$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa File: c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa (raw, json) Hash identifier: Qv3/hN5ZtGnqFLF3R46dqwDC3K1JwbxTOXD8eH4zbFI= Subject key identifier: 79:3B:58:6B:03:72:9E:9F:4F:4E:98:AF:E7:C9:20:47:99:57:CF:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2328ADFE38449A07C800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36631 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:23:28:ad:fe:38:44:9a:07:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=5e40eb43-0bf4-4ae7-b4b5-8cf121180f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:66:67:d8:48:a2:22:8a:7b:7b:2d:67:8f: 64:10:c0:8e:ae:d4:da:24:95:c7:ee:3e:cc:d3:bf: 08:9d:27:1c:ff:04:c5:d9:e4:98:d2:f6:07:3e:c8: 63:ee:4b:7d:f6:6a:f8:bf:2d:eb:b0:21:08:27:1d: a6:fa:4e:f5:4b:f0:e3:7c:df:77:01:fc:78:16:cc: 64:8e:e7:7c:25:6f:eb:e6:eb:1b:a2:b7:d9:47:9e: 77:6d:a9:d5:0e:b0:87:12:f2:d1:56:bb:c9:f1:9e: 4f:a7:6c:c7:31:39:02:bc:e3:30:8f:bb:ef:43:84: e9:d5:a3:61:d3:cd:b5:76:a8:51:f8:a6:33:54:ee: cd:b6:c0:28:75:4e:15:66:21:8c:bd:f9:61:a1:ee: 93:e3:81:c0:de:ef:7e:f5:ba:d9:a3:f6:1d:4f:39: b3:8f:b5:ed:e7:dd:dd:a5:42:59:14:d7:f1:12:bc: e9:c4:cb:48:32:ca:40:b6:ee:79:8e:68:76:df:01: 14:18:16:ce:c3:4f:b3:c3:cd:81:00:77:f2:18:f1: 67:66:75:61:c8:fc:01:e0:03:40:40:c6:19:d1:39: 4c:83:d7:33:ee:3a:a6:aa:91:06:30:a9:0a:2b:9a: e2:77:98:87:52:7e:20:40:f8:34:86:52:c3:ae:cc: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:58:6B:03:72:9E:9F:4F:4E:98:AF:E7:C9:20:47:99:57:CF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7a:66:4d:7c:33:30:6e:03:ea:f6:21:c5:fe:32:39:19:b6: 24:6b:94:19:c8:36:50:8b:1e:0f:95:e8:4b:96:58:ce:fe:e3: c6:e0:e2:c7:98:44:b4:89:54:44:e8:be:c5:a5:ed:62:14:73: f1:82:e7:42:cd:b5:99:49:c6:00:56:3d:78:fd:8c:0c:61:aa: bf:6e:82:91:e0:e3:b6:ff:16:45:d0:7e:ca:85:d7:fc:d5:3d: 55:a6:af:43:a5:9c:e6:19:f9:00:0b:13:ff:9c:b5:1a:9d:39: c4:11:8c:10:a7:25:d5:1a:b2:6b:03:0c:be:f9:4c:63:2c:57: 2a:e4:08:3e:1c:89:6e:25:fc:ce:dd:d9:46:7c:87:46:5f:69: e1:59:af:b8:45:95:46:f6:92:56:8e:00:8e:80:6c:24:01:8e: 79:57:6d:89:08:a9:14:c6:f7:f5:f2:d2:9b:f1:ee:61:d5:37: 35:f7:34:82:c1:d1:7f:fc:6f:f6:92:71:15:6a:88:59:0a:99: 4d:93:65:6e:21:3b:a7:cf:93:00:69:49:c7:c4:32:30:aa:a7: 51:a9:8b:b6:b5:46:45:9b:3b:aa:d2:ab:dc:2e:1a:cb:23:53: 09:b8:ac:c3:24:d0:d3:90:04:b5:10:8b:1c:ce:82:4c:7b:96: bb:f4:7b:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiMorf44RJoHyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NWU0MGViNDMtMGJmNC00YWU3LWI0YjUtOGNmMTIxMTgwZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi9mZ9hIoiKKe3stZ49kEMCOrtTaJJXH7j7M 078InScc/wTF2eSY0vYHPshj7kt99mr4vy3rsCEIJx2m+k71S/DjfN93Afx4Fsxk jud8JW/r5usborfZR553banVDrCHEvLRVrvJ8Z5Pp2zHMTkCvOMwj7vvQ4Tp1aNh 0821dqhR+KYzVO7NtsAodU4VZiGMvflhoe6T44HA3u9+9brZo/YdTzmzj7Xt593d pUJZFNfxErzpxMtIMspAtu55jmh23wEUGBbOw0+zw82BAHfyGPFnZnVhyPwB4ANA QMYZ0TlMg9cz7jqmqpEGMKkKK5rid5iHUn4gQPg0hlLDrszgSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHk7WGsDcp6fT06Yr+fJIEeZV89zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzc3MDZhNGYtYjVmNC0z ZThjLTk0MDctYTM0MTJkY2RlMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7emZNfDMwbgPq9iHF/jI5GbYka5QZyDZQix4PlehLlljO/uPG4OLH mES0iVRE6L7Fpe1iFHPxgudCzbWZScYAVj14/YwMYaq/boKR4OO2/xZF0H7Khdf8 1T1Vpq9DpZzmGfkACxP/nLUanTnEEYwQpyXVGrJrAwy++UxjLFcq5Ag+HIluJfzO 3dlGfIdGX2nhWa+4RZVG9pJWjgCOgGwkAY55V22JCKkUxvf18tKb8e5h1Tc19zSC wdF//G/2knEVaohZCplNk2VuITunz5MAaUnHxDIwqqdRqYu2tUZFmzuq0qvcLhrL I1MJuKzDJNDTkAS1EIsczoJMe5a79Hu0 -----END CERTIFICATE-----Generated at Mon Apr 28 15:03:35 2025 by rpki-client