$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa File: 698462e2-42b4-35b5-a712-a58067b5e726.roa (raw, json) Hash identifier: vDMzJxT80FC/eoPF5fa0bZCmMdcRt1tqnjKWTvRPZb8= Subject key identifier: F5:6D:E6:AF:41:08:D2:89:2A:3F:F9:FB:3F:D6:EC:CA:93:AB:2B:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE109A47955A90E9D661780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36628 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:a4:79:55:a9:0e:9d:66:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=d236c91c-253a-4df5-bd96-072001a7f292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:ef:87:8e:69:78:6c:26:7d:5f:4e:6a:d6: f2:62:ce:b7:e3:68:3e:7c:6e:9a:6f:83:66:97:8f: 18:f3:4c:4d:42:a5:fb:e2:af:59:e7:f6:e7:8f:64: 7e:96:ec:db:0a:db:c0:bb:a4:ba:e8:3e:01:15:27: 1d:f3:b2:01:05:3b:b1:df:64:36:cc:7b:70:24:ff: 5a:5f:2b:93:c8:b9:4e:e0:7e:3b:0b:4e:d0:74:9a: 3d:99:f8:5b:f5:f6:a8:b6:6a:f7:99:e1:8e:c6:5e: 98:b7:41:5d:d6:7e:8a:01:93:3c:c5:96:24:de:91: 00:8f:22:69:98:63:aa:4b:f0:61:c5:5c:0e:4c:cb: 44:3c:b0:c0:39:c6:2a:9d:58:f6:45:de:48:08:94: af:b6:00:a0:13:95:d1:84:ad:19:14:fe:24:3f:12: dd:67:15:5b:82:f7:8a:7b:27:b8:b3:13:3e:ec:e7: b5:47:25:8d:aa:8e:51:72:97:19:cb:4f:56:26:6f: 41:75:57:06:89:f8:10:fd:ef:32:80:29:70:ef:84: 57:7c:4d:5e:09:7b:03:52:67:53:96:ff:ec:c1:29: b5:6b:52:3a:ad:f9:f1:14:44:23:e6:53:b0:99:33: bc:1c:a6:aa:14:c3:c4:2f:c6:ca:32:36:a9:97:a9: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6D:E6:AF:41:08:D2:89:2A:3F:F9:FB:3F:D6:EC:CA:93:AB:2B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:64:6c:57:18:2a:b5:70:4c:31:ba:b6:52:7c:54:ba:46:9b: 1e:0e:9e:0f:e3:ca:f6:8a:89:3b:da:be:15:3a:d1:09:94:50: 5c:83:82:7c:24:34:8e:17:ac:9f:46:29:cc:36:3b:16:b9:d5: d3:25:eb:20:7b:7d:78:b7:cd:04:5d:f3:95:b0:0d:ef:c7:3f: 62:34:78:9f:26:10:2c:28:71:aa:22:af:f9:76:2c:c9:49:67: 20:ea:d7:d1:3d:b9:d0:c3:76:99:27:ea:52:16:68:e3:b0:25: 8a:96:a0:e0:91:4c:15:a9:a4:ca:11:07:e4:ca:c6:db:9d:41: 42:9a:9a:1e:39:3e:38:85:74:08:15:6f:fd:a2:48:6f:49:2e: a5:30:92:8b:ae:07:fe:0c:8e:b9:3b:94:b8:11:63:ee:37:5f: 5f:b1:09:f6:4a:6b:e7:0c:52:48:f2:9b:5f:11:8f:8d:c1:a0: 36:96:d0:a1:45:3d:4e:b2:4e:1b:05:76:76:33:4c:06:f2:07: 73:a9:69:70:a9:35:7d:24:40:58:81:54:e6:95:f7:75:3f:45: 79:38:9d:09:f3:83:e4:70:a3:64:57:77:37:7f:e7:ae:72:66: 17:54:77:39:6c:2a:ab:47:fe:3e:95:78:63:e1:63:89:d4:6e: 25:0a:0c:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QmkeVWpDp1mF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZDIzNmM5MWMtMjUzYS00ZGY1LWJkOTYtMDcyMDAxYTdmMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHPvh45peGwmfV9OatbyYs6342g+fG6ab4Nm l48Y80xNQqX74q9Z5/bnj2R+luzbCtvAu6S66D4BFScd87IBBTux32Q2zHtwJP9a XyuTyLlO4H47C07QdJo9mfhb9faotmr3meGOxl6Yt0Fd1n6KAZM8xZYk3pEAjyJp mGOqS/BhxVwOTMtEPLDAOcYqnVj2Rd5ICJSvtgCgE5XRhK0ZFP4kPxLdZxVbgveK eye4sxM+7Oe1RyWNqo5RcpcZy09WJm9BdVcGifgQ/e8ygClw74RXfE1eCXsDUmdT lv/swSm1a1I6rfnxFEQj5lOwmTO8HKaqFMPEL8bKMjapl6ndkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPVt5q9BCNKJKj/5+z/W7MqTqytdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk4NDYyZTItNDJiNC0z NWI1LWE3MTItYTU4MDY3YjVlNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdZGxXGCq1cEwxurZSfFS6RpseDp4P48r2iok72r4VOtEJlFBcg4J8 JDSOF6yfRinMNjsWudXTJesge314t80EXfOVsA3vxz9iNHifJhAsKHGqIq/5dizJ SWcg6tfRPbnQw3aZJ+pSFmjjsCWKlqDgkUwVqaTKEQfkysbbnUFCmpoeOT44hXQI FW/9okhvSS6lMJKLrgf+DI65O5S4EWPuN19fsQn2SmvnDFJI8ptfEY+NwaA2ltCh RT1Osk4bBXZ2M0wG8gdzqWlwqTV9JEBYgVTmlfd1P0V5OJ0J84PkcKNkV3c3f+eu cmYXVHc5bCqrR/4+lXhj4WOJ1G4lCgyB -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:36 2025 by rpki-client