$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: HryjsJFEm3wMqCeNM+XGTHp208VWbGFhIT7rnV/V/ag= Subject key identifier: 1E:D0:86:D8:E4:95:F8:AA:96:FF:13:9A:2D:82:32:67:78:B2:0B:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE108804A99590B5D598300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:08:80:4a:99:59:0b:5d:59:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3f923a4d-04f0-480c-9b03-2c4a89780a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:b5:eb:89:7c:af:9a:79:2f:4d:cf:5a:3c: 92:0c:a9:58:dc:c2:a4:f3:de:4f:6b:a5:5f:18:4d: 4a:97:f3:e1:1a:8b:5a:1e:df:e6:2c:f6:40:39:0b: 37:69:16:e4:23:b1:de:67:fa:99:55:5c:39:46:65: 9d:25:79:41:89:37:d8:91:21:cf:fc:ff:5e:b5:a5: 42:0b:33:6c:d0:9a:75:21:35:30:b9:63:e2:15:43: 85:ff:78:84:af:46:eb:5e:5b:b0:15:7c:67:db:e9: cf:da:84:3f:a0:0e:dc:8f:3e:8c:33:f3:ee:90:0d: 9b:5d:5d:9e:c2:8d:25:d5:60:ac:0b:c7:89:5b:08: 92:c2:43:ef:68:a0:a5:dd:46:71:fc:89:97:24:17: 6a:7d:c2:fa:f2:8a:b7:82:61:92:08:7b:17:cb:c4: e7:0c:7c:bd:6f:59:a9:90:41:cf:a2:f7:c8:19:ec: e6:4e:ed:d5:6e:b6:3b:b2:37:ab:7e:71:ab:04:59: d9:3a:b0:d2:91:48:0c:61:c2:3d:e1:6d:61:72:41: e6:68:e1:05:89:45:3a:a2:13:16:e3:4d:0c:ea:2d: d7:ca:ce:13:98:89:f4:f1:93:11:8a:35:d0:19:bd: 4b:55:b5:ca:c2:4a:12:b8:a6:09:22:0e:f5:d3:25: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D0:86:D8:E4:95:F8:AA:96:FF:13:9A:2D:82:32:67:78:B2:0B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:77:d9:ff:12:c7:67:ce:a4:19:f5:e2:6f:a3:de:d7:13: 27:9d:2f:5f:4b:96:fc:e9:2b:f0:42:dd:45:70:78:93:24:f3: 12:e6:6b:f7:eb:ad:d7:04:ea:a0:19:82:27:f3:61:eb:d5:3e: bf:2c:fe:eb:c9:c7:cc:36:54:0b:b3:dc:58:08:a1:f8:e6:de: c6:4f:ba:96:05:3b:c5:2a:17:00:7d:d3:ad:04:11:d9:22:b7: 81:f0:a2:31:c1:c2:5c:2f:e5:92:09:35:05:9d:12:46:f8:0a: ee:a7:84:e0:64:ae:c3:6d:88:0c:eb:72:6c:3c:ed:75:71:8a: 91:88:52:bc:3e:02:42:0b:28:ff:d7:f0:5f:40:41:4f:72:81: 41:4e:3e:3b:7c:8c:61:5e:d6:ab:8e:8b:7c:97:6b:4f:e1:93: 0d:3c:ca:b4:58:e4:9b:4f:45:00:ff:1d:84:b7:27:a7:c1:fd: aa:ae:9b:f2:6f:0b:39:45:64:50:35:97:d2:4f:bc:c1:80:f7: 54:d3:50:20:0a:bd:ae:99:6d:27:7d:da:75:36:54:5f:19:58: f5:6c:65:d7:28:76:67:9e:23:ea:2f:fb:aa:8d:f5:ea:76:da: 8c:86:88:88:ea:39:ac:18:e1:10:a6:aa:e2:6b:6b:76:35:69: 98:5b:06:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QiASplZC11ZgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2Y5MjNhNGQtMDRmMC00ODBjLTliMDMtMmM0YTg5NzgwYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX2164l8r5p5L03PWjySDKlY3MKk895Pa6Vf GE1Kl/PhGotaHt/mLPZAOQs3aRbkI7HeZ/qZVVw5RmWdJXlBiTfYkSHP/P9etaVC CzNs0Jp1ITUwuWPiFUOF/3iEr0brXluwFXxn2+nP2oQ/oA7cjz6MM/PukA2bXV2e wo0l1WCsC8eJWwiSwkPvaKCl3UZx/ImXJBdqfcL68oq3gmGSCHsXy8TnDHy9b1mp kEHPovfIGezmTu3VbrY7sjerfnGrBFnZOrDSkUgMYcI94W1hckHmaOEFiUU6ohMW 400M6i3Xys4TmIn08ZMRijXQGb1LVbXKwkoSuKYJIg710yWA0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB7Qhtjklfiqlv8Tmi2CMmd4sgvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmRHfZ/xLHZ86kGfXib6Pe1xMnnS9fS5b86SvwQt1FcHiTJPMS5mv3 663XBOqgGYIn82Hr1T6/LP7rycfMNlQLs9xYCKH45t7GT7qWBTvFKhcAfdOtBBHZ IreB8KIxwcJcL+WSCTUFnRJG+Arup4TgZK7DbYgM63JsPO11cYqRiFK8PgJCCyj/ 1/BfQEFPcoFBTj47fIxhXtarjot8l2tP4ZMNPMq0WOSbT0UA/x2Etyenwf2qrpvy bws5RWRQNZfST7zBgPdU01AgCr2umW0nfdp1NlRfGVj1bGXXKHZnniPqL/uqjfXq dtqMhoiI6jmsGOEQpqria2t2NWmYWwZX -----END CERTIFICATE-----Generated at Sat Apr 12 00:00:29 2025 by rpki-client