$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa File: 5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa (raw, json) Hash identifier: n6V84neTnDgbVNryqOYfhZVmgaCos4Kns9aLoT40Xzg= Subject key identifier: 11:E2:0B:CB:80:7E:B4:38:F5:E4:FB:91:E1:2C:E2:D3:8B:52:38:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10860CFCBA6E93D5413DA Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397211 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:08:60:cf:cb:a6:e9:3d:54:13:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=5dddb72c-b854-4857-b337-45fe9f087baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:49:5c:fe:e1:c8:c3:c6:1d:63:7c:e2:fb: e9:23:37:48:33:50:cc:1c:0f:e0:d9:c4:22:0f:26: fd:2c:da:1e:50:d7:35:c1:6b:33:2d:5b:e6:c4:f5: 63:17:f0:6b:40:be:c3:a3:9c:24:56:78:29:cc:07: 33:bc:05:fb:14:de:7d:57:f1:c9:b6:90:1d:20:86: cd:a5:8c:02:b4:30:b5:9e:a1:dd:25:86:e3:61:b8: fb:2d:1c:20:2e:a9:f3:b8:42:27:fb:d7:87:46:47: 83:30:65:72:37:e0:00:90:17:a1:b4:48:54:51:c6: e1:23:59:fb:99:1c:c5:0f:1b:a5:bc:22:dc:ec:bb: 57:5d:7d:fe:03:d7:0b:27:d7:af:1e:bf:cf:7d:ed: f9:83:6a:d3:6a:09:49:aa:44:2f:7f:e7:e4:20:63: a3:0f:75:d7:3b:7b:77:ab:b8:9a:47:67:30:3c:8a: 0a:fc:2d:06:cc:26:d2:1c:0c:2f:67:29:ea:07:18: 14:36:10:ee:2b:b3:75:09:50:a3:91:02:3a:87:8c: 9f:db:69:4b:48:50:a3:94:90:f0:c8:4b:4d:a9:3d: 66:7c:07:85:c5:60:f8:93:b9:7c:55:8e:60:43:17: 9c:1b:97:d1:4f:d1:db:cb:07:b2:6e:02:33:75:f4: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:0B:CB:80:7E:B4:38:F5:E4:FB:91:E1:2C:E2:D3:8B:52:38:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:db:f1:f1:14:0e:57:35:d5:24:33:87:b9:76:b7:19:be:db: cb:58:f8:27:bd:8b:b7:16:ec:ce:23:eb:73:34:53:ab:e2:f3: 55:fa:fd:48:fa:12:bc:2b:5d:53:96:db:b1:27:3c:48:a8:a2: 46:93:89:4b:30:10:54:cc:e5:bc:51:b1:5e:2a:40:39:7f:08: 0e:80:2f:0e:b5:08:7b:ea:d4:a5:a0:0f:99:5b:f1:74:d8:d0: 29:d8:af:a5:45:99:5a:3e:d1:45:7e:a3:f1:01:f2:9f:c4:ee: be:66:f7:0b:30:7a:b6:fd:78:b0:df:8f:64:e9:2e:ea:b5:32: 69:c0:17:63:12:2a:c6:6d:35:53:14:ec:86:b1:c7:80:dc:94: 52:46:43:97:0a:09:0f:8b:cb:2a:c6:c8:84:68:31:77:3f:66: 09:12:d4:9a:15:77:cb:02:ef:25:de:e5:6e:c8:ba:51:c5:36: 16:49:35:71:af:01:3a:bd:aa:88:ed:d1:92:a8:54:58:f0:b8: d9:ac:72:50:b1:31:8d:b8:b7:c6:04:07:9a:cb:83:74:e6:5a: 74:53:1d:58:81:46:8a:04:69:bf:e9:cf:f6:da:29:cf:ad:78: 1c:d3:ea:d4:ed:cc:74:b1:75:6d:8e:1b:99:e5:fd:86:75:7e: 30:e3:81:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qhgz8um6T1UE9owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NWRkZGI3MmMtYjg1NC00ODU3LWIzMzctNDVmZTlmMDg3YmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uBJXP7hyMPGHWN84vvpIzdIM1DMHA/g2cQi Dyb9LNoeUNc1wWszLVvmxPVjF/BrQL7Do5wkVngpzAczvAX7FN59V/HJtpAdIIbN pYwCtDC1nqHdJYbjYbj7LRwgLqnzuEIn+9eHRkeDMGVyN+AAkBehtEhUUcbhI1n7 mRzFDxulvCLc7LtXXX3+A9cLJ9evHr/Pfe35g2rTaglJqkQvf+fkIGOjD3XXO3t3 q7iaR2cwPIoK/C0GzCbSHAwvZynqBxgUNhDuK7N1CVCjkQI6h4yf22lLSFCjlJDw yEtNqT1mfAeFxWD4k7l8VY5gQxecG5fRT9HbyweybgIzdfQBqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBHiC8uAfrQ49eT7keEs4tOLUjjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk1NGM5ZjktOThhMC0z ZmQ3LTlmYTItZWUzODdmYzliMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBO2/HxFA5XNdUkM4e5drcZvtvLWPgnvYu3FuzOI+tzNFOr4vNV+v1I +hK8K11TltuxJzxIqKJGk4lLMBBUzOW8UbFeKkA5fwgOgC8OtQh76tSloA+ZW/F0 2NAp2K+lRZlaPtFFfqPxAfKfxO6+ZvcLMHq2/Xiw349k6S7qtTJpwBdjEirGbTVT FOyGsceA3JRSRkOXCgkPi8sqxsiEaDF3P2YJEtSaFXfLAu8l3uVuyLpRxTYWSTVx rwE6vaqI7dGSqFRY8LjZrHJQsTGNuLfGBAeay4N05lp0Ux1YgUaKBGm/6c/22inP rXgc0+rU7cx0sXVtjhuZ5f2GdX4w44G2 -----END CERTIFICATE-----Generated at Sat Apr 12 01:54:13 2025 by rpki-client