$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa File: 6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa (raw, json) Hash identifier: gKeqBw8++Lf0g+NxvWGXyFN8HHk7l/8UMP4WMWDsCsw= Subject key identifier: 48:79:7B:67:F4:A9:2A:6A:FD:CE:4F:27:35:8F:5C:29:24:8C:2C:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10645F91BA42CFBB3E380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396591 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:45:f9:1b:a4:2c:fb:b3:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=c42e7de6-35ae-4650-b8d4-ee0d561ec7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:08:7a:ec:ea:55:85:9c:79:c5:4d:a8:a2: 50:e3:31:68:d7:ab:1f:48:0a:69:10:59:2d:25:e1: 01:51:ef:76:aa:2e:db:db:c6:32:99:0a:d2:2d:f6: 0b:02:ff:0a:c6:a1:51:27:96:ed:7a:99:22:23:1e: bc:16:7c:06:d7:20:19:81:ae:78:a2:ac:51:0c:87: 8a:9a:eb:a2:e7:a7:76:82:04:92:83:78:f5:40:e6: 7d:76:22:90:03:93:52:7e:34:fa:fc:f5:f0:a6:11: 0d:c2:df:04:ff:95:71:e1:53:22:a6:6a:5c:4c:a4: 6d:de:22:b3:7d:91:f0:6c:07:73:11:53:56:ea:54: 82:72:f8:b1:bc:0f:ec:73:dd:e0:c7:85:e2:31:0a: 7c:59:7c:51:6e:8d:6c:90:e6:06:8a:90:f3:14:8e: 18:ef:b6:f3:53:ea:a0:a6:20:e8:d9:40:a6:f0:32: ab:4d:5a:96:b8:81:2a:23:ce:81:a6:33:63:cd:de: 09:be:ef:f8:5d:9e:b2:17:a0:46:d8:2a:f1:f8:de: 52:4f:c6:f6:db:e0:71:ba:a5:86:b8:73:d5:b8:3b: 01:84:ff:64:84:cb:33:52:40:c4:b4:a5:d1:7d:45: e7:df:10:91:b7:13:ea:ec:a0:4b:43:54:e7:c7:85: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:79:7B:67:F4:A9:2A:6A:FD:CE:4F:27:35:8F:5C:29:24:8C:2C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b5:bc:f4:85:9b:90:88:dd:85:5a:a1:52:71:4a:7e:22:76: b4:3d:32:e0:8e:17:21:38:63:42:1a:b7:2e:84:32:dd:05:9a: 65:78:fe:75:e5:f1:f7:9f:00:d7:48:ae:60:78:98:c0:7a:0e: f9:d9:3f:9b:df:16:6b:cc:75:ad:a5:64:e3:a2:85:9b:c5:89: 85:47:c9:17:5e:fe:97:d5:94:d6:9b:b1:e0:8c:2c:57:c7:38: 3b:19:f5:ec:28:10:b6:d0:85:8b:96:0d:0c:91:9a:f3:3f:06: 17:66:18:77:00:61:b0:22:e4:8a:c2:05:62:b0:05:37:b7:1a: da:75:3e:6d:cc:71:a1:32:cb:2e:67:dc:ab:5a:8b:f3:d8:7f: f3:a9:d5:9b:86:55:9a:63:37:f9:67:86:3c:54:50:ff:b1:07: b1:d6:4d:f1:cc:0c:b1:39:f1:f1:65:39:00:21:24:de:20:0d: 01:df:c6:ba:93:c7:0b:14:a7:43:c7:38:8e:d0:dd:12:e5:c0: 9f:fa:72:29:6f:4d:54:c0:8e:da:c4:ce:9d:ca:71:ef:6c:8a: 1e:55:de:49:40:17:26:8a:8a:d5:7b:01:1e:f7:6f:64:53:7b: 47:64:54:ea:d5:b1:78:4d:79:58:e4:d5:72:2b:a3:d9:34:f2: 8a:b2:b0:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QZF+RukLPuz44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YzQyZTdkZTYtMzVhZS00NjUwLWI4ZDQtZWUwZDU2MWVjN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEIeuzqVYWcecVNqKJQ4zFo16sfSAppEFkt JeEBUe92qi7b28YymQrSLfYLAv8KxqFRJ5btepkiIx68FnwG1yAZga54oqxRDIeK muui56d2ggSSg3j1QOZ9diKQA5NSfjT6/PXwphENwt8E/5Vx4VMipmpcTKRt3iKz fZHwbAdzEVNW6lSCcvixvA/sc93gx4XiMQp8WXxRbo1skOYGipDzFI4Y77bzU+qg piDo2UCm8DKrTVqWuIEqI86BpjNjzd4Jvu/4XZ6yF6BG2Crx+N5ST8b22+BxuqWG uHPVuDsBhP9khMszUkDEtKXRfUXn3xCRtxPq7KBLQ1Tnx4U9XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEh5e2f0qSpq/c5PJzWPXCkkjCxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmU5N2E2OTEtN2EwOS0z ZWU0LWFhM2UtNDYyMmJmMDg1YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJtbz0hZuQiN2FWqFScUp+Ina0PTLgjhchOGNCGrcuhDLdBZpleP51 5fH3nwDXSK5geJjAeg752T+b3xZrzHWtpWTjooWbxYmFR8kXXv6X1ZTWm7HgjCxX xzg7GfXsKBC20IWLlg0MkZrzPwYXZhh3AGGwIuSKwgVisAU3txradT5tzHGhMssu Z9yrWovz2H/zqdWbhlWaYzf5Z4Y8VFD/sQex1k3xzAyxOfHxZTkAISTeIA0B38a6 k8cLFKdDxziO0N0S5cCf+nIpb01UwI7axM6dynHvbIoeVd5JQBcmiorVewEe929k U3tHZFTq1bF4TXlY5NVyK6PZNPKKsrBu -----END CERTIFICATE-----Generated at Sat Apr 12 02:08:20 2025 by rpki-client