$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa File: 9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa (raw, json) Hash identifier: HyPasdd0wIPa3jd9GJeySx6PZR63Mrz6/cuJf+XQkAs= Subject key identifier: 16:EF:7B:EC:CA:25:88:40:43:0A:5C:EB:7C:9B:7B:22:96:EC:C2:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10972998965C5A9B32900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397196 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:72:99:89:65:c5:a9:b3:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=0b1f7630-3ccc-486a-abfa-9a4a63825d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:f3:20:84:e6:d3:fa:bd:c4:cc:ee:c5:eb: 11:d3:54:51:58:55:55:89:f3:e9:fa:01:76:95:1f: cc:b3:50:9f:41:e5:0f:5a:8b:d6:5b:19:fe:77:e3: 1b:97:dc:e1:06:ec:95:8d:68:18:c9:53:01:f2:47: d3:8e:56:27:53:75:7a:9b:78:af:02:78:7c:fa:62: 48:f5:8c:a1:af:20:8d:90:7b:ae:dd:a1:66:36:57: 3a:80:f5:a2:e7:ee:27:94:d5:87:37:2b:96:35:06: 12:6d:dd:b6:ad:65:39:8f:48:14:c8:f6:37:b4:d9: 88:d9:93:dc:95:03:e8:2c:15:96:33:ca:f5:47:21: 3e:99:87:db:9b:88:1a:dd:ce:22:5f:51:ef:f5:bb: c9:5f:a3:ad:d0:3f:81:c2:2d:38:f8:94:b5:4f:76: c1:25:ba:35:33:c3:0d:8a:8d:9b:66:7d:84:09:02: 06:e7:b6:73:ba:17:af:54:b6:43:e2:d0:3a:23:24: 4b:5e:92:47:f5:bd:79:ba:01:86:e6:96:85:e0:18: 8d:6d:fb:74:1f:21:cb:70:83:f9:e8:2b:e5:f9:66: 4f:2e:96:48:6c:8b:bd:a6:e0:81:91:30:70:99:89: 75:3e:42:a9:74:0e:34:d3:90:53:3e:b5:3a:53:7b: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:7B:EC:CA:25:88:40:43:0A:5C:EB:7C:9B:7B:22:96:EC:C2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d7:ae:a1:de:0d:83:b6:4e:82:d5:2b:1d:36:d8:58:cb:82: 40:bf:f9:0c:8c:da:fa:1e:68:e1:11:f3:0e:7a:4a:55:c0:54: d4:95:70:d5:b6:b4:1a:c7:0e:da:d4:35:d5:88:68:f8:b7:a5: 2d:06:a5:7a:0c:66:9a:22:ab:01:cc:39:26:c1:b2:be:de:96: 16:36:1f:f6:b7:55:04:e5:9a:a7:d3:d5:eb:d7:5b:fe:45:61: 5b:76:f8:84:60:ce:c6:65:62:13:16:f2:20:20:db:af:5a:8a: b0:4a:0c:65:b6:93:a3:62:0c:15:7d:96:57:b0:a4:a9:a7:54: 1c:9b:7d:a5:e3:cd:34:b1:89:c0:32:ac:cd:f4:09:7b:08:af: a3:13:77:79:f3:68:30:a2:72:7c:ca:f0:fb:4c:88:f9:bf:73: 1b:f5:a4:db:8f:ad:62:fb:b0:50:75:d5:6c:06:ab:9a:fb:f5: 1e:c9:8b:8a:28:fe:57:87:b6:06:46:ac:f0:74:af:c4:64:1d: 04:d6:0f:bf:0b:84:62:d2:69:c6:90:2a:df:0b:d5:5d:d3:f7: 71:61:70:0f:8d:69:7b:b4:e8:22:67:48:3b:ab:15:f3:f5:9a: 7c:84:9d:20:10:29:b6:ef:e2:3a:2c:1d:d4:de:4e:56:08:b9: 41:43:ae:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QlymYllxamzKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MGIxZjc2MzAtM2NjYy00ODZhLWFiZmEtOWE0YTYzODI1ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCbzIITm0/q9xMzuxesR01RRWFVVifPp+gF2 lR/Ms1CfQeUPWovWWxn+d+Mbl9zhBuyVjWgYyVMB8kfTjlYnU3V6m3ivAnh8+mJI 9YyhryCNkHuu3aFmNlc6gPWi5+4nlNWHNyuWNQYSbd22rWU5j0gUyPY3tNmI2ZPc lQPoLBWWM8r1RyE+mYfbm4ga3c4iX1Hv9bvJX6Ot0D+Bwi04+JS1T3bBJbo1M8MN io2bZn2ECQIG57ZzuhevVLZD4tA6IyRLXpJH9b15ugGG5paF4BiNbft0HyHLcIP5 6Cvl+WZPLpZIbIu9puCBkTBwmYl1PkKpdA4005BTPrU6U3vXnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBbve+zKJYhAQwpc63ybeyKW7MLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU2MWU3YjctNWM5My0z NzE3LThhMmItOGRmZjk3NTNmYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBp166h3g2Dtk6C1SsdNthYy4JAv/kMjNr6HmjhEfMOekpVwFTUlXDV trQaxw7a1DXViGj4t6UtBqV6DGaaIqsBzDkmwbK+3pYWNh/2t1UE5Zqn09Xr11v+ RWFbdviEYM7GZWITFvIgINuvWoqwSgxltpOjYgwVfZZXsKSpp1Qcm32l4800sYnA MqzN9Al7CK+jE3d582gwonJ8yvD7TIj5v3Mb9aTbj61i+7BQddVsBqua+/UeyYuK KP5Xh7YGRqzwdK/EZB0E1g+/C4Ri0mnGkCrfC9Vd0/dxYXAPjWl7tOgiZ0g7qxXz 9Zp8hJ0gECm27+I6LB3U3k5WCLlBQ647 -----END CERTIFICATE-----Generated at Sat Apr 12 01:07:23 2025 by rpki-client