$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa File: a9117add-ffbb-3991-a613-c683960a13a5.roa (raw, json) Hash identifier: hPmbFv1khz2fpSPJxzE5R0vtkSK7R5flg5I6H1k2Ww0= Subject key identifier: EF:92:77:DC:B8:FF:3B:EC:B2:CE:DF:2E:20:79:D9:02:51:43:51:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE106915D1FC0E6F67FCC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396617 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:91:5d:1f:c0:e6:f6:7f:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=2625d6c2-3e33-49ed-a722-9aeb1e4ca4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:ff:1e:6a:c1:99:1d:61:90:7a:2b:40:a6: f8:21:f5:0d:69:cb:52:20:3e:98:f6:6f:f0:2e:39: bb:bb:c3:16:77:43:a1:f9:bc:99:bd:ad:6f:41:18: 11:25:ea:1f:c1:fd:e9:fc:8d:36:4d:c6:b9:f5:3f: ff:f0:28:6b:a9:11:6f:77:a7:2c:09:62:1a:d4:78: c8:79:ab:eb:d6:33:04:68:17:28:52:cb:4a:c7:c0: 48:0c:2b:0a:a7:57:84:0c:14:03:c3:ef:f1:1d:72: 30:5e:d9:c2:35:4e:a0:6d:29:d7:86:aa:a0:5d:cf: 65:01:dc:de:ae:f2:72:fc:87:62:3d:1a:6f:42:eb: 5c:28:a7:83:80:41:fb:7e:b3:b6:28:26:f1:d9:96: af:a0:12:4c:e1:b3:46:a3:28:35:0f:2e:0c:1c:1e: 3e:32:6b:a2:a0:d3:94:68:69:b4:09:f5:e2:a8:ed: 80:a8:43:bb:7e:9b:da:55:f6:4c:1e:7a:3b:3f:45: 09:d6:3c:4d:36:24:54:ee:a8:af:73:c6:3a:44:37: 85:9c:82:f5:60:46:2a:1b:65:5d:ad:9a:3f:68:74: 26:15:f6:60:60:9d:ac:b3:be:22:14:19:f2:6e:9f: 03:9e:c8:03:b7:54:30:fb:0f:82:87:55:7d:a2:80: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:92:77:DC:B8:FF:3B:EC:B2:CE:DF:2E:20:79:D9:02:51:43:51:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ce:8b:a9:47:1d:46:97:60:0f:c1:a2:b7:aa:d7:be:b9:52: 7b:ba:33:73:4b:94:70:a3:b7:dd:48:27:7d:99:a1:5d:31:0f: 8f:5e:5c:97:20:4d:b7:9f:36:82:a9:23:e9:b3:66:30:b9:24: 3b:9f:a1:59:49:c1:43:fb:31:74:37:b8:32:fa:e6:66:bb:ed: c5:d0:79:61:3f:97:0f:56:4b:2d:5f:bc:3e:74:85:c7:57:c3: 3e:6b:ac:1a:33:b3:18:74:2e:9b:ca:e3:87:a0:b5:6c:1f:bd: ea:82:7b:f2:06:fb:d9:12:dd:56:86:f5:8e:88:77:39:e7:ee: 7b:db:7b:4e:ea:e9:27:49:86:a9:d4:51:75:ec:12:e0:1b:be: b9:2b:96:51:61:6f:6d:d5:21:5b:9f:04:c2:89:30:40:ec:4c: cd:a7:2c:21:e0:39:c8:a7:2e:e3:1f:13:ae:05:31:46:85:f4: 6a:41:bc:bf:82:76:9d:09:13:44:3e:60:5a:18:d0:73:35:35: c9:ba:ef:3b:f8:b0:2b:0b:5d:98:a7:a7:1c:61:d8:c0:f6:59: 08:ed:2d:b5:4b:35:01:be:6b:94:f4:11:51:b7:b7:7e:b5:a6: d0:56:f2:ae:ca:81:83:9a:7e:76:06:49:64:48:22:c9:27:1d: a0:f1:be:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QaRXR/A5vZ/zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjYyNWQ2YzItM2UzMy00OWVkLWE3MjItOWFlYjFlNGNhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG7/HmrBmR1hkHorQKb4IfUNactSID6Y9m/w Ljm7u8MWd0Oh+byZva1vQRgRJeofwf3p/I02Tca59T//8ChrqRFvd6csCWIa1HjI eavr1jMEaBcoUstKx8BIDCsKp1eEDBQDw+/xHXIwXtnCNU6gbSnXhqqgXc9lAdze rvJy/IdiPRpvQutcKKeDgEH7frO2KCbx2ZavoBJM4bNGoyg1Dy4MHB4+MmuioNOU aGm0CfXiqO2AqEO7fpvaVfZMHno7P0UJ1jxNNiRU7qivc8Y6RDeFnIL1YEYqG2Vd rZo/aHQmFfZgYJ2ss74iFBnybp8DnsgDt1Qw+w+Ch1V9ooBlvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO+Sd9y4/zvsss7fLiB52QJRQ1GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTkxMTdhZGQtZmZiYi0z OTkxLWE2MTMtYzY4Mzk2MGExM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3zoupRx1Gl2APwaK3qte+uVJ7ujNzS5Rwo7fdSCd9maFdMQ+PXlyX IE23nzaCqSPps2YwuSQ7n6FZScFD+zF0N7gy+uZmu+3F0HlhP5cPVkstX7w+dIXH V8M+a6waM7MYdC6byuOHoLVsH73qgnvyBvvZEt1WhvWOiHc55+5723tO6uknSYap 1FF17BLgG765K5ZRYW9t1SFbnwTCiTBA7EzNpywh4DnIpy7jHxOuBTFGhfRqQby/ gnadCRNEPmBaGNBzNTXJuu87+LArC12Yp6ccYdjA9lkI7S21SzUBvmuU9BFRt7d+ tabQVvKuyoGDmn52BklkSCLJJx2g8b6h -----END CERTIFICATE-----Generated at Mon Apr 28 12:28:50 2025 by rpki-client