$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa File: 4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa (raw, json) Hash identifier: lqQ5ytNq2igvfItHf//MwwQvotSgUfFCH6Qtcn6HYQs= Subject key identifier: B2:58:34:07:52:4F:A7:40:72:AE:B3:96:78:4E:F4:02:32:11:F3:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE102FECE68E896C5D1F840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396611 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:02:fe:ce:68:e8:96:c5:d1:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=daa0893c-653b-42e2-8a6d-51da124786cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:16:bb:fc:47:ce:d7:ed:83:15:70:3c:2b: fa:1d:66:c4:3d:0c:74:b0:c4:7f:c5:b0:af:64:98: 22:d8:82:c5:bb:be:47:e7:ef:c0:6c:42:33:ed:61: 5f:80:2b:ba:ab:68:78:97:45:20:26:2d:5b:21:34: 6f:ab:5e:6a:17:59:13:34:11:30:89:12:e8:5b:fc: 77:a8:81:f5:f0:24:0b:2b:b3:f6:7e:de:d9:d7:4d: b6:21:e4:97:84:71:ab:83:db:71:0b:21:b2:df:69: 84:c7:0a:a9:6a:c5:ff:ec:a6:62:dc:36:f9:2e:85: dc:7a:2f:a0:4b:a5:3b:14:d2:c1:35:83:33:64:2c: 80:19:04:8a:9f:7a:2e:37:9a:9d:cd:f1:08:37:53: 39:7e:90:33:1a:fd:21:6a:26:56:9d:3d:fc:05:d4: 7a:fd:43:23:25:3c:59:95:fc:eb:a9:a8:a5:0a:17: 40:61:ac:92:7e:0c:91:b9:b1:3c:39:6c:a5:eb:64: b2:da:73:9e:6a:88:68:26:ed:ed:a9:bf:6b:80:d8: 76:11:1d:56:b7:a0:c6:cc:29:85:bb:47:86:d2:10: f3:26:0f:22:4c:ad:2a:8f:55:a7:2e:9a:d2:5d:63: 14:1f:70:2e:cf:1c:20:19:34:71:b4:24:69:3b:95: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:58:34:07:52:4F:A7:40:72:AE:B3:96:78:4E:F4:02:32:11:F3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a3:e9:08:9b:eb:3d:0e:f8:a9:80:2d:0a:49:46:0e:8f:0e: 1a:1b:0d:fc:dc:87:a9:a0:4a:95:5b:d8:d3:32:cb:1a:c5:52: 9b:ed:6a:fc:7a:5d:16:7c:93:5b:61:02:58:88:6f:9a:fe:bc: c6:b5:9e:3c:0c:7d:7c:ac:d3:b4:9d:a5:d8:73:79:e7:c2:12: f9:a3:74:65:d1:b7:99:4a:c0:98:a9:0c:b8:d1:1d:af:3a:35: b4:0d:da:75:27:57:c0:8f:61:38:1e:30:98:54:94:70:a1:12: ac:71:3e:3c:7d:19:89:73:5b:ae:74:7d:b8:d3:b4:56:16:b6: 53:ae:bd:87:ed:7d:af:9f:b0:64:d5:26:9e:28:e8:6a:3c:46: bd:8e:90:f2:3d:d2:09:66:73:42:5f:64:b6:33:95:15:d9:af: c7:fd:05:80:03:80:0e:6b:9b:f4:a0:57:87:0e:6d:cf:83:fa: ec:4a:1f:66:f6:ef:21:40:66:74:f1:9e:da:a6:eb:9d:8d:9a: 07:c1:03:66:5d:fa:e5:f7:bb:c1:9c:96:62:c8:45:d9:13:84: 93:83:74:32:de:5f:c5:7c:13:d7:42:2b:f9:39:35:01:31:d5: 18:09:2e:f1:bc:c9:d5:46:e8:a8:b6:da:0f:7e:a0:37:a2:0f: 5e:78:3c:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QL+zmjolsXR+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZGFhMDg5M2MtNjUzYi00MmUyLThhNmQtNTFkYTEyNDc4NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhYWu/xHztftgxVwPCv6HWbEPQx0sMR/xbCv ZJgi2ILFu75H5+/AbEIz7WFfgCu6q2h4l0UgJi1bITRvq15qF1kTNBEwiRLoW/x3 qIH18CQLK7P2ft7Z1022IeSXhHGrg9txCyGy32mExwqpasX/7KZi3Db5LoXcei+g S6U7FNLBNYMzZCyAGQSKn3ouN5qdzfEIN1M5fpAzGv0haiZWnT38BdR6/UMjJTxZ lfzrqailChdAYaySfgyRubE8OWyl62Sy2nOeaohoJu3tqb9rgNh2ER1Wt6DGzCmF u0eG0hDzJg8iTK0qj1WnLprSXWMUH3AuzxwgGTRxtCRpO5Vq4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLJYNAdST6dAcq6zlnhO9AIyEfNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGI0NGFmYWUtODgxNS0z ZmNjLTlkYTAtYmExYjBiZWUzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwo+kIm+s9DvipgC0KSUYOjw4aGw383IepoEqVW9jTMssaxVKb7Wr8 el0WfJNbYQJYiG+a/rzGtZ48DH18rNO0naXYc3nnwhL5o3Rl0beZSsCYqQy40R2v OjW0Ddp1J1fAj2E4HjCYVJRwoRKscT48fRmJc1uudH2407RWFrZTrr2H7X2vn7Bk 1SaeKOhqPEa9jpDyPdIJZnNCX2S2M5UV2a/H/QWAA4AOa5v0oFeHDm3Pg/rsSh9m 9u8hQGZ08Z7apuudjZoHwQNmXfrl97vBnJZiyEXZE4STg3Qy3l/FfBPXQiv5OTUB MdUYCS7xvMnVRuiottoPfqA3og9eeDxg -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:16 2025 by rpki-client