$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa File: a0f7308a-fe9f-3622-93ee-4cb662e549db.roa (raw, json) Hash identifier: ur+rkUd4UtBFK0ZfZGZII3XpHg75sT5t4N/NZRpo/wk= Subject key identifier: F2:DB:3D:66:A8:07:D2:AC:21:20:A1:C3:53:FD:4C:2E:24:E8:08:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE107FA659195E3CCBAB200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396592 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:fa:65:91:95:e3:cc:ba:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=8489485f-a367-4284-a999-e9b69049aa4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:31:7d:b6:ae:0d:ac:06:03:47:75:57:ac: 7a:9d:d6:75:31:b5:6c:6f:97:d2:3a:63:3c:c3:ed: b0:10:da:28:18:83:a3:4a:b5:72:f3:c5:f5:d5:65: d8:a2:61:39:23:f3:9e:27:3a:d3:6c:f7:0a:43:c8: a2:a2:08:d9:f3:6b:08:93:8e:64:72:c3:ef:d7:e2: fa:56:8e:a6:7c:6e:e0:94:8c:d6:e0:63:c8:0c:99: fe:ac:86:f0:00:f9:d4:fb:ae:b3:7d:2e:5b:78:5c: b9:ef:12:80:7e:9d:a8:41:45:af:88:c7:54:03:30: cf:3a:c1:12:4a:14:dc:ef:65:f0:94:47:c0:a0:5b: 5e:5f:33:77:ef:90:29:c4:02:13:7c:75:45:40:1f: 80:09:bb:20:d9:5d:70:d2:93:5a:97:4d:0d:6c:2c: 0a:bb:cf:06:87:10:a7:1f:01:9e:6f:6b:65:f6:ae: d3:26:71:15:aa:5f:0e:c4:89:ab:eb:a9:65:28:97: bb:e2:ee:6c:65:62:b6:5b:22:f0:68:56:79:03:20: 2f:df:88:0f:22:ab:d9:be:91:82:25:19:c5:9c:7a: e1:77:3f:45:1e:ec:25:4f:32:82:61:2f:f0:54:c3: 2a:10:ea:08:36:5b:20:bd:94:fb:a0:71:70:d9:c4: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DB:3D:66:A8:07:D2:AC:21:20:A1:C3:53:FD:4C:2E:24:E8:08:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e8:17:33:e2:e6:f4:44:d9:5e:a3:03:20:80:2b:a8:1b:60: 5a:1d:0b:02:c7:d7:ba:b0:a4:6d:13:7c:4c:4c:8d:84:84:cb: e3:7b:10:eb:96:c7:c8:dd:fb:cc:ca:b3:f1:11:c7:c3:3f:79: ba:9a:90:5e:81:fd:0b:5f:6a:06:66:ba:9c:c5:c1:3f:c5:e3: 64:b7:c6:e3:8d:fe:65:45:08:51:39:fd:9c:23:ed:7f:de:05: 24:b6:88:6d:ed:86:44:2c:0d:a0:c9:15:7d:25:b8:7d:5b:dc: 67:b2:81:e5:a3:9d:2a:81:3f:84:de:b4:69:04:67:0b:35:f3: 19:b8:69:77:99:1a:38:cd:5a:69:1b:dd:67:49:2a:d2:d5:21: 75:e8:a7:db:37:9a:29:ef:67:9e:c9:ce:13:ba:b0:66:e2:47: 29:81:17:d1:9c:3e:62:86:71:95:42:03:4b:3e:5e:4f:b9:66: 8f:a0:70:bb:92:98:9f:b9:e6:f6:e2:4e:64:f3:8a:7d:80:0c: ea:4a:cc:30:5e:d8:6a:65:2c:2d:25:40:09:90:b2:2a:4d:c9: 9b:2f:56:59:31:87:9c:b3:65:40:f4:a5:fb:a8:3d:b8:d3:09: a3:b4:02:f0:9c:77:ef:04:4f:4d:15:68:ea:de:a8:1c:24:13: d7:75:e9:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qf6ZZGV48y6sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ODQ4OTQ4NWYtYTM2Ny00Mjg0LWE5OTktZTliNjkwNDlhYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVsxfbauDawGA0d1V6x6ndZ1MbVsb5fSOmM8 w+2wENooGIOjSrVy88X11WXYomE5I/OeJzrTbPcKQ8iiogjZ82sIk45kcsPv1+L6 Vo6mfG7glIzW4GPIDJn+rIbwAPnU+66zfS5beFy57xKAfp2oQUWviMdUAzDPOsES ShTc72XwlEfAoFteXzN375ApxAITfHVFQB+ACbsg2V1w0pNal00NbCwKu88GhxCn HwGeb2tl9q7TJnEVql8OxImr66llKJe74u5sZWK2WyLwaFZ5AyAv34gPIqvZvpGC JRnFnHrhdz9FHuwlTzKCYS/wVMMqEOoINlsgvZT7oHFw2cQpTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPLbPWaoB9KsISChw1P9TC4k6AhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBmNzMwOGEtZmU5Zi0z NjIyLTkzZWUtNGNiNjYyZTU0OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBj6Bcz4ub0RNleowMggCuoG2BaHQsCx9e6sKRtE3xMTI2EhMvjexDr lsfI3fvMyrPxEcfDP3m6mpBegf0LX2oGZrqcxcE/xeNkt8bjjf5lRQhROf2cI+1/ 3gUktoht7YZELA2gyRV9Jbh9W9xnsoHlo50qgT+E3rRpBGcLNfMZuGl3mRo4zVpp G91nSSrS1SF16KfbN5op72eeyc4TurBm4kcpgRfRnD5ihnGVQgNLPl5PuWaPoHC7 kpifueb24k5k84p9gAzqSswwXthqZSwtJUAJkLIqTcmbL1ZZMYecs2VA9KX7qD24 0wmjtALwnHfvBE9NFWjq3qgcJBPXdekF -----END CERTIFICATE-----Generated at Sat Apr 12 00:08:46 2025 by rpki-client