$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: Y0u2mrnwH89D73tTK0/0O3RbB9rEvksZqsO/v8N6ibw= Subject key identifier: 1C:90:BC:F5:26:B1:CA:B2:21:04:2F:6B:A6:86:BB:13:4F:74:CE:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE107336EC7212074824900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:33:6e:c7:21:20:74:82:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=cc895401-7c3e-4b77-a329-4efd7a9be1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:4c:c5:08:15:50:5a:e0:24:1c:fa:e8:0f: 57:5f:23:54:da:38:60:05:b9:53:ae:b4:26:3a:6c: 13:12:87:11:1a:89:df:b2:7a:13:10:63:49:db:39: 70:01:6a:12:9e:83:d7:1f:7b:6d:68:04:8f:2d:53: a9:a5:05:ad:4d:a8:4b:c1:f6:c8:40:bf:76:dc:c7: e8:00:4e:79:c4:ef:55:28:39:84:c8:e7:fa:de:32: 8d:e5:21:7d:08:c1:c0:d0:fe:d7:04:c3:16:75:98: 45:6c:76:f8:3e:07:58:17:68:ab:47:72:4a:bb:2d: e1:03:a9:9e:49:51:40:65:3a:a2:b0:90:97:aa:d7: 3a:d5:fe:f7:eb:6d:d5:8c:23:a6:81:df:a9:49:98: 70:1b:b6:9b:a1:10:8b:ae:1f:9c:8b:73:3a:9e:e9: d4:6c:38:2a:2b:8e:22:3c:c3:26:d3:77:aa:2c:54: 62:ac:1e:fa:48:97:9c:6f:28:df:98:50:46:33:c7: 01:4b:13:30:e4:a7:82:0a:49:0b:39:42:28:aa:af: 57:89:31:26:7e:66:73:9b:62:38:14:39:28:bf:c2: 0d:02:30:81:4a:96:6b:5b:50:d4:1a:b4:f3:94:c8: 81:12:e6:b6:16:ff:6f:06:b3:d6:1f:6c:1c:46:a7: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:BC:F5:26:B1:CA:B2:21:04:2F:6B:A6:86:BB:13:4F:74:CE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2e:eb:4c:1f:78:1a:71:87:ca:56:2e:c2:57:74:2c:fb:a1: 50:be:08:81:be:72:9c:9e:4b:07:95:e6:d2:da:82:4f:8b:18: fc:c3:65:4d:14:47:72:db:14:1d:54:59:39:1c:85:b1:9d:93: b4:72:05:13:07:39:63:b2:d5:03:63:d2:65:8f:a4:ab:74:43: 56:c7:dc:97:f9:96:2c:c5:3a:5b:84:c5:9c:77:6b:a0:94:37: c4:34:28:a3:5c:c8:dc:32:94:bf:ed:73:f0:36:86:84:bf:99: 41:ef:9a:d2:b5:3b:92:57:b2:10:91:20:3c:81:57:8a:0a:1b: 20:90:25:6c:88:39:1e:f0:c5:0e:e2:0a:47:30:6b:41:17:34: 8c:c3:db:6d:19:80:8d:8f:07:9a:45:eb:22:55:f5:d6:e2:27: c7:57:1f:db:4c:a1:68:95:b5:49:d2:8d:9b:51:6c:7c:ae:73: fc:1f:9d:45:e6:c8:33:3b:00:62:37:34:d8:5d:cd:13:03:80: d4:0b:87:69:89:ab:ba:c9:94:2e:1e:69:c8:2b:f4:07:52:c2: 6f:99:da:48:19:21:20:12:1e:d6:9b:82:be:7b:db:97:e5:d5: e0:c1:af:44:fb:e7:ae:42:4d:29:bb:79:8b:c5:bd:82:c7:ac: ae:ec:be:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QczbschIHSCSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk Y2M4OTU0MDEtN2MzZS00Yjc3LWEzMjktNGVmZDdhOWJlMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LFMxQgVUFrgJBz66A9XXyNU2jhgBblTrrQm OmwTEocRGonfsnoTEGNJ2zlwAWoSnoPXH3ttaASPLVOppQWtTahLwfbIQL923Mfo AE55xO9VKDmEyOf63jKN5SF9CMHA0P7XBMMWdZhFbHb4PgdYF2irR3JKuy3hA6me SVFAZTqisJCXqtc61f73623VjCOmgd+pSZhwG7aboRCLrh+ci3M6nunUbDgqK44i PMMm03eqLFRirB76SJecbyjfmFBGM8cBSxMw5KeCCkkLOUIoqq9XiTEmfmZzm2I4 FDkov8INAjCBSpZrW1DUGrTzlMiBEua2Fv9vBrPWH2wcRqeKXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFByQvPUmscqyIQQva6aGuxNPdM4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwLutMH3gacYfKVi7CV3Qs+6FQvgiBvnKcnksHlebS2oJPixj8w2VN FEdy2xQdVFk5HIWxnZO0cgUTBzljstUDY9Jlj6SrdENWx9yX+ZYsxTpbhMWcd2ug lDfENCijXMjcMpS/7XPwNoaEv5lB75rStTuSV7IQkSA8gVeKChsgkCVsiDke8MUO 4gpHMGtBFzSMw9ttGYCNjweaResiVfXW4ifHVx/bTKFolbVJ0o2bUWx8rnP8H51F 5sgzOwBiNzTYXc0TA4DUC4dpiau6yZQuHmnIK/QHUsJvmdpIGSEgEh7Wm4K+e9uX 5dXgwa9E++euQk0pu3mLxb2Cx6yu7L4D -----END CERTIFICATE-----Generated at Fri Apr 11 23:57:10 2025 by rpki-client