$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa File: 29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa (raw, json) Hash identifier: ZyS0Pg7i2xKvs/4CvXqDsdrDJCJ38+yDo1V/0zg4kgA= Subject key identifier: 1A:BE:87:0B:3B:A8:41:FB:66:AB:8F:DC:92:C5:77:7F:29:8C:18:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE109FA269B461866BEEC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396583 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:fa:26:9b:46:18:66:be:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=6e74ab5b-6433-49c2-a6e8-76f5ac05d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:44:5d:b2:38:b1:0a:0a:9c:1e:5d:9d:cb: 92:39:46:30:ef:da:90:d5:56:38:af:d9:40:27:7c: 24:55:b1:fa:5e:1d:ba:ca:d8:de:70:35:43:bc:bd: 3c:ab:8a:89:2b:d9:29:cf:8c:8f:31:e1:53:07:4e: d8:fc:7a:5a:e8:4f:a7:97:ef:6f:2b:9a:1c:5d:15: 7b:71:dd:bf:29:7b:e5:cd:6f:8e:e2:28:67:12:7e: a6:a2:53:06:a7:ac:49:dd:68:ef:f4:df:7c:d6:b1: 1d:79:99:7f:44:cf:24:7c:85:8b:80:b2:df:41:8d: 01:50:e5:f5:15:b2:d4:e9:da:83:9a:63:69:50:d8: 92:cf:5b:dd:54:f1:6c:18:9f:00:83:86:3f:26:bd: 35:f8:61:cb:fe:04:63:9a:39:d5:75:d1:b8:e9:9f: 87:b1:25:3b:19:5a:c7:de:85:fd:01:8e:01:46:46: 1b:c6:37:67:97:06:7f:ba:4f:8a:a1:e3:4e:04:e1: 7f:1d:e1:86:6b:eb:74:6d:fd:29:03:89:e8:92:d6: d7:bf:56:21:e4:61:75:0a:15:cd:12:d0:ef:f8:31: fa:9b:02:a0:33:8c:22:00:d6:fa:f0:1b:71:b1:84: 04:13:4e:4b:c1:2e:6c:2d:bc:04:ff:85:ce:d9:41: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:87:0B:3B:A8:41:FB:66:AB:8F:DC:92:C5:77:7F:29:8C:18:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8a:df:8b:ce:b7:72:44:bb:6f:ed:b1:72:6f:8f:cd:bf:9e: b3:5d:32:ee:e4:03:62:e0:a1:c2:fa:bb:e4:44:bd:16:ee:ed: d9:6e:a9:da:49:b2:dc:ef:cf:8f:97:8c:4d:1b:f8:1d:f0:5f: 4e:f6:f5:b2:35:08:d7:73:b8:88:dc:a6:20:5a:17:88:29:e2: d7:2b:78:e8:15:b7:ca:5f:55:1f:91:69:f0:aa:f0:80:b7:04: 93:5a:0b:c2:92:99:c2:36:eb:aa:12:39:ce:60:4f:fd:6e:59: 08:d1:b9:22:0a:30:b8:44:b3:ed:e6:96:9c:72:0e:66:37:70: 2a:43:af:cd:15:94:69:a8:93:86:3e:76:5a:ab:4b:0b:7b:5b: 3a:07:3a:ec:e2:e8:ca:95:ac:7a:b0:22:1b:11:fe:a5:80:44: 2e:31:b8:1d:57:5e:78:e9:92:9d:20:ad:04:88:b5:fa:87:07: bb:3c:0b:9a:25:6f:54:86:11:72:85:37:fd:31:fc:d6:b8:2a: f6:08:4a:c1:d6:ce:d1:57:b5:b8:2d:03:4e:98:01:50:3d:8d: 11:c9:2f:c3:53:ce:01:75:b9:71:5a:73:85:26:dd:f3:18:5c: a7:43:0f:49:75:60:27:f5:2b:33:66:3c:ba:a6:08:e7:66:aa: 0f:ec:b8:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qn6JptGGGa+7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NmU3NGFiNWItNjQzMy00OWMyLWE2ZTgtNzZmNWFjMDVkNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXtEXbI4sQoKnB5dncuSOUYw79qQ1VY4r9lA J3wkVbH6Xh26ytjecDVDvL08q4qJK9kpz4yPMeFTB07Y/Hpa6E+nl+9vK5ocXRV7 cd2/KXvlzW+O4ihnEn6molMGp6xJ3Wjv9N981rEdeZl/RM8kfIWLgLLfQY0BUOX1 FbLU6dqDmmNpUNiSz1vdVPFsGJ8Ag4Y/Jr01+GHL/gRjmjnVddG46Z+HsSU7GVrH 3oX9AY4BRkYbxjdnlwZ/uk+KoeNOBOF/HeGGa+t0bf0pA4noktbXv1Yh5GF1ChXN EtDv+DH6mwKgM4wiANb68BtxsYQEE05LwS5sLbwE/4XO2UFRkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBq+hws7qEH7ZquP3JLFd38pjBgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjliZjJhNGQtM2I3Ny0z MGYzLWIyN2EtZDJhMTRhMGZlZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByit+LzrdyRLtv7bFyb4/Nv56zXTLu5ANi4KHC+rvkRL0W7u3Zbqna SbLc78+Pl4xNG/gd8F9O9vWyNQjXc7iI3KYgWheIKeLXK3joFbfKX1UfkWnwqvCA twSTWgvCkpnCNuuqEjnOYE/9blkI0bkiCjC4RLPt5paccg5mN3AqQ6/NFZRpqJOG PnZaq0sLe1s6Bzrs4ujKlax6sCIbEf6lgEQuMbgdV1546ZKdIK0EiLX6hwe7PAua JW9UhhFyhTf9MfzWuCr2CErB1s7RV7W4LQNOmAFQPY0RyS/DU84BdblxWnOFJt3z GFynQw9JdWAn9SszZjy6pgjnZqoP7LiA -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:55 2025 by rpki-client