$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa File: a34e8751-aef8-3899-a3e5-7cb0ed375def.roa (raw, json) Hash identifier: aIylDWD5mnp0QHjXUTmIVcsWJdufanMg6mR1wgueTjA= Subject key identifier: E6:FD:F8:57:65:C3:1F:2A:3C:D2:27:27:44:BD:E9:95:DB:24:6F:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1037D1F5D1F5EBA230DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396552 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:03:7d:1f:5d:1f:5e:ba:23:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=9004e605-e7a2-4717-8674-8a87d7c6c2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:af:2d:83:d8:1f:cc:6c:01:6c:15:c4:c8: f3:a6:9d:60:86:01:0f:2d:e1:87:63:6a:21:1b:15: ef:df:d8:f9:9e:63:45:e0:18:f3:ac:b4:58:98:fd: 02:42:20:cb:c5:9a:c8:9d:e9:c4:4d:7b:01:23:2c: 0b:8b:4d:ad:dc:59:73:d9:f8:3f:28:7c:54:89:fe: 78:1e:67:73:3e:ed:a3:59:b8:f9:71:69:36:38:46: 3f:a7:8f:03:da:82:f5:75:a1:d1:34:a5:ae:55:10: a5:fb:d8:68:94:1b:08:68:d8:c2:34:e3:3b:a0:9e: ce:1a:54:d5:89:f2:2c:b4:30:eb:c4:4d:e4:e6:b4: 0b:c2:8d:3c:5d:e0:83:0a:bc:44:2c:7e:da:7a:99: 5f:92:02:60:3e:1f:a2:68:6f:27:58:ed:27:7a:29: d3:aa:39:80:b0:56:9f:42:04:26:5e:3f:dc:8e:a9: 74:22:ba:6c:ab:ef:8c:c2:37:df:72:81:e5:5c:05: df:4c:47:fa:6b:10:70:c6:9d:77:28:94:88:ca:12: 3d:c9:d3:27:07:8f:76:8c:dc:3a:5c:3b:3b:10:8f: 32:a8:bf:02:10:6a:2a:78:5e:ea:54:ae:28:0f:dc: ff:b9:6c:5d:5a:57:e7:93:c9:f6:99:c1:72:46:5d: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FD:F8:57:65:C3:1F:2A:3C:D2:27:27:44:BD:E9:95:DB:24:6F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:74:a2:0d:cc:04:21:54:ab:ce:d6:74:41:44:31:3d:32:55: 8f:88:f8:8a:b5:7a:f3:86:c0:64:b8:bb:56:a1:cb:c5:8d:4e: 8f:85:80:af:44:b4:2b:71:7e:a5:aa:32:15:10:f9:be:99:7f: 3e:6c:12:a2:c0:79:0e:63:ec:cd:c7:78:ea:aa:c8:d8:d5:3f: 1d:38:47:ed:2e:dc:5b:84:ff:f0:5c:b6:38:c9:82:cb:3b:98: fd:28:0f:28:79:15:e2:1c:a8:b6:cd:d3:2f:14:d3:00:66:cf: 1f:bc:8c:a6:90:80:40:fb:1b:03:87:a8:7e:b8:bf:06:d5:39: 4f:2c:33:05:58:f5:e3:50:24:b7:65:b2:34:e9:0c:a0:44:5a: f8:c5:e7:09:bc:de:32:93:1b:2e:91:b0:e8:35:74:16:80:1d: db:3c:83:c3:c8:90:8a:02:ae:25:2f:b4:c5:29:02:b2:a8:27: 5f:83:fb:6b:e5:70:96:9a:7e:4c:7e:75:1b:81:e7:0e:ea:df: da:f6:c7:09:70:f7:e2:8b:fa:be:e3:fb:ff:23:b9:dc:ac:26: ef:d0:a5:e5:39:6a:29:b8:b6:d4:4a:da:ec:27:bf:a6:de:7d: 4d:a2:56:36:b2:7e:e8:13:74:8e:5d:dd:49:a1:66:da:92:1f: 01:df:c4:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QN9H10fXrojDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTAwNGU2MDUtZTdhMi00NzE3LTg2NzQtOGE4N2Q3YzZjMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVuvLYPYH8xsAWwVxMjzpp1ghgEPLeGHY2oh GxXv39j5nmNF4BjzrLRYmP0CQiDLxZrInenETXsBIywLi02t3Flz2fg/KHxUif54 HmdzPu2jWbj5cWk2OEY/p48D2oL1daHRNKWuVRCl+9holBsIaNjCNOM7oJ7OGlTV ifIstDDrxE3k5rQLwo08XeCDCrxELH7aeplfkgJgPh+iaG8nWO0neinTqjmAsFaf QgQmXj/cjql0Irpsq++MwjffcoHlXAXfTEf6axBwxp13KJSIyhI9ydMnB492jNw6 XDs7EI8yqL8CEGoqeF7qVK4oD9z/uWxdWlfnk8n2mcFyRl1YKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOb9+Fdlwx8qPNInJ0S96ZXbJG+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTM0ZTg3NTEtYWVmOC0z ODk5LWEzZTUtN2NiMGVkMzc1ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxdKINzAQhVKvO1nRBRDE9MlWPiPiKtXrzhsBkuLtWocvFjU6PhYCv RLQrcX6lqjIVEPm+mX8+bBKiwHkOY+zNx3jqqsjY1T8dOEftLtxbhP/wXLY4yYLL O5j9KA8oeRXiHKi2zdMvFNMAZs8fvIymkIBA+xsDh6h+uL8G1TlPLDMFWPXjUCS3 ZbI06QygRFr4xecJvN4ykxsukbDoNXQWgB3bPIPDyJCKAq4lL7TFKQKyqCdfg/tr 5XCWmn5MfnUbgecO6t/a9scJcPfii/q+4/v/I7ncrCbv0KXlOWopuLbUStrsJ7+m 3n1NolY2sn7oE3SOXd1JoWbakh8B38Qv -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:01 2025 by rpki-client