$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa File: 43e4df47-4969-3a04-8e97-881b8f84f808.roa (raw, json) Hash identifier: DJJgIjDkwN4jcKd4UrKnWQt1sM+dzFS4U/R8lpWOqg0= Subject key identifier: BC:D7:8E:D4:BA:1B:85:D3:F5:0B:71:DF:65:17:03:BB:39:7D:4A:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A262C15031BE7966DE0E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396562 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:26:2c:15:03:1b:e7:96:6d:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=7f654dc0-eb60-4355-b3d9-d63beb58a549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:44:24:06:bb:0c:17:47:8d:5c:3b:32:c5: 73:87:25:8b:b4:3d:51:b9:3b:ea:1e:af:2b:6e:f5: 3f:d5:e1:81:7c:18:5c:cc:9b:6e:13:8a:d3:1c:c7: b7:a1:33:22:d5:fc:71:b1:cc:c9:b8:d7:9c:56:92: 44:51:a4:c4:d9:51:eb:b7:71:5e:de:bd:8e:e4:43: 84:09:98:54:29:74:cb:9f:c0:40:55:40:89:4d:f6: 3b:97:68:7e:2b:36:15:7f:ff:c5:55:50:56:52:d0: 75:bf:0b:49:92:94:a1:11:21:2d:8e:a2:a1:b7:5d: b3:8a:a5:0d:f0:94:94:95:67:94:0e:5b:ee:43:5e: b0:6d:97:f7:ab:df:38:d8:ce:d4:b0:22:2f:2f:6e: 0a:d7:56:22:ac:99:59:f2:67:1a:80:7b:a2:cc:a7: 46:2a:5a:d6:40:50:3d:ca:0a:0f:75:7b:b0:47:a0: 4c:87:66:c8:12:a8:9e:77:04:dd:39:0a:09:f6:5b: 3b:71:70:a5:62:d8:64:bd:54:74:27:f8:40:45:1e: c0:b4:5d:c1:91:01:c2:0e:19:bb:46:f6:58:1f:ff: bf:8b:93:64:a1:b3:08:5f:24:0f:b0:5f:06:1c:e0: 69:82:24:c2:89:a6:1f:47:50:6e:b3:99:d5:99:f9: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D7:8E:D4:BA:1B:85:D3:F5:0B:71:DF:65:17:03:BB:39:7D:4A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:28:0f:10:09:f8:97:1e:7c:06:89:b5:d6:c7:d6:53:6b:de: 7a:ed:7e:f6:43:d7:8b:2c:b3:2f:5e:de:72:5c:cf:79:fb:a8: 0b:46:30:44:95:fd:13:cd:e1:8e:9d:4c:96:00:19:54:c0:1a: 13:3e:f2:d9:a0:40:92:27:ec:8a:86:18:f1:08:3a:c8:87:7c: c4:ce:8f:be:8a:b3:6d:43:a7:93:fb:ec:2e:36:f5:83:85:32: 73:a5:2c:86:97:e9:7b:54:df:97:78:8f:24:d6:99:91:ac:3d: ba:3c:d6:58:32:0c:1b:d4:0f:5b:40:18:75:be:5b:0c:3b:a7: eb:34:62:8b:02:d6:0f:af:b8:b1:70:a0:35:7b:56:cd:b8:b6: d2:cb:58:ae:88:d8:49:fe:77:7c:6b:1c:09:9b:33:d2:72:a7: 48:7e:c1:d7:60:6f:a0:be:c7:70:d6:3c:6b:90:ad:e8:13:3a: 9d:aa:7b:97:4e:7f:fc:c2:5f:28:78:82:fa:97:9a:f9:54:dc: b6:9f:ed:4e:7e:67:82:d3:da:b6:a6:96:c4:b9:7f:8a:d3:34: 9c:0d:3d:f1:04:6c:44:38:66:71:a8:7f:35:cc:56:61:a4:17: ea:48:33:cd:71:b6:71:f7:5c:41:d1:24:92:bf:f4:be:3d:a9: 13:29:87:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiYsFQMb55Zt4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk N2Y2NTRkYzAtZWI2MC00MzU1LWIzZDktZDYzYmViNThhNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N1EJAa7DBdHjVw7MsVzhyWLtD1RuTvqHq8r bvU/1eGBfBhczJtuE4rTHMe3oTMi1fxxsczJuNecVpJEUaTE2VHrt3Fe3r2O5EOE CZhUKXTLn8BAVUCJTfY7l2h+KzYVf//FVVBWUtB1vwtJkpShESEtjqKht12ziqUN 8JSUlWeUDlvuQ16wbZf3q9842M7UsCIvL24K11YirJlZ8mcagHuizKdGKlrWQFA9 ygoPdXuwR6BMh2bIEqiedwTdOQoJ9ls7cXClYthkvVR0J/hARR7AtF3BkQHCDhm7 RvZYH/+/i5NkobMIXyQPsF8GHOBpgiTCiaYfR1Bus5nVmfkqfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLzXjtS6G4XT9Qtx32UXA7s5fUp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNGRmNDctNDk2OS0z YTA0LThlOTctODgxYjhmODRmODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2KA8QCfiXHnwGibXWx9ZTa9567X72Q9eLLLMvXt5yXM95+6gLRjBE lf0TzeGOnUyWABlUwBoTPvLZoECSJ+yKhhjxCDrIh3zEzo++irNtQ6eT++wuNvWD hTJzpSyGl+l7VN+XeI8k1pmRrD26PNZYMgwb1A9bQBh1vlsMO6frNGKLAtYPr7ix cKA1e1bNuLbSy1iuiNhJ/nd8axwJmzPScqdIfsHXYG+gvsdw1jxrkK3oEzqdqnuX Tn/8wl8oeIL6l5r5VNy2n+1OfmeC09q2ppbEuX+K0zScDT3xBGxEOGZxqH81zFZh pBfqSDPNcbZx91xB0SSSv/S+PakTKYeI -----END CERTIFICATE-----Generated at Sat Jun 7 11:43:23 2025 by rpki-client