$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1f5729a-243d-33cc-a01a-424e4cc72ea9.roa File: e1f5729a-243d-33cc-a01a-424e4cc72ea9.roa (raw, json) Hash identifier: Gd1epEd60ffbmVcnW5f8Ij3r/eRxlhedvC497kmi2Mk= Subject key identifier: 3D:91:46:C4:D7:71:84:67:27:FE:64:0D:2D:0C:4F:58:37:2D:E2:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A22284B92F199629A4B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1f5729a-243d-33cc-a01a-424e4cc72ea9.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396559 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:22:28:4b:92:f1:99:62:9a:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=14f17eb0-366f-49be-9929-f5f309fa61fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:de:da:75:b4:9b:36:6f:2a:5f:c9:21:a7: 38:d3:77:14:aa:b2:50:66:03:7e:27:5a:94:79:0f: 71:64:5c:3b:76:4d:42:79:34:33:ba:85:92:35:67: 8e:dd:ba:f6:ac:06:ae:28:70:f9:ee:88:72:4d:04: 95:3a:f2:02:31:d8:b0:b7:54:dc:59:98:d4:b6:97: 0e:94:6f:d4:4a:f0:8b:53:84:4d:53:30:a6:74:f1: 5f:6c:53:60:1b:1e:e3:47:a1:d1:3e:cf:89:2f:a5: 41:fc:a6:3b:a3:47:7a:9f:8a:32:06:e1:8e:a0:ee: f3:a5:43:25:e9:0e:6b:cf:8d:6e:ed:4b:5a:c5:28: 4c:3f:c9:15:74:ce:8e:21:0c:69:f0:7a:de:31:48: 29:bd:22:5a:1e:24:be:73:06:ab:19:94:91:13:9d: 49:ba:08:3b:68:4f:65:07:eb:5f:68:9a:54:a5:e8: d3:67:20:89:1f:1e:de:2b:03:a3:78:0f:42:46:96: ac:ed:9a:03:58:ed:6f:0f:b8:68:cd:06:9f:a8:84: 0a:18:02:6b:01:96:b4:2a:ad:4b:54:eb:01:ec:50: c0:52:ec:a9:63:8f:19:a7:89:6d:ed:8f:b7:06:c2: 04:58:4f:91:17:77:b3:1d:32:6b:c6:e5:c8:1b:51: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:91:46:C4:D7:71:84:67:27:FE:64:0D:2D:0C:4F:58:37:2D:E2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1f5729a-243d-33cc-a01a-424e4cc72ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e9:f9:6f:67:96:a0:75:40:1a:35:6c:b6:aa:e4:f1:bd:7e: 22:11:48:3f:98:e5:62:94:3f:e3:52:cd:21:94:48:08:01:04: a2:90:04:02:cd:c8:4c:51:8b:83:fa:07:8a:bc:96:26:80:7c: 77:a6:e6:d2:f4:cd:1f:03:5b:5a:8d:66:52:e2:ff:38:8b:d3: 76:58:2b:35:44:a4:35:83:5d:3b:19:af:3e:3a:e4:78:01:1f: cd:30:3a:74:50:7a:20:14:f4:56:8e:d3:06:b9:26:0a:76:22: 9f:7c:17:62:0f:63:ff:73:86:d7:d9:29:fb:61:db:aa:f0:f1: ca:2a:91:e9:4b:46:f4:98:b4:c5:92:8f:8a:d7:30:6d:a4:02: cf:80:a0:e6:7d:d4:14:80:18:44:70:cd:cf:e6:59:93:7b:40: aa:b7:dd:d6:d7:d3:1a:90:b3:e4:d3:c3:3e:c3:3c:17:f3:d7: dc:5d:4e:27:68:87:f5:a9:c6:48:8e:97:ef:92:32:5d:14:fc: 43:75:9e:27:e8:f7:3a:15:0d:8f:62:67:56:33:30:14:41:3e: 0a:ea:63:88:81:ac:34:43:14:d0:06:7a:60:e1:84:fc:24:21: bd:0c:e9:18:df:e5:e4:b3:c5:76:96:0e:bb:ee:54:bc:41:8a: db:c5:f1:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiIoS5LxmWKaSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTRmMTdlYjAtMzY2Zi00OWJlLTk5MjktZjVmMzA5ZmE2MWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fTe2nW0mzZvKl/JIac403cUqrJQZgN+J1qU eQ9xZFw7dk1CeTQzuoWSNWeO3br2rAauKHD57ohyTQSVOvICMdiwt1TcWZjUtpcO lG/USvCLU4RNUzCmdPFfbFNgGx7jR6HRPs+JL6VB/KY7o0d6n4oyBuGOoO7zpUMl 6Q5rz41u7UtaxShMP8kVdM6OIQxp8HreMUgpvSJaHiS+cwarGZSRE51Jugg7aE9l B+tfaJpUpejTZyCJHx7eKwOjeA9CRpas7ZoDWO1vD7hozQafqIQKGAJrAZa0Kq1L VOsB7FDAUuypY48Zp4lt7Y+3BsIEWE+RF3ezHTJrxuXIG1F0ZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD2RRsTXcYRnJ/5kDS0MT1g3LeKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTFmNTcyOWEtMjQzZC0z M2NjLWEwMWEtNDI0ZTRjYzcyZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBL6flvZ5agdUAaNWy2quTxvX4iEUg/mOVilD/jUs0hlEgIAQSikAQC zchMUYuD+geKvJYmgHx3pubS9M0fA1tajWZS4v84i9N2WCs1RKQ1g107Ga8+OuR4 AR/NMDp0UHogFPRWjtMGuSYKdiKffBdiD2P/c4bX2Sn7Yduq8PHKKpHpS0b0mLTF ko+K1zBtpALPgKDmfdQUgBhEcM3P5lmTe0Cqt93W19MakLPk08M+wzwX89fcXU4n aIf1qcZIjpfvkjJdFPxDdZ4n6Pc6FQ2PYmdWMzAUQT4K6mOIgaw0QxTQBnpg4YT8 JCG9DOkY3+Xks8V2lg677lS8QYrbxfEj -----END CERTIFICATE-----Generated at Tue Apr 29 09:29:40 2025 by rpki-client