6:ae:f5:87:76:74:d0:66:7a:0f:77:3a:98:d3:c5: af:45:48:d7:f0:f6:cd:be:66:38:2f:16:c5:bc:f0: 0c:57:1c:09:94:dd:f8:64:b9:f2:2a:5a:25:f2:58: 97:a1:ad:d2:7f:29:1d:93:22:b9:cb:bd:ca:a1:2e: 8f:0f:fc:82:ff:f5:7b:f9:5c:52:30:af:b1:4b:09: 36:cb:fb:be:11:29:df:5e:ae:85:21:1e:39:06:78: 74:e3:f7:60:9d:44:b1:67:d3:d4:b4:80:bb:d5:35: 8d:10:76:61:2e:0f:80:ff:28:a3:43:f2:53:67:a1: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:60:12:DA:7E:5C:81:F1:E9:4D:E7:84:6D:A1:D1:AE:64:7D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dd:7f:db:ad:10:df:31:b0:e0:9f:f9:6e:3e:32:0f:d1:4e: 4a:3a:73:93:3d:92:e7:02:03:45:22:90:e4:63:62:d9:90:cb: 05:f7:eb:5e:5f:5a:0d:19:41:44:3f:28:e2:31:79:ce:7b:72: d4:23:96:d7:71:11:9d:9a:ec:26:33:81:97:e2:ea:96:6b:db: 47:56:9c:27:ee:4b:15:20:da:88:8d:d8:75:dc:9b:41:80:9b: 22:1e:8c:1e:f7:89:f2:d2:2d:20:ac:a1:db:d9:8f:2d:60:22: 11:1c:47:e8:e8:56:0c:38:0a:80:fc:d0:6e:28:60:f5:18:a6: ce:5e:14:7c:e6:fa:a9:f1:63:d5:ea:bd:58:38:1b:f8:a1:ed: e2:5b:77:b1:29:31:05:fb:da:3e:23:4a:2d:61:c2:56:27:68: 82:38:2c:bb:64:39:f2:e5:93:17:bb:4c:23:8d:6d:da:d7:5d: 61:bc:4e:7c:96:5f:cf:e5:20:33:8d:34:c5:5b:74:f9:8f:0f: 9b:90:8c:4d:7f:87:bd:76:b9:0c:ef:1c:fd:6a:24:1b:6e:0f: 18:48:50:be:7c:75:b5:32:51:4f:5e:e8:cb:df:c5:c4:50:c0: cb:c9:eb:a9:70:b4:ae:c2:0e:59:c5:7c:2f:27:1a:3c:7d:4e: 92:fe:41:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh/UhjM5cj7aNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Y2RjMDFkM2UtYWQ1Zi00ZDBhLWIwZDYtY2IzNTk5Mjc0NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBge8wpTQLKCntPM37NWeA7fXXmxI+f9AQVk ZM4OkJdi9BSZ4yPuSsbm9VBXyXKDujmMWVA+UY0rFYJWTYk1evhTKIEWeZurKtqp xicklAx5b/AbudyYyvDe4gREX3wfN378+L1cvoVjLCpG5VFnmoa5JQRbf5p42/Zr osjWnHekg//Il3HmrvWHdnTQZnoPdzqY08WvRUjX8PbNvmY4LxbFvPAMVxwJlN34 ZLnyKlol8liXoa3SfykdkyK5y73KoS6PD/yC//V7+VxSMK+xSwk2y/u+ESnfXq6F IR45Bnh04/dgnUSxZ9PUtIC71TWNEHZhLg+A/yijQ/JTZ6GK9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDzKYBLaflyB8elN54RtodGuZH1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRlMzg0ODYtMDBmOC0z MjJmLWFiMjEtYjZmMzg3OGM2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAS3X/brRDfMbDgn/luPjIP0U5KOnOTPZLnAgNFIpDkY2LZkMsF9+te X1oNGUFEPyjiMXnOe3LUI5bXcRGdmuwmM4GX4uqWa9tHVpwn7ksVINqIjdh13JtB gJsiHowe94ny0i0grKHb2Y8tYCIRHEfo6FYMOAqA/NBuKGD1GKbOXhR85vqp8WPV 6r1YOBv4oe3iW3exKTEF+9o+I0otYcJWJ2iCOCy7ZDny5ZMXu0wjjW3a111hvE58 ll/P5SAzjTTFW3T5jw+bkIxNf4e9drkM7xz9aiQbbg8YSFC+fHW1MlFPXujL38XE UMDLyeupcLSuwg5ZxXwvJxo8fU6S/kFK -----END CERTIFICATE-----Generated at Mon Apr 28 16:04:08 2025 by rpki-client