$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa File: 1324d469-061c-391a-ac60-5b462b8f6694.roa (raw, json) Hash identifier: 8EtHrKMLpXjWfpUOGUHIm5G5Rn1THreu3Q73bnF1QKE= Subject key identifier: 1C:3F:08:42:C5:30:D8:0A:86:DC:93:ED:95:6D:90:02:F4:11:F3:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10675B3CB6F7C5B397200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 20172 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:75:b3:cb:6f:7c:5b:39:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=39c53a38-503e-441c-bcc4-34ce3d422958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:d1:cc:02:83:c0:01:09:55:92:b8:1a:ad: dd:b6:7c:cf:1c:05:db:33:07:78:4b:e7:02:39:1b: 3a:44:dd:2c:f3:4f:ae:ca:c6:3b:20:9d:24:d7:b0: 2c:c3:d9:cb:bb:0f:98:9f:b6:ae:54:62:e2:95:d4: 9b:f6:87:56:bf:b8:07:2d:d8:5f:d4:4a:52:30:75: 6c:5b:20:2c:69:4f:c1:7b:46:80:56:6c:a0:4b:96: 03:5e:82:1a:e0:6f:a5:6b:26:dd:52:ca:32:d0:98: 16:4a:4a:1b:f5:d3:83:19:60:24:06:91:ca:7c:06: 84:17:d9:5d:a9:fa:5f:b9:f8:44:74:6b:ea:d9:e2: e7:5d:35:8a:83:5e:52:6b:d7:a4:85:d2:ff:c5:b6: 97:f8:be:7c:0b:35:25:a0:9f:c5:47:ff:13:55:3b: c6:8f:d6:a8:f5:31:a8:7c:05:3e:0e:3d:68:42:51: ef:f8:39:f8:2f:12:f3:fc:42:1c:12:33:75:ec:b1: 76:5b:f6:85:c1:fc:7c:f1:b7:e4:70:bb:5b:39:0a: d2:a2:68:46:6e:8b:43:66:b1:63:fa:c1:79:8b:aa: 77:36:77:ea:be:ee:10:38:7a:f8:0f:65:30:89:43: 99:1a:82:96:6b:cf:96:59:17:32:88:f8:0f:07:0a: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:08:42:C5:30:D8:0A:86:DC:93:ED:95:6D:90:02:F4:11:F3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a1:14:8a:4b:80:e3:5a:01:c8:ca:79:cd:6c:7c:c3:95:e4: 9f:f7:fd:b2:e2:fe:94:58:7f:b8:a3:d8:b0:ec:5c:a6:fc:47: 55:91:91:dc:ec:3a:5c:ab:69:ed:4b:df:e9:e1:86:37:e2:58: 96:1b:c0:fd:0e:c0:ff:5d:da:fc:4a:b1:fb:68:ef:e1:4e:c9: fd:6a:c2:87:48:c6:05:a7:4c:26:59:17:67:8d:a5:63:d0:de: 25:51:22:7a:a3:f1:cb:23:50:0b:be:3a:14:0b:8a:4b:e2:0b: a6:9c:2d:0b:3b:8d:65:e7:27:33:21:a7:ca:0e:99:17:8f:e2: 20:38:07:3b:2d:90:b4:88:27:7a:aa:55:78:25:df:03:70:75: bb:1c:c8:f5:a1:74:ff:0b:f3:10:2c:91:57:8f:d0:e0:1e:e2: 9b:2d:ad:d8:23:87:41:35:79:0d:41:17:9e:9d:e2:e3:3f:49: 99:27:83:81:24:d1:e5:f1:39:3a:bb:1d:19:2c:41:ee:c4:c8: 1c:a5:2f:2e:06:99:22:37:0a:de:18:d5:1c:23:ef:9b:dd:77: 30:1b:35:46:b6:f7:50:45:50:86:2e:8f:0c:ce:e6:5c:c9:73: d5:e6:81:32:f1:55:8a:b2:1b:07:c2:76:d0:1e:12:5b:28:8b: bb:f6:b1:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QZ1s8tvfFs5cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MzljNTNhMzgtNTAzZS00NDFjLWJjYzQtMzRjZTNkNDIyOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxLRzAKDwAEJVZK4Gq3dtnzPHAXbMwd4S+cC ORs6RN0s80+uysY7IJ0k17Asw9nLuw+Yn7auVGLildSb9odWv7gHLdhf1EpSMHVs WyAsaU/Be0aAVmygS5YDXoIa4G+laybdUsoy0JgWSkob9dODGWAkBpHKfAaEF9ld qfpfufhEdGvq2eLnXTWKg15Sa9ekhdL/xbaX+L58CzUloJ/FR/8TVTvGj9ao9TGo fAU+Dj1oQlHv+Dn4LxLz/EIcEjN17LF2W/aFwfx88bfkcLtbOQrSomhGbotDZrFj +sF5i6p3Nnfqvu4QOHr4D2UwiUOZGoKWa8+WWRcyiPgPBwqAAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBw/CELFMNgKhtyT7ZVtkAL0EfOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTMyNGQ0NjktMDYxYy0z OTFhLWFjNjAtNWI0NjJiOGY2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANoRSKS4DjWgHIynnNbHzDleSf9/2y4v6UWH+4o9iw7Fym/EdVkZHc 7Dpcq2ntS9/p4YY34liWG8D9DsD/Xdr8SrH7aO/hTsn9asKHSMYFp0wmWRdnjaVj 0N4lUSJ6o/HLI1ALvjoUC4pL4gumnC0LO41l5yczIafKDpkXj+IgOAc7LZC0iCd6 qlV4Jd8DcHW7HMj1oXT/C/MQLJFXj9DgHuKbLa3YI4dBNXkNQReeneLjP0mZJ4OB JNHl8Tk6ux0ZLEHuxMgcpS8uBpkiNwreGNUcI++b3XcwGzVGtvdQRVCGLo8MzuZc yXPV5oEy8VWKshsHwnbQHhJbKIu79rGO -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:30 2025 by rpki-client