$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b091334-6bf4-3cfe-9975-8f7f2ceea60b.roa File: 3b091334-6bf4-3cfe-9975-8f7f2ceea60b.roa (raw, json) Hash identifier: nIxGEZ5fww7dVj3FfqbcYIwMEy30FI4qwFgdxkaNUZA= Subject key identifier: A3:04:DB:7D:C2:8E:E2:2F:17:93:15:DB:1A:A1:DA:36:53:F6:49:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A247959C1B18D1E000880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b091334-6bf4-3cfe-9975-8f7f2ceea60b.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396579 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:79:59:c1:b1:8d:1e:00:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=e3882aa9-effe-419e-baa8-e301f2ce94cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:ad:ba:f6:40:13:14:b2:16:44:be:16:8f: d6:fa:7d:36:48:a4:09:61:2c:34:97:12:44:ac:e8: 20:70:fc:d8:64:c9:e2:5b:7d:eb:55:8d:1d:b7:bc: 11:38:d6:a0:09:84:27:45:7c:5f:49:01:f6:90:26: 71:c1:9f:cf:d9:e2:f8:9d:99:00:e8:15:71:c2:36: 1f:1e:df:98:e8:56:17:d4:51:e5:b4:ac:af:47:8e: 2e:cb:4a:66:86:4a:41:3d:ef:73:ae:9e:2a:c3:c4: 10:84:e1:e5:a9:4a:f6:fa:b5:43:ca:cf:16:93:6a: a6:6f:06:e9:1e:a0:8b:23:9b:35:76:75:99:50:04: ab:3e:5e:90:03:cb:8c:3e:be:ba:1a:c9:0a:a6:67: eb:0f:89:2f:e0:17:d0:af:de:a9:60:f7:0b:22:72: 4e:74:25:3c:7f:d4:40:0b:bc:bd:2a:45:36:ff:ac: 9e:7d:79:35:6f:82:22:4e:32:f1:7f:73:9b:dd:a7: ea:e1:e2:9b:ea:a5:f5:97:42:db:3f:49:ea:ad:4c: 95:ab:bb:79:39:00:ae:01:de:db:aa:67:7b:63:b4: cf:a6:8a:ba:56:93:e6:eb:6f:a5:d1:73:44:75:6b: 29:54:01:12:6c:5f:fc:23:24:96:71:bc:81:18:f7: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:04:DB:7D:C2:8E:E2:2F:17:93:15:DB:1A:A1:DA:36:53:F6:49:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b091334-6bf4-3cfe-9975-8f7f2ceea60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:84:7f:92:ae:59:22:b5:77:15:e5:8c:e3:3f:d3:28:d3:0f: 8e:01:22:7c:70:07:88:a9:d7:45:3c:20:ee:6a:20:29:fb:8b: 99:bc:96:41:24:b7:3e:ec:33:c0:f1:73:15:ab:83:55:a4:e1: 87:6e:14:52:b5:04:94:06:1e:09:d6:50:9d:0a:2f:fb:db:71: b7:61:1d:02:2a:f5:e7:7e:83:b8:73:8c:b3:06:31:7e:71:84: c6:7b:2d:b5:e5:e9:cc:8f:49:7b:b6:aa:f4:c1:fa:46:88:4c: 88:03:57:b2:d5:29:49:a9:57:f3:77:22:87:0d:ef:14:ac:8e: fa:9c:d3:ed:71:fc:0e:74:3e:09:bd:56:8a:a4:04:28:23:8d: ff:80:b3:20:1f:6a:fd:27:98:2f:88:89:19:b9:92:bc:eb:2e: c3:2d:ff:8c:f8:43:48:6e:be:ce:95:ff:1d:6f:ab:35:7a:17: 94:4d:9f:51:5b:52:35:f9:c7:29:84:a7:df:4d:37:a6:22:c3: 7a:42:98:22:8f:b0:15:96:85:d2:de:d7:62:b9:ad:60:79:f7: 20:29:c7:c9:5b:8b:bd:8b:4e:33:60:7b:96:31:62:f8:d3:ee: 25:cf:f3:a9:38:8b:e5:26:82:66:f6:4b:81:fd:0d:19:85:78: 1a:ec:c3:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiR5WcGxjR4ACIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZTM4ODJhYTktZWZmZS00MTllLWJhYTgtZTMwMWYyY2U5NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnituvZAExSyFkS+Fo/W+n02SKQJYSw0lxJE rOggcPzYZMniW33rVY0dt7wRONagCYQnRXxfSQH2kCZxwZ/P2eL4nZkA6BVxwjYf Ht+Y6FYX1FHltKyvR44uy0pmhkpBPe9zrp4qw8QQhOHlqUr2+rVDys8Wk2qmbwbp HqCLI5s1dnWZUASrPl6QA8uMPr66GskKpmfrD4kv4BfQr96pYPcLInJOdCU8f9RA C7y9KkU2/6yefXk1b4IiTjLxf3Ob3afq4eKb6qX1l0LbP0nqrUyVq7t5OQCuAd7b qmd7Y7TPpoq6VpPm62+l0XNEdWspVAESbF/8IySWcbyBGPeEuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKME233CjuIvF5MV2xqh2jZT9kk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IwOTEzMzQtNmJmNC0z Y2ZlLTk5NzUtOGY3ZjJjZWVhNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmhH+SrlkitXcV5YzjP9Mo0w+OASJ8cAeIqddFPCDuaiAp+4uZvJZB JLc+7DPA8XMVq4NVpOGHbhRStQSUBh4J1lCdCi/723G3YR0CKvXnfoO4c4yzBjF+ cYTGey215enMj0l7tqr0wfpGiEyIA1ey1SlJqVfzdyKHDe8UrI76nNPtcfwOdD4J vVaKpAQoI43/gLMgH2r9J5gviIkZuZK86y7DLf+M+ENIbr7Olf8db6s1eheUTZ9R W1I1+ccphKffTTemIsN6Qpgij7AVloXS3tdiua1gefcgKcfJW4u9i04zYHuWMWL4 0+4lz/OpOIvlJoJm9kuB/Q0ZhXga7MN8 -----END CERTIFICATE-----Generated at Sat Jun 7 04:12:54 2025 by rpki-client