$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa File: d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa (raw, json) Hash identifier: Bexh+CsPYCGm1ufdUePMq0V1YEqmyOkJT49lrCBEzFg= Subject key identifier: 0F:A7:BE:C6:0D:20:82:AF:AD:A7:8C:77:53:01:9B:B8:09:0C:1D:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10299FB95040D379BCEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396608 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:02:99:fb:95:04:0d:37:9b:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3bdfa50f-050f-4856-aac1-b55568fc32c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:b0:35:03:b6:e1:b9:0d:01:86:b1:99:c8: 6c:8b:df:bb:c4:1f:28:26:df:f2:05:bd:4c:b9:f6: 1d:cc:66:55:45:ed:6e:5b:cd:0c:4f:9a:19:40:cb: b4:bd:94:24:be:88:e5:ab:0a:f7:b7:7c:63:05:46: 27:f2:d2:70:76:f8:42:45:d4:e8:92:23:ef:41:cf: 9c:6f:3e:f3:ff:95:e7:c6:de:d0:be:48:2f:6b:79: 72:38:83:29:d7:14:23:a5:25:cf:84:c3:b1:83:4f: e3:44:f1:ca:96:3a:35:73:69:61:07:c3:22:2f:10: d9:76:81:af:71:47:39:f1:0f:6e:27:33:9c:68:6e: 09:93:1d:f5:24:6d:9e:cb:c2:da:f5:71:18:cf:fc: bd:75:57:44:e5:49:78:73:c8:f7:74:0b:f3:12:f3: af:4f:da:e4:2a:af:08:5d:af:b8:78:2c:7f:7a:e6: f5:f4:05:50:69:22:69:33:61:17:e9:08:99:7d:86: 2b:e4:db:47:ea:37:46:66:c3:7b:33:cd:9a:4e:a4: 1e:69:dd:c7:4c:89:7b:ad:75:6d:f0:f3:6a:a9:c6: 49:cf:9c:30:9e:aa:4c:94:c9:b6:45:19:f3:66:e2: e5:ab:19:d2:ae:5f:74:d8:be:ee:93:a7:b1:3b:8d: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:BE:C6:0D:20:82:AF:AD:A7:8C:77:53:01:9B:B8:09:0C:1D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3e:e8:61:be:25:b8:fe:de:fd:ca:dc:17:e8:8f:06:4b:79: 5c:d6:28:9e:5e:0c:be:9b:b6:aa:ed:4c:56:ad:42:9c:1b:45: 3e:23:07:40:1c:a9:4c:4f:f0:1e:9f:83:4f:9a:a6:b0:25:65: f9:1e:cf:07:0a:67:0b:4b:c6:70:93:c7:85:63:34:b7:cb:d9: 72:f1:e0:bd:18:c4:a8:b1:0a:60:05:a8:d9:1f:13:3a:2e:cc: 54:b7:86:ba:1d:95:bb:72:a8:85:c8:74:41:1b:4a:92:58:27: f3:7b:c2:af:51:5b:68:ca:fa:2d:4f:3c:94:c3:1b:ca:e4:51: 03:f0:b8:71:36:1b:b9:25:bd:db:06:fb:08:6f:73:48:bd:d3: 2a:07:70:9c:40:02:7c:71:51:68:29:1c:5e:a7:3d:bc:fe:8e: ac:5a:0d:51:3b:4c:6b:2c:8f:21:d3:30:4c:e9:4f:9f:71:e8: fd:92:ce:db:92:bb:c6:44:79:81:a8:ec:e7:e7:b3:45:3f:18: 9d:0b:19:dc:c5:dd:1f:ab:c0:fc:d6:c2:df:08:4a:ae:f5:f5: 05:ee:d1:0a:94:6c:97:ed:47:a6:d3:05:5f:35:40:90:29:eb: 5d:26:d2:14:40:8e:af:a7:2e:42:36:3c:5e:10:9d:0d:e8:c1: 6c:dc:08:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QKZ+5UEDTebzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2JkZmE1MGYtMDUwZi00ODU2LWFhYzEtYjU1NTY4ZmMzMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyGwNQO24bkNAYaxmchsi9+7xB8oJt/yBb1M ufYdzGZVRe1uW80MT5oZQMu0vZQkvojlqwr3t3xjBUYn8tJwdvhCRdTokiPvQc+c bz7z/5Xnxt7Qvkgva3lyOIMp1xQjpSXPhMOxg0/jRPHKljo1c2lhB8MiLxDZdoGv cUc58Q9uJzOcaG4Jkx31JG2ey8La9XEYz/y9dVdE5Ul4c8j3dAvzEvOvT9rkKq8I Xa+4eCx/eub19AVQaSJpM2EX6QiZfYYr5NtH6jdGZsN7M82aTqQead3HTIl7rXVt 8PNqqcZJz5wwnqpMlMm2RRnzZuLlqxnSrl902L7uk6exO40H+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA+nvsYNIIKvraeMd1MBm7gJDB2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI3MjVlYmEtMmVlZi0z N2UwLTg5MWUtZWJiN2UwNTQ4YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7PuhhviW4/t79ytwX6I8GS3lc1iieXgy+m7aq7UxWrUKcG0U+IwdA HKlMT/Aen4NPmqawJWX5Hs8HCmcLS8Zwk8eFYzS3y9ly8eC9GMSosQpgBajZHxM6 LsxUt4a6HZW7cqiFyHRBG0qSWCfze8KvUVtoyvotTzyUwxvK5FED8LhxNhu5Jb3b BvsIb3NIvdMqB3CcQAJ8cVFoKRxepz28/o6sWg1RO0xrLI8h0zBM6U+fcej9ks7b krvGRHmBqOzn57NFPxidCxncxd0fq8D81sLfCEqu9fUF7tEKlGyX7Uem0wVfNUCQ KetdJtIUQI6vpy5CNjxeEJ0N6MFs3Aj0 -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:40 2025 by rpki-client