$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: 83TPH6+WbmElGQDiS8nCl7QM5JSyVtS/5rNDRMVRcbs= Subject key identifier: 0B:9B:D8:E8:E8:1D:C0:59:7B:5B:3A:DA:EF:6B:14:4E:A9:DA:11:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10915E294CC34D97E69A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:15:e2:94:cc:34:d9:7e:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=dd341916-f8a1-4d10-9415-2721c3facc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:fc:93:2c:34:5e:38:be:fb:e1:85:45:c5: fe:ea:33:9a:4f:7a:d1:42:12:f5:f2:e5:08:7f:94: 20:11:ec:f6:cc:4e:64:a4:0b:4b:a2:a1:9b:96:7a: 78:c9:5b:58:36:e0:d0:1c:8d:4c:1a:43:73:fb:56: 71:02:d4:35:07:81:68:f4:6f:e2:53:9b:34:aa:35: 1d:a7:8a:22:0e:43:74:bf:f8:c2:28:c7:1a:92:fe: 9e:24:fa:4b:a9:f8:7a:62:c2:4e:bc:26:08:71:db: 99:3a:68:18:2f:2b:21:f4:78:6d:8a:1c:5d:f9:f2: cc:88:ab:20:75:fe:f9:f1:18:6c:14:41:d7:e4:c4: 6b:6a:e6:3b:52:1b:fd:fa:4a:85:5b:36:11:4b:70: 89:04:16:2c:18:8f:42:b0:c1:f3:5b:25:6d:17:51: 31:d8:55:78:3e:ba:39:df:80:fa:a9:5a:f3:0a:9b: 0f:dc:75:89:d2:78:a9:4b:82:0c:3a:b9:01:7a:27: 1a:cb:02:9d:ef:c9:08:89:27:5f:95:01:e7:b9:62: 6d:67:4e:8b:4c:55:21:f3:bf:72:7e:b3:ba:40:19: 53:d1:44:98:91:09:a8:16:b7:a7:40:a7:83:9b:36: 84:25:a6:79:d9:8e:57:e4:c2:c5:0a:aa:50:ab:ab: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9B:D8:E8:E8:1D:C0:59:7B:5B:3A:DA:EF:6B:14:4E:A9:DA:11:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:83:61:b0:49:e4:60:77:ed:30:6e:98:57:60:25:7c:b0:1e: cf:32:7e:8f:47:0b:a8:56:4c:03:09:02:2d:f1:b8:7f:9d:81: 64:9e:eb:cf:cd:03:8b:25:7b:92:ce:83:c5:b5:6e:9e:6e:15: 63:94:9e:f7:3f:83:61:f1:f3:c1:f9:8b:a1:80:01:1d:f5:41: 53:be:16:b7:9d:8b:0e:26:3b:12:02:d5:e4:47:10:4c:ed:06: 53:c1:98:83:38:3b:85:dc:f8:76:67:5b:eb:c3:12:db:c1:ed: 9d:79:fc:69:ce:c5:24:28:d5:a4:98:1b:40:3b:97:94:f3:e8: 78:21:92:2e:db:79:a1:48:b1:f6:8c:04:c7:7c:97:65:4d:a1: 51:05:81:5d:4e:3f:50:3e:38:63:a8:60:7d:fd:35:3c:cc:f3: 20:b7:58:0e:e2:f7:b8:43:91:62:95:83:0d:83:7c:d1:4c:dc: 54:bb:99:08:4b:1c:d7:65:11:a7:c5:5d:21:23:6e:06:13:25: 85:59:3f:9a:06:2a:14:0f:36:4c:38:bf:8c:7b:c8:80:d6:d3: 1f:d9:d1:9a:9a:fb:eb:1c:43:25:3d:9c:64:60:2b:e8:e4:e6: 37:9a:96:8e:d4:77:54:94:0a:2b:f0:9d:97:e2:51:c7:ae:86: d7:f9:ac:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QkV4pTMNNl+aaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZGQzNDE5MTYtZjhhMS00ZDEwLTk0MTUtMjcyMWMzZmFjYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidX8kyw0Xji+++GFRcX+6jOaT3rRQhL18uUI f5QgEez2zE5kpAtLoqGblnp4yVtYNuDQHI1MGkNz+1ZxAtQ1B4Fo9G/iU5s0qjUd p4oiDkN0v/jCKMcakv6eJPpLqfh6YsJOvCYIcduZOmgYLysh9Hhtihxd+fLMiKsg df758RhsFEHX5MRrauY7Uhv9+kqFWzYRS3CJBBYsGI9CsMHzWyVtF1Ex2FV4Pro5 34D6qVrzCpsP3HWJ0nipS4IMOrkBeicaywKd78kIiSdflQHnuWJtZ06LTFUh879y frO6QBlT0USYkQmoFrenQKeDmzaEJaZ52Y5X5MLFCqpQq6uqtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAub2OjoHcBZe1s62u9rFE6p2hEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWg2GwSeRgd+0wbphXYCV8sB7PMn6PRwuoVkwDCQIt8bh/nYFknuvP zQOLJXuSzoPFtW6ebhVjlJ73P4Nh8fPB+YuhgAEd9UFTvha3nYsOJjsSAtXkRxBM 7QZTwZiDODuF3Ph2Z1vrwxLbwe2defxpzsUkKNWkmBtAO5eU8+h4IZIu23mhSLH2 jATHfJdlTaFRBYFdTj9QPjhjqGB9/TU8zPMgt1gO4ve4Q5FilYMNg3zRTNxUu5kI SxzXZRGnxV0hI24GEyWFWT+aBioUDzZMOL+Me8iA1tMf2dGamvvrHEMlPZxkYCvo 5OY3mpaO1HdUlAor8J2X4lHHrobX+ayZ -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:48 2025 by rpki-client