$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa File: 66b13ed7-7352-3459-92da-5bf7d3131e63.roa (raw, json) Hash identifier: KKJAxm728HwUEfxWeGQDZuLU+Q+feZEzuv/HynzE+sk= Subject key identifier: C3:24:AF:0A:E5:8E:E7:38:B9:38:6B:00:7D:42:21:12:ED:FD:2B:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE107C39F5E23FF7DA5E480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397209 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:c3:9f:5e:23:ff:7d:a5:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=561b7485-2f77-43f1-8d84-1f7e9a8b0ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:2d:95:42:7a:45:93:c1:a3:0a:77:b8:f5: 16:56:88:f2:1d:c1:8b:f1:a0:05:82:19:80:8d:84: f4:6b:cc:ae:2d:48:53:ea:85:f1:a0:37:77:be:7b: 75:69:79:e4:ae:3d:52:d1:29:44:15:45:1e:44:e2: 19:e6:92:e4:97:3f:56:4d:9c:d2:cc:c0:50:ea:03: a6:ab:13:a0:d0:ad:96:c9:bc:db:5c:f0:9e:d7:13: df:b9:65:70:4c:77:8d:1a:88:0a:73:fa:9b:85:e3: 8e:c4:c7:73:60:48:56:0d:b8:54:e0:de:c4:70:9f: ca:1b:20:f1:01:be:f6:82:a5:95:ed:2e:7c:17:23: 9f:fb:a5:34:16:db:9a:83:9a:14:9a:0b:7d:06:c0: 2a:38:7a:7d:01:62:3b:1f:b9:8e:3f:d6:4f:bf:ce: 19:a9:d3:07:6b:6b:8e:c8:43:d0:ed:65:61:91:b1: 21:b4:60:cf:4f:42:da:c5:f0:46:a9:31:21:aa:69: 53:8f:93:e6:79:f4:54:94:e9:32:3f:21:7a:8d:c8: 85:2f:1a:c1:44:7b:8d:ea:61:89:2e:b2:0e:37:f3: e8:71:95:99:79:8e:74:cf:d4:f8:8a:bb:95:6e:f7: 14:fd:07:43:1d:6f:46:e8:a8:79:12:b5:db:2f:06: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:AF:0A:E5:8E:E7:38:B9:38:6B:00:7D:42:21:12:ED:FD:2B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:71:13:f5:87:a6:d3:46:fa:5b:52:98:e9:a8:65:ca:12:b9: 1a:d9:1f:dd:eb:ce:c0:de:ac:91:33:3d:69:9f:1c:a1:05:36: a3:cb:49:79:d6:e4:17:43:3c:cc:07:8c:d5:90:5d:47:9f:a5: 28:88:ee:2b:16:c1:8e:57:d4:73:3c:d2:af:78:e7:d8:bd:16: c8:4e:6b:46:5e:a6:9c:c3:e5:54:b7:36:9e:4b:e9:b3:24:d0: e5:03:39:5d:4f:cf:2d:ed:c0:7d:96:7a:2c:aa:fc:21:16:c3: 92:96:69:2a:18:46:b3:90:c6:ce:ba:d7:9a:20:0e:b4:a3:58: 45:d3:99:fc:f0:ca:f0:ac:d1:dc:8c:61:f1:ae:f1:7c:3e:2b: fa:e6:c7:52:70:58:fa:1e:83:20:bf:66:57:9a:b2:ba:68:09: 9b:07:59:82:7e:b5:21:d7:c5:66:4e:da:73:e5:12:51:ed:1b: 60:36:e6:f7:bf:48:63:0b:5d:48:b9:1a:b5:10:6f:0c:c3:65: 50:73:8c:76:55:71:fb:d8:c7:9f:99:21:2e:57:79:7b:33:79: 56:61:bd:e7:e5:0a:64:4f:1c:d0:08:57:b6:a1:bc:f3:a4:6e: 5e:db:ad:02:f7:e4:e7:93:cc:2d:30:e3:60:52:24:76:84:1a: ac:a5:2d:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QfDn14j/32l5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NTYxYjc0ODUtMmY3Ny00M2YxLThkODQtMWY3ZTlhOGIwZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmgtlUJ6RZPBowp3uPUWVojyHcGL8aAFghmA jYT0a8yuLUhT6oXxoDd3vnt1aXnkrj1S0SlEFUUeROIZ5pLklz9WTZzSzMBQ6gOm qxOg0K2WybzbXPCe1xPfuWVwTHeNGogKc/qbheOOxMdzYEhWDbhU4N7EcJ/KGyDx Ab72gqWV7S58FyOf+6U0Ftuag5oUmgt9BsAqOHp9AWI7H7mOP9ZPv84ZqdMHa2uO yEPQ7WVhkbEhtGDPT0LaxfBGqTEhqmlTj5PmefRUlOkyPyF6jciFLxrBRHuN6mGJ LrION/PocZWZeY50z9T4iruVbvcU/QdDHW9G6Kh5ErXbLwbYGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMMkrwrljuc4uThrAH1CIRLt/SvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZiMTNlZDctNzM1Mi0z NDU5LTkyZGEtNWJmN2QzMTMxZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1cRP1h6bTRvpbUpjpqGXKErka2R/d687A3qyRMz1pnxyhBTajy0l5 1uQXQzzMB4zVkF1Hn6UoiO4rFsGOV9RzPNKveOfYvRbITmtGXqacw+VUtzaeS+mz JNDlAzldT88t7cB9lnosqvwhFsOSlmkqGEazkMbOuteaIA60o1hF05n88MrwrNHc jGHxrvF8Piv65sdScFj6HoMgv2ZXmrK6aAmbB1mCfrUh18VmTtpz5RJR7RtgNub3 v0hjC11IuRq1EG8Mw2VQc4x2VXH72MefmSEuV3l7M3lWYb3n5QpkTxzQCFe2obzz pG5e260C9+Tnk8wtMONgUiR2hBqspS0Z -----END CERTIFICATE-----Generated at Sun Apr 27 17:55:22 2025 by rpki-client