$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa File: 4605a289-a470-365a-9c64-776d74fe8ae3.roa (raw, json) Hash identifier: OADUJSSySlSzNc9JqRMBORXV5bGHs1ivgc4LQ3AFY/g= Subject key identifier: 40:1A:EA:E3:21:D3:AF:5C:B9:15:A7:C2:33:5D:90:E0:ED:D4:16:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE105DCCF54C31A1CCF9C60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36619 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:05:dc:cf:54:c3:1a:1c:cf:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=43f9a202-191d-49e5-9a3f-a2de3d18063a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:ea:cc:2e:c5:a3:93:86:4e:fa:c2:c5:e6: 84:86:2f:a4:a6:97:41:7d:23:4d:e0:25:64:4b:dc: 73:10:31:26:11:8d:29:17:de:98:ef:61:3f:a2:1e: 64:73:fe:2a:e9:05:50:f7:d0:7d:7b:41:0f:0b:60: 09:10:fe:98:3c:cb:a1:c0:3a:1d:8b:48:d8:14:1a: 32:e0:ab:dc:6a:29:e8:1a:9d:c6:7a:e3:a2:49:c3: 3b:f6:85:5d:d3:12:f1:89:2d:94:be:b0:64:7a:13: 29:c4:b8:3a:b3:68:36:10:66:dd:d2:0a:5a:34:7b: c0:3c:c2:10:71:e4:f9:41:b5:73:60:4a:e0:67:48: a2:1a:e5:f2:31:48:c8:cb:80:f0:c0:09:a8:b4:e0: ea:37:00:e8:5b:62:86:8b:e6:1e:7f:05:7b:e1:6e: bd:38:e9:2d:c5:4f:69:5d:6e:a1:92:8a:e6:3b:43: c4:e5:91:e0:e5:ab:00:c7:71:7f:a8:fb:50:ea:ff: 7e:bf:f8:28:1b:3a:3c:ca:48:a0:c3:66:77:aa:78: 01:c4:73:2b:f8:6b:38:0a:df:c3:eb:75:04:0f:0a: 2c:89:02:55:bc:35:f3:1e:22:88:d0:2e:ef:bd:02: 5f:03:5a:15:79:91:da:28:48:cb:42:c0:67:d5:22: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1A:EA:E3:21:D3:AF:5C:B9:15:A7:C2:33:5D:90:E0:ED:D4:16:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c1:41:a1:e2:2f:49:34:3f:31:3d:8b:ef:e8:bf:fa:41:2a: 98:f5:1c:44:46:5d:e6:5a:d1:78:94:73:b4:3c:02:eb:df:dd: 45:44:6b:71:7c:6e:6d:ca:d3:c0:a7:a0:c8:36:35:f2:67:a8: bb:df:c8:7d:81:c1:27:b4:05:c8:9e:6a:44:81:22:92:3d:d7: 1a:19:ee:0c:45:ca:78:2e:92:63:49:c0:71:ae:60:11:b5:da: e4:30:ba:a2:bc:92:77:1e:82:45:0f:45:7b:4a:94:33:a8:e8: 0b:1b:aa:95:ef:4b:48:fa:bb:e1:7d:44:29:6a:35:87:f5:95: 3f:57:ed:31:20:e3:49:a6:5f:1c:bb:b6:e4:45:46:b5:4f:f9: 09:b6:b5:e2:58:f6:2d:21:7a:df:53:5a:d2:0d:57:0b:5a:7e: 28:32:64:77:bf:35:84:85:af:9e:32:42:5d:e4:ec:a7:c9:3e: e5:ea:55:0e:4f:5d:83:93:37:01:0e:80:2f:cc:2b:50:e2:6a: 94:90:ef:2d:e8:0c:e0:67:af:ba:34:9c:b4:da:05:f5:b1:b0: 1f:4c:f6:91:69:22:05:47:86:16:d2:ec:19:e9:78:d4:51:c1: 04:85:6f:ef:1a:48:98:01:02:50:25:5a:fd:02:5b:4d:91:3e: eb:b9:8f:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QXcz1TDGhzPnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NDNmOWEyMDItMTkxZC00OWU1LTlhM2YtYTJkZTNkMTgwNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6/qzC7Fo5OGTvrCxeaEhi+kppdBfSNN4CVk S9xzEDEmEY0pF96Y72E/oh5kc/4q6QVQ99B9e0EPC2AJEP6YPMuhwDodi0jYFBoy 4KvcainoGp3GeuOiScM79oVd0xLxiS2UvrBkehMpxLg6s2g2EGbd0gpaNHvAPMIQ ceT5QbVzYErgZ0iiGuXyMUjIy4DwwAmotODqNwDoW2KGi+YefwV74W69OOktxU9p XW6hkormO0PE5ZHg5asAx3F/qPtQ6v9+v/goGzo8ykigw2Z3qngBxHMr+Gs4Ct/D 63UEDwosiQJVvDXzHiKI0C7vvQJfA1oVeZHaKEjLQsBn1SKnqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEAa6uMh069cuRWnwjNdkODt1BaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYwNWEyODktYTQ3MC0z NjVhLTljNjQtNzc2ZDc0ZmU4YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAwUGh4i9JND8xPYvv6L/6QSqY9RxERl3mWtF4lHO0PALr391FRGtx fG5tytPAp6DINjXyZ6i738h9gcEntAXInmpEgSKSPdcaGe4MRcp4LpJjScBxrmAR tdrkMLqivJJ3HoJFD0V7SpQzqOgLG6qV70tI+rvhfUQpajWH9ZU/V+0xIONJpl8c u7bkRUa1T/kJtrXiWPYtIXrfU1rSDVcLWn4oMmR3vzWEha+eMkJd5OynyT7l6lUO T12DkzcBDoAvzCtQ4mqUkO8t6AzgZ6+6NJy02gX1sbAfTPaRaSIFR4YW0uwZ6XjU UcEEhW/vGkiYAQJQJVr9AltNkT7ruY9U -----END CERTIFICATE-----Generated at Fri Apr 11 23:51:08 2025 by rpki-client