$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa File: 43248210-9c19-3508-a3ba-fecc92f89d36.roa (raw, json) Hash identifier: XNgr8uAO9Q3gSQ+BdtvJxcPRaQqyuX74a0IxVkBJFJQ= Subject key identifier: 7F:01:28:1F:7F:56:14:4F:8C:C3:40:6A:9E:B4:23:C5:18:FD:B0:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A1FC91F47E9E0D314DEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397201 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1f:c9:1f:47:e9:e0:d3:14:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=fb651d5d-bd9f-4e5f-ae5a-64af524d970b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:1e:40:ee:26:75:9a:82:20:2c:d8:0e:d4: be:f8:65:aa:3e:56:4f:ea:8d:40:b8:03:75:94:b7: e6:7c:26:13:27:7c:95:25:03:37:3f:15:d7:de:79: 7f:e9:06:e9:89:51:b5:f6:d9:69:6c:bc:94:bf:af: 69:3f:87:ee:a4:93:54:8e:57:ad:cd:d1:10:4d:87: 2d:01:c5:c0:3a:0b:e4:a6:3d:66:38:83:c1:d2:2b: 5c:30:a7:10:77:70:88:55:48:f3:70:24:9d:65:c5: 09:85:19:8d:bd:e4:1e:23:70:49:32:f6:6e:4f:a4: d7:04:c9:3d:39:96:4b:70:a5:0a:80:ae:4f:66:d3: 82:7c:7a:b6:0a:69:f1:cc:f6:46:6b:32:0c:42:6a: 9b:0a:11:0a:1c:6c:e3:2d:22:51:a3:a0:9b:b1:00: 2e:28:13:cb:ab:89:4d:6c:af:e5:0b:a7:47:02:b9: 4b:73:77:20:0c:eb:61:03:f8:8e:c7:55:52:0b:41: a3:af:c8:a2:fe:af:22:ef:52:5a:b2:2f:cd:cf:4f: 18:a9:26:3e:d7:06:d6:7a:db:80:d4:b6:ae:4f:fe: b7:9f:66:0c:d5:80:ba:14:0b:ba:cd:07:ec:4a:2f: e8:6c:af:08:0a:a1:47:d0:25:41:10:dd:ac:62:fa: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:01:28:1F:7F:56:14:4F:8C:C3:40:6A:9E:B4:23:C5:18:FD:B0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:49:5c:2e:45:7a:20:08:78:d9:81:9e:dc:89:44:62:66:58: da:28:75:db:35:a5:e8:f7:21:57:2c:ca:4f:02:4f:55:8b:0f: 13:c7:b6:da:74:3d:76:df:cc:a5:f4:37:28:5f:91:e5:2d:63: 53:d8:ea:f7:d7:67:ab:6b:47:cd:ec:06:46:4a:a8:ac:93:ae: 7e:2c:14:bb:f8:05:da:7c:ad:ca:3f:d9:bd:62:39:a6:25:81: 65:a1:0f:f2:fa:05:f7:80:cc:7e:30:30:7f:b5:13:9d:17:58: 02:71:d1:cb:e6:7e:8d:16:ad:a4:3f:f3:45:5b:4a:b1:d6:5b: ad:fe:70:d0:d0:58:1a:09:56:fa:13:ae:1f:e8:8c:55:6c:a8: 6e:cf:39:8a:e3:61:68:cc:32:5d:94:a4:ed:02:2a:c3:fe:e2: b8:5d:b4:c7:d8:30:d7:96:d0:ae:28:78:60:81:7d:7c:b8:72: 89:55:7c:ed:3b:c4:7f:75:15:48:3a:2a:6b:13:63:a1:f3:69: e2:74:89:8d:ac:e3:47:ee:58:e2:5d:45:e9:36:8a:a3:33:2e: ae:bb:0f:13:93:c0:b7:15:05:6c:d2:06:a9:85:74:e3:16:d5: 64:81:07:e5:83:f3:c1:31:dd:33:b6:50:d8:42:f1:e1:81:39: d5:16:57:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGh/JH0fp4NMU3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmI2NTFkNWQtYmQ5Zi00ZTVmLWFlNWEtNjRhZjUyNGQ5NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7AeQO4mdZqCICzYDtS++GWqPlZP6o1AuAN1 lLfmfCYTJ3yVJQM3PxXX3nl/6QbpiVG19tlpbLyUv69pP4fupJNUjletzdEQTYct AcXAOgvkpj1mOIPB0itcMKcQd3CIVUjzcCSdZcUJhRmNveQeI3BJMvZuT6TXBMk9 OZZLcKUKgK5PZtOCfHq2CmnxzPZGazIMQmqbChEKHGzjLSJRo6CbsQAuKBPLq4lN bK/lC6dHArlLc3cgDOthA/iOx1VSC0Gjr8ii/q8i71Jasi/Nz08YqSY+1wbWetuA 1LauT/63n2YM1YC6FAu6zQfsSi/obK8ICqFH0CVBEN2sYvp2xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH8BKB9/VhRPjMNAap60I8UY/bD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMyNDgyMTAtOWMxOS0z NTA4LWEzYmEtZmVjYzkyZjg5ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBESVwuRXogCHjZgZ7ciURiZljaKHXbNaXo9yFXLMpPAk9Viw8Tx7ba dD1238yl9DcoX5HlLWNT2Or312era0fN7AZGSqisk65+LBS7+AXafK3KP9m9Yjmm JYFloQ/y+gX3gMx+MDB/tROdF1gCcdHL5n6NFq2kP/NFW0qx1lut/nDQ0FgaCVb6 E64f6IxVbKhuzzmK42FozDJdlKTtAirD/uK4XbTH2DDXltCuKHhggX18uHKJVXzt O8R/dRVIOiprE2Oh82nidImNrONH7ljiXUXpNoqjMy6uuw8Tk8C3FQVs0gaphXTj FtVkgQflg/PBMd0ztlDYQvHhgTnVFldQ -----END CERTIFICATE-----Generated at Fri Jun 6 19:28:46 2025 by rpki-client