$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa File: 5aa49181-7067-32b3-a458-81e58ac1d399.roa (raw, json) Hash identifier: IhakeBogKLvfyYhldUiNcfShh6xJ8gg3cSPRV6j+tDs= Subject key identifier: F8:80:80:75:6A:FF:E5:19:62:47:38:BB:79:BF:40:E8:DD:06:8E:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE103D721514487CFDD4D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396554 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:03:d7:21:51:44:87:cf:dd:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=2591b559-3585-4270-a7b2-8053a29d9723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:20:4f:ff:48:bb:57:f9:9a:a4:e6:f9:2c: 61:9a:75:f5:22:f9:08:6f:39:09:0e:4b:cc:f3:dd: 9f:74:bd:4c:33:be:9c:4d:4d:e2:1f:84:55:83:e6: 53:0b:b5:f6:d4:0c:50:25:9f:04:c0:ae:0b:ee:25: ba:1f:fc:c8:ab:eb:eb:5b:3d:9f:87:6c:db:e6:75: 2c:59:43:04:2f:0f:87:ba:21:37:f8:26:be:bc:e8: 83:19:12:2f:9e:4b:05:29:55:0a:b7:57:38:98:5b: 85:f3:d0:34:75:5b:f1:23:00:aa:56:c2:38:16:b9: 02:e2:78:03:f4:06:2a:75:92:b7:22:fb:9b:d8:0c: 3e:6f:1a:bf:4b:a4:4d:ae:06:c2:57:f0:5c:22:20: 1e:67:8b:9d:86:85:d4:75:ea:e7:53:86:c7:62:a4: 76:3a:64:2f:63:60:d7:e1:95:9b:97:64:15:d0:d1: 47:39:61:4c:c1:9a:1b:05:53:18:27:b2:1d:ef:63: f1:4a:ec:44:54:59:07:16:c5:1f:1a:2d:fc:28:c6: 46:8b:69:3d:8f:c5:f7:cd:26:b8:24:cf:9b:e8:f6: f2:d0:fc:b6:c8:ee:42:7e:68:77:5a:e2:84:a6:bc: d9:90:db:c7:70:d9:d5:4f:a2:33:ff:71:bc:8d:d3: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:80:80:75:6A:FF:E5:19:62:47:38:BB:79:BF:40:E8:DD:06:8E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:70:65:e8:67:8c:74:d8:8a:35:2a:20:92:e5:ac:90:3f:63: 5d:da:80:d6:e7:98:ee:f7:f4:f3:96:1c:08:fd:24:27:76:6e: d6:28:39:be:4b:99:d7:53:8a:50:18:f5:16:44:92:9d:33:fd: 68:52:58:9e:1f:de:1d:18:94:b2:b9:c9:63:37:89:de:c2:8a: f3:8f:22:5d:eb:6d:16:8d:1c:fd:30:1a:75:0f:10:68:0a:d8: 80:ba:e4:42:82:13:34:f2:d8:b5:36:52:49:8b:1e:e3:3c:d5: 7c:e2:70:d8:16:fb:d0:61:47:44:59:91:a8:75:7a:d9:c8:fb: bf:48:f3:21:b2:7e:90:6a:e2:a8:f4:d1:ab:9a:03:20:5c:36: 34:cc:2f:db:ca:e9:00:ca:5f:82:c0:92:52:e7:5e:2d:38:58: 40:e4:13:26:7e:9b:c6:10:8e:05:1e:fc:a6:0a:02:72:26:c1: c1:b9:74:5a:40:ab:ff:7e:2a:04:3c:af:8d:ea:f3:30:f2:ea: b0:f7:f3:ca:cb:c2:c6:9c:92:4f:0c:bf:2e:d3:3d:b2:19:e3: 64:f9:d4:b6:e0:92:ef:19:e6:d9:10:ee:5d:fc:a8:63:5a:71: 6a:fe:b1:92:ae:fe:46:e7:fa:9f:4c:d7:f7:39:6a:b5:b7:3b: bd:63:d9:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QPXIVFEh8/dTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjU5MWI1NTktMzU4NS00MjcwLWE3YjItODA1M2EyOWQ5NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRAgT/9Iu1f5mqTm+SxhmnX1IvkIbzkJDkvM 892fdL1MM76cTU3iH4RVg+ZTC7X21AxQJZ8EwK4L7iW6H/zIq+vrWz2fh2zb5nUs WUMELw+HuiE3+Ca+vOiDGRIvnksFKVUKt1c4mFuF89A0dVvxIwCqVsI4FrkC4ngD 9AYqdZK3Ivub2Aw+bxq/S6RNrgbCV/BcIiAeZ4udhoXUdernU4bHYqR2OmQvY2DX 4ZWbl2QV0NFHOWFMwZobBVMYJ7Id72PxSuxEVFkHFsUfGi38KMZGi2k9j8X3zSa4 JM+b6Pby0Py2yO5Cfmh3WuKEprzZkNvHcNnVT6Iz/3G8jdPYJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPiAgHVq/+UZYkc4u3m/QOjdBo4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDkxODEtNzA2Ny0z MmIzLWE0NTgtODFlNThhYzFkMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+cGXoZ4x02Io1KiCS5ayQP2Nd2oDW55ju9/TzlhwI/SQndm7WKDm+ S5nXU4pQGPUWRJKdM/1oUlieH94dGJSyucljN4neworzjyJd620WjRz9MBp1DxBo CtiAuuRCghM08ti1NlJJix7jPNV84nDYFvvQYUdEWZGodXrZyPu/SPMhsn6QauKo 9NGrmgMgXDY0zC/byukAyl+CwJJS514tOFhA5BMmfpvGEI4FHvymCgJyJsHBuXRa QKv/fioEPK+N6vMw8uqw9/PKy8LGnJJPDL8u0z2yGeNk+dS24JLvGebZEO5d/Khj WnFq/rGSrv5G5/qfTNf3OWq1tzu9Y9n6 -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:32 2025 by rpki-client