$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa File: 10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa (raw, json) Hash identifier: urYoDhmHZmWjMgGyrcQGJ6euCwhTYWA8SdqEr1LuTBQ= Subject key identifier: 55:99:59:57:AF:0A:D0:B7:2B:A6:D1:47:71:7B:80:2C:A7:CE:96:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE107817BB9616BD0445BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396578 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:81:7b:b9:61:6b:d0:44:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=efee68be-c08a-4ee8-892b-93e34bc8f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:3f:48:d3:0d:3d:2b:16:60:e6:a8:33:bb: c7:13:fe:28:67:10:a9:a2:59:27:6d:ea:94:ac:71: fc:33:b3:66:61:b3:b4:22:cf:b2:4d:9d:30:da:c5: 45:63:ec:d9:a3:07:be:fb:1c:15:ad:64:7e:95:0c: 2a:fa:4a:49:fc:a8:7f:dc:1a:83:9d:fb:07:b0:68: d6:d5:30:a8:f6:c8:cd:c3:3a:d0:d0:6f:ed:4f:db: 24:74:ec:eb:dc:70:d9:52:bb:61:59:75:a3:38:fb: bc:50:32:10:7b:dc:f4:64:df:1b:b9:72:39:43:aa: 04:14:e7:00:ea:85:24:b0:2b:5f:4e:1a:d2:5f:ea: 62:c4:30:86:80:b2:7b:1c:2d:1d:bd:75:e0:d9:06: b8:9e:6a:92:b9:f6:6e:a1:37:61:d0:fb:ca:49:60: f5:ef:83:46:c6:90:cc:61:b9:bf:bd:f9:a9:5c:9f: 46:36:1c:82:b3:fc:6f:69:98:47:4e:75:ef:44:ea: 30:6d:c3:2b:b3:74:24:ea:a9:2c:7f:9d:c1:43:8c: bd:f4:9e:6a:ca:bf:e6:12:58:35:68:0a:57:1e:0a: 58:63:48:14:30:bb:87:8a:9e:09:29:3a:09:99:79: a3:9a:9d:dc:89:71:6a:6a:e1:e9:18:3b:f2:ce:33: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:59:57:AF:0A:D0:B7:2B:A6:D1:47:71:7B:80:2C:A7:CE:96:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10dd620a-1b12-3b6a-aa83-47c76bed07b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f2:9e:36:20:8c:39:c3:75:93:0a:4b:fe:48:77:4c:db:5a: f1:00:c1:84:21:21:95:0e:c8:8d:c5:47:40:7c:12:e6:25:08: 20:4a:ed:59:61:dc:aa:e6:88:67:d7:8b:20:03:c4:88:a8:54: c5:01:60:c2:37:d9:9b:68:ec:b8:d1:42:a0:fc:50:36:28:aa: 10:49:b9:ae:10:2e:40:7a:e4:52:d1:11:53:cd:81:ba:af:2b: 4b:23:28:3e:0a:5b:c7:87:ef:2b:28:03:fa:6c:ad:0f:4b:a6: 80:f3:42:32:bf:7d:07:8f:0c:d4:95:cc:96:4b:c2:08:bb:d7: fc:74:cc:ff:c2:a8:ac:6c:28:d8:02:8b:b0:31:a5:a9:4f:d5: ae:58:e2:09:80:63:09:06:c8:1f:55:a9:28:c4:de:a1:c2:6a: af:ae:ee:13:77:ad:81:d4:d9:b8:87:eb:3e:79:ef:7f:88:f9: a2:9d:d1:98:a4:a6:3e:1d:1d:bf:c3:f9:95:48:0e:a3:05:3d: 9d:b1:45:06:ee:5b:cf:f8:b3:78:f9:60:85:b1:ac:75:df:de: 3b:0a:49:e9:a7:b2:47:58:73:90:d6:1d:b9:fb:0b:5d:2e:72: 68:5d:10:02:bc:cd:a8:74:23:3f:c4:b4:9e:0e:bf:33:58:4c: dd:d3:75:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QeBe7lha9BEW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZWZlZTY4YmUtYzA4YS00ZWU4LTg5MmItOTNlMzRiYzhmMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgk/SNMNPSsWYOaoM7vHE/4oZxCpolknbeqU rHH8M7NmYbO0Is+yTZ0w2sVFY+zZowe++xwVrWR+lQwq+kpJ/Kh/3BqDnfsHsGjW 1TCo9sjNwzrQ0G/tT9skdOzr3HDZUrthWXWjOPu8UDIQe9z0ZN8buXI5Q6oEFOcA 6oUksCtfThrSX+pixDCGgLJ7HC0dvXXg2Qa4nmqSufZuoTdh0PvKSWD174NGxpDM Ybm/vfmpXJ9GNhyCs/xvaZhHTnXvROowbcMrs3Qk6qksf53BQ4y99J5qyr/mElg1 aApXHgpYY0gUMLuHip4JKToJmXmjmp3ciXFqauHpGDvyzjPDIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFWZWVevCtC3K6bRR3F7gCynzpbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTBkZDYyMGEtMWIxMi0z YjZhLWFhODMtNDdjNzZiZWQwN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAz8p42IIw5w3WTCkv+SHdM21rxAMGEISGVDsiNxUdAfBLmJQggSu1Z Ydyq5ohn14sgA8SIqFTFAWDCN9mbaOy40UKg/FA2KKoQSbmuEC5AeuRS0RFTzYG6 rytLIyg+ClvHh+8rKAP6bK0PS6aA80Iyv30HjwzUlcyWS8IIu9f8dMz/wqisbCjY AouwMaWpT9WuWOIJgGMJBsgfVakoxN6hwmqvru4Td62B1Nm4h+s+ee9/iPmindGY pKY+HR2/w/mVSA6jBT2dsUUG7lvP+LN4+WCFsax13947Cknpp7JHWHOQ1h25+wtd LnJoXRACvM2odCM/xLSeDr8zWEzd03UD -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:37 2025 by rpki-client