$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa File: 79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa (raw, json) Hash identifier: AI1WzsQIR6d61m/qygGtBdxrnt3/r0XenBzLbyoJLI8= Subject key identifier: 86:C8:BD:77:B2:26:A7:90:E8:8D:81:71:79:41:70:72:32:0D:73:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1092519BB5CD4A587B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397195 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:25:19:bb:5c:d4:a5:87:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=50e47cea-31e0-4956-8686-b8a137f0ffa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:f5:82:55:bb:3e:a3:de:b0:8c:d1:2d:c1: 9a:ab:29:d7:bc:10:8f:99:6e:6f:c6:d3:ab:df:85: 20:51:27:96:c7:26:7e:33:85:ec:7e:87:54:de:d5: 98:be:00:4b:29:71:be:16:bb:38:83:da:56:31:a7: d2:7e:33:3e:f6:55:68:82:67:99:d9:0a:02:7e:8b: 7a:df:ff:78:e8:30:e4:06:4b:31:ec:72:72:b3:ef: 00:d5:1e:78:7c:7f:27:8c:69:53:ca:e9:7b:ae:a7: 2f:d8:4e:04:3c:25:8a:9d:cc:64:1b:32:c8:c4:f9: c3:27:ff:f1:2f:ba:c1:78:71:9c:93:88:f2:32:3c: a6:7a:1b:9c:b7:59:64:72:70:96:ba:78:77:f0:e1: 0a:74:3f:81:21:cc:20:c7:4e:a2:37:79:56:2d:41: d1:1e:26:dd:94:02:84:16:33:01:6a:b2:12:b5:3b: f9:5a:54:8c:35:85:3e:d5:3a:d1:e2:ec:95:db:f0: 83:2e:c1:e8:0b:88:52:9f:51:d7:14:ff:42:8b:20: c1:d2:9f:39:a7:37:36:2a:26:95:fe:b3:85:46:a6: b7:51:fb:d7:b8:0f:11:ec:53:3d:fc:0a:b8:79:a2: 4d:08:24:8f:39:b2:a1:ab:70:b7:3f:27:43:6f:43: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:BD:77:B2:26:A7:90:E8:8D:81:71:79:41:70:72:32:0D:73:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e8:48:af:95:bc:41:9e:03:38:e5:e3:c5:54:76:2d:23:cf: 9a:1d:7e:7e:57:6b:46:f3:86:c9:71:ed:12:39:8e:4a:58:73: 87:6c:55:8d:bc:02:3f:92:36:46:35:55:bf:c7:81:e6:42:a3: f4:2b:54:37:93:bf:bc:f6:77:81:70:b1:52:98:71:21:3c:b3: 39:17:ba:a3:82:0f:f3:ec:8d:0b:bd:f5:08:8d:c7:d5:8e:8a: 13:40:8f:e7:3f:c1:5e:fd:8b:3a:f7:83:5e:f2:4c:b5:26:41: 22:6f:57:39:24:df:e7:ef:69:65:9e:bc:10:7a:38:7b:26:a4: 87:ef:dc:3e:b6:fa:13:e4:18:15:10:26:41:04:f9:ef:6c:d4: e5:0e:7d:4d:b4:18:87:59:42:31:ae:66:67:ea:48:b2:d1:65: 00:fd:95:a6:47:9d:00:f7:9a:30:6f:44:d0:0e:c5:77:60:18: 21:8f:80:0b:d8:6d:1b:78:79:26:a8:9b:16:6c:83:ad:cc:84: e8:e5:87:3c:05:07:eb:f1:d9:dd:da:ba:31:6c:ac:be:ca:ba: 28:5e:35:66:fb:3b:88:fb:7b:08:c3:d5:42:53:e2:9d:0d:f7: c7:94:aa:1d:c9:8b:c7:9f:d6:e5:27:1e:a8:81:3f:c5:55:3a: 98:7c:f1:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QklGbtc1KWHsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NTBlNDdjZWEtMzFlMC00OTU2LTg2ODYtYjhhMTM3ZjBmZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG31glW7PqPesIzRLcGaqynXvBCPmW5vxtOr 34UgUSeWxyZ+M4XsfodU3tWYvgBLKXG+Frs4g9pWMafSfjM+9lVogmeZ2QoCfot6 3/946DDkBksx7HJys+8A1R54fH8njGlTyul7rqcv2E4EPCWKncxkGzLIxPnDJ//x L7rBeHGck4jyMjymehuct1lkcnCWunh38OEKdD+BIcwgx06iN3lWLUHRHibdlAKE FjMBarIStTv5WlSMNYU+1TrR4uyV2/CDLsHoC4hSn1HXFP9CiyDB0p85pzc2KiaV /rOFRqa3UfvXuA8R7FM9/Aq4eaJNCCSPObKhq3C3PydDb0OYVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIbIvXeyJqeQ6I2BcXlBcHIyDXObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzlmZmY2NGEtNDRiNy0z ZmRkLWFhOGMtMzk4YTUzOWY2ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBb6EivlbxBngM45ePFVHYtI8+aHX5+V2tG84bJce0SOY5KWHOHbFWN vAI/kjZGNVW/x4HmQqP0K1Q3k7+89neBcLFSmHEhPLM5F7qjgg/z7I0LvfUIjcfV jooTQI/nP8Fe/Ys694Ne8ky1JkEib1c5JN/n72llnrwQejh7JqSH79w+tvoT5BgV ECZBBPnvbNTlDn1NtBiHWUIxrmZn6kiy0WUA/ZWmR50A95owb0TQDsV3YBghj4AL 2G0beHkmqJsWbIOtzITo5Yc8BQfr8dnd2roxbKy+yrooXjVm+zuI+3sIw9VCU+Kd DffHlKodyYvHn9blJx6ogT/FVTqYfPE0 -----END CERTIFICATE-----Generated at Sat Apr 12 02:01:50 2025 by rpki-client