$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa File: 5b8b2999-e481-3499-95c4-43200cd0febc.roa (raw, json) Hash identifier: baQUYzFxnt7boQ5MWUgfJadpNRSeKJ76p2fzOjofUNY= Subject key identifier: 8C:AD:A1:8D:1C:1D:69:2D:F7:70:4C:F6:24:BF:2F:81:FC:84:D2:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1040BB425460EFFBD2580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396600 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:04:0b:b4:25:46:0e:ff:bd:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=96c50b52-5f09-4fa4-9bc6-ea181363a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:21:63:d6:d7:d1:21:59:2f:a9:07:86:fb: 38:bd:15:8f:44:2c:bd:86:81:f6:87:22:62:dd:65: d5:d5:ff:f6:5e:0f:4d:6c:a2:ee:48:34:9e:e2:b5: 13:ee:52:e5:a3:21:2c:25:a3:9d:12:2c:54:96:fa: d5:ab:5f:fa:9f:fc:4e:4d:b3:7a:26:ad:e4:5d:7b: ac:d1:4e:f5:93:70:61:6d:f4:63:c4:43:ad:e9:4e: 46:6d:ef:97:e3:74:5b:49:2c:5c:60:4c:3d:8a:8c: 97:02:6f:46:f4:c7:27:55:cf:2e:d1:ec:08:27:a9: cd:94:ea:fe:87:2f:a3:12:1e:a0:53:06:77:6e:b2: 3c:91:77:77:83:30:82:99:9f:69:9f:6d:7c:6b:86: 69:7d:c9:3b:f8:d2:cd:43:85:a0:03:17:d7:84:79: 6e:15:28:c3:71:d8:4e:93:7e:58:03:08:29:e4:29: ad:8c:62:bf:e5:2c:64:b8:f2:aa:f6:05:9a:9c:82: cd:b3:aa:7d:13:ba:35:d5:a9:84:f9:8c:ba:a7:28: 96:a1:21:aa:39:53:1a:1a:e0:46:4a:61:51:f8:ed: 3a:9e:80:81:fd:8b:79:e3:8f:35:f3:8b:20:34:67: 26:83:4d:62:b8:79:d2:66:6d:d0:3d:32:48:2b:e1: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:A1:8D:1C:1D:69:2D:F7:70:4C:F6:24:BF:2F:81:FC:84:D2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4e:76:b6:b2:64:8b:86:53:bd:6c:11:6f:f7:94:15:5d:0c: 44:b6:7e:50:e7:7d:e9:bc:e5:b2:9b:a4:48:f3:e4:0f:14:b2: 66:ae:0a:4e:e2:48:2e:6d:93:61:d5:93:68:de:a4:c2:0a:a2: 17:eb:cd:23:ee:29:6a:06:a9:f5:a1:37:6e:ed:35:8e:5b:39: fc:07:60:af:27:46:4b:9f:8e:c9:d3:c1:3b:c8:0e:6b:9c:72: 71:03:f0:fd:1f:d6:15:00:ab:c6:1d:31:90:94:51:d4:f6:94: 7d:a8:61:78:65:bf:c6:d4:dc:58:51:a2:07:e8:9a:ba:78:3d: 70:8f:9c:ff:db:e7:8d:ba:48:f6:0d:30:56:50:4d:d2:6f:7d: e7:39:eb:59:ad:0c:77:f9:99:4d:0a:0c:57:95:54:6f:92:32: e3:6f:38:35:19:f7:72:fd:46:05:3d:1f:6f:17:db:81:91:f9: cd:e2:ba:8d:4f:5e:ac:3e:d0:4d:f6:fa:9b:9a:25:38:d5:7a: 66:6c:91:9e:c1:4e:d3:60:03:e9:0c:c6:6c:da:d0:9b:31:29: 1c:26:62:dd:71:44:11:52:76:dd:da:df:25:18:96:c8:26:ac: 91:d2:63:96:63:85:d4:82:60:99:41:12:5e:73:3b:9d:94:2f: e8:8a:e7:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QQLtCVGDv+9JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTZjNTBiNTItNWYwOS00ZmE0LTliYzYtZWExODEzNjNhOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkwhY9bX0SFZL6kHhvs4vRWPRCy9hoH2hyJi 3WXV1f/2Xg9NbKLuSDSe4rUT7lLloyEsJaOdEixUlvrVq1/6n/xOTbN6Jq3kXXus 0U71k3BhbfRjxEOt6U5Gbe+X43RbSSxcYEw9ioyXAm9G9McnVc8u0ewIJ6nNlOr+ hy+jEh6gUwZ3brI8kXd3gzCCmZ9pn218a4Zpfck7+NLNQ4WgAxfXhHluFSjDcdhO k35YAwgp5CmtjGK/5SxkuPKq9gWanILNs6p9E7o11amE+Yy6pyiWoSGqOVMaGuBG SmFR+O06noCB/Yt5448184sgNGcmg01iuHnSZm3QPTJIK+HJowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIytoY0cHWkt93BM9iS/L4H8hNKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI4YjI5OTktZTQ4MS0z NDk5LTk1YzQtNDMyMDBjZDBmZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmTna2smSLhlO9bBFv95QVXQxEtn5Q533pvOWym6RI8+QPFLJmrgpO 4kgubZNh1ZNo3qTCCqIX680j7ilqBqn1oTdu7TWOWzn8B2CvJ0ZLn47J08E7yA5r nHJxA/D9H9YVAKvGHTGQlFHU9pR9qGF4Zb/G1NxYUaIH6Jq6eD1wj5z/2+eNukj2 DTBWUE3Sb33nOetZrQx3+ZlNCgxXlVRvkjLjbzg1Gfdy/UYFPR9vF9uBkfnN4rqN T16sPtBN9vqbmiU41XpmbJGewU7TYAPpDMZs2tCbMSkcJmLdcUQRUnbd2t8lGJbI JqyR0mOWY4XUgmCZQRJeczudlC/oiudG -----END CERTIFICATE-----Generated at Sun Apr 13 01:07:01 2025 by rpki-client