$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa File: 8cb806d6-7611-3785-9497-21625bf59c84.roa (raw, json) Hash identifier: 3WIVKbc6c5GCjxzWXN69wENdv/BqLzEU6iDZMPkIWW8= Subject key identifier: 2E:48:B7:68:F3:0A:CA:DE:AD:A5:75:7F:F0:CC:61:B8:37:C6:F0:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE106BF6D79D22E89A76600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396573 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:bf:6d:79:d2:2e:89:a7:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=6bfb3f4e-3e44-40ba-96b9-be58be7b9668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:93:44:21:b8:a7:91:3a:cd:b4:83:4a:56: 02:5b:7e:c3:63:31:fa:6b:16:2c:d1:3d:38:66:bf: df:0c:21:f2:9e:af:ba:d2:26:2e:f4:0e:4a:36:63: 59:ff:bc:0f:0d:cb:6d:c6:74:97:67:0d:c1:4a:3d: cd:02:c0:02:a2:86:a5:dd:f5:00:64:d7:91:cf:ee: a0:f5:92:a2:25:32:74:19:b6:d5:0c:ad:27:40:e2: 72:1d:87:cd:31:d6:49:ba:ee:a7:a5:75:1d:53:86: fe:db:bf:88:be:87:51:ef:3b:ea:27:23:ac:ea:fe: 31:f8:09:3b:ee:67:ae:a9:93:94:0e:5c:b6:33:22: d6:c1:22:b0:9b:7e:dc:38:a0:44:93:2a:02:d0:9f: 44:ac:3a:44:62:f3:bf:b1:6d:c5:e2:b0:da:f4:e2: 1f:be:b4:78:8e:8f:f7:05:65:70:34:c0:e6:24:40: 98:62:2e:1b:1e:5c:95:7a:17:48:b2:ab:1c:87:1e: 15:a6:39:da:d5:d9:15:a7:58:92:44:3b:99:79:57: 3f:21:ce:11:33:32:20:6a:d5:65:72:ef:d1:26:6d: a6:88:d0:c0:de:43:10:2e:8f:b7:0f:3d:bb:84:53: 94:5e:a9:9c:36:50:e7:69:78:79:2d:31:f6:1c:51: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:B7:68:F3:0A:CA:DE:AD:A5:75:7F:F0:CC:61:B8:37:C6:F0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6a:5c:eb:de:93:14:93:35:87:ea:1d:ac:22:0f:a3:8f:72: b1:4e:57:9e:d9:a7:45:ae:cf:9f:49:63:75:e6:6e:6a:4d:66: 7b:2d:7b:00:c4:dd:60:4e:79:1a:c0:e9:d2:26:ae:88:03:82: c6:bf:52:a1:d8:48:8e:11:8a:b1:ef:87:97:40:2f:98:82:fa: 45:1f:4d:cf:5b:b2:62:63:ed:c5:3b:16:17:d3:04:da:3e:b7: 0c:d8:52:80:f8:25:1c:72:c2:1f:61:cd:dd:6c:8e:89:23:fc: 45:a3:df:fb:1c:0f:eb:07:7f:ca:ce:90:49:94:2c:f1:0a:9b: e7:31:d4:2f:0e:51:c5:6b:8b:61:2b:c4:f8:7b:cb:87:c8:ba: 14:f4:fe:62:ce:9f:9e:18:9f:e2:60:cf:82:10:83:fa:12:b9: a1:be:eb:34:14:2f:23:31:0d:e4:42:f9:47:d3:14:4c:4a:16: bc:e5:37:16:f2:fd:63:25:1a:23:af:b8:39:f5:64:2f:4f:e3: d1:b7:2b:e4:24:64:30:68:55:1e:64:10:77:21:61:1b:e4:cf: c0:24:25:36:40:af:ba:b3:ea:8b:8c:d4:37:70:57:c8:92:dc: 7e:b2:c9:7e:5d:61:74:41:50:5f:29:9a:e8:43:09:85:ae:9e: bd:96:1a:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qa/bXnSLomnZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NmJmYjNmNGUtM2U0NC00MGJhLTk2YjktYmU1OGJlN2I5NjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj62TRCG4p5E6zbSDSlYCW37DYzH6axYs0T04 Zr/fDCHynq+60iYu9A5KNmNZ/7wPDcttxnSXZw3BSj3NAsACooal3fUAZNeRz+6g 9ZKiJTJ0GbbVDK0nQOJyHYfNMdZJuu6npXUdU4b+27+IvodR7zvqJyOs6v4x+Ak7 7meuqZOUDly2MyLWwSKwm37cOKBEkyoC0J9ErDpEYvO/sW3F4rDa9OIfvrR4jo/3 BWVwNMDmJECYYi4bHlyVehdIsqschx4Vpjna1dkVp1iSRDuZeVc/Ic4RMzIgatVl cu/RJm2miNDA3kMQLo+3Dz27hFOUXqmcNlDnaXh5LTH2HFHTywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC5It2jzCsreraV1f/DMYbg3xvDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGNiODA2ZDYtNzYxMS0z Nzg1LTk0OTctMjE2MjViZjU5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjalzr3pMUkzWH6h2sIg+jj3KxTlee2adFrs+fSWN15m5qTWZ7LXsA xN1gTnkawOnSJq6IA4LGv1Kh2EiOEYqx74eXQC+YgvpFH03PW7JiY+3FOxYX0wTa PrcM2FKA+CUccsIfYc3dbI6JI/xFo9/7HA/rB3/KzpBJlCzxCpvnMdQvDlHFa4th K8T4e8uHyLoU9P5izp+eGJ/iYM+CEIP6Ermhvus0FC8jMQ3kQvlH0xRMSha85TcW 8v1jJRojr7g59WQvT+PRtyvkJGQwaFUeZBB3IWEb5M/AJCU2QK+6s+qLjNQ3cFfI ktx+ssl+XWF0QVBfKZroQwmFrp69lhoP -----END CERTIFICATE-----Generated at Fri Apr 11 23:28:35 2025 by rpki-client