$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa File: a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa (raw, json) Hash identifier: LEqGUrdHJdtgeD/RwKpBcdw1oFbld2KLEnBjjtIwkDI= Subject key identifier: C0:83:A1:C4:19:19:23:D7:EF:BB:0B:AD:7E:29:7A:6B:73:86:41:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10A1DEDAE275D020F2680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36624 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0a:1d:ed:ae:27:5d:02:0f:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=2b1c0a6c-e97d-4c7d-9a43-dc98ee680051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:a5:a6:89:8f:0a:8f:bd:d3:aa:8d:99:62: 1d:8a:0a:4e:e6:f6:f1:6a:41:b0:22:75:ef:00:7e: 60:45:7a:eb:21:37:0a:03:45:60:76:10:c9:8f:27: 77:47:2d:11:8e:3c:fc:20:84:bd:fe:6c:a0:5c:2f: 2e:b0:15:e7:4e:9e:a8:04:b3:62:6b:da:e7:b5:97: d6:15:15:1b:36:db:70:2d:da:e6:ea:98:78:9c:ab: b3:27:6e:be:1e:56:98:21:32:40:38:3a:f2:b8:b1: a5:0c:b3:11:25:bc:51:4d:77:21:f5:94:23:04:1f: f6:43:ff:25:10:66:f1:86:2b:03:14:f3:ff:0f:65: 95:59:e1:93:66:f8:4b:d1:ca:77:1f:b2:a7:ad:63: 03:e9:09:d2:fa:4c:de:1b:aa:14:6b:2f:91:41:4c: c7:ca:e8:a1:51:9a:77:1c:b8:06:c3:ce:40:55:a8: 2f:58:01:d1:f3:fa:7f:60:9d:cc:08:3b:8a:4f:5c: 0b:6c:7e:b2:2f:ef:d5:09:30:89:34:d8:78:31:21: 16:3a:fb:20:7b:c3:e6:f8:de:32:00:3d:f3:11:d7: 68:9f:09:ff:26:8a:f1:0e:aa:4c:2f:b3:98:d3:f2: 6d:6a:e1:1f:9f:1e:dd:e7:ee:90:85:f4:cc:f7:94: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:A1:C4:19:19:23:D7:EF:BB:0B:AD:7E:29:7A:6B:73:86:41:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ba:94:d7:77:c3:11:ab:7e:fb:f8:07:a4:3f:35:d3:1e:14: 03:3f:5f:e4:7c:27:b1:15:0d:df:15:7d:66:82:63:e1:44:66: 53:2d:fe:41:81:23:6c:79:a3:50:92:de:23:29:52:4f:47:b7: b3:dd:00:ee:60:f2:65:12:28:1d:ac:29:a3:bf:b6:71:f3:b0: 79:f3:8c:b5:28:93:79:8a:54:03:b5:7f:bb:5d:b1:9f:1d:36: 77:85:00:cb:7c:93:68:5f:cd:0b:85:39:12:26:e6:d7:9a:c4: a2:fe:bc:01:05:ad:5f:1e:28:4f:e8:3a:25:97:76:5f:17:61: bb:e3:de:41:b6:7d:05:15:7c:8e:8b:26:8e:40:69:30:c2:c0: d6:1b:c5:7c:a9:a6:aa:4d:c5:b6:2d:42:94:5c:ed:19:eb:fa: 22:13:63:60:29:d6:51:e8:6d:00:8a:3b:57:c1:86:e0:e3:51: 25:de:a4:db:8c:4d:54:b8:b3:aa:3b:97:8c:06:d5:fe:2c:af: d6:bb:59:e7:77:2a:7e:dc:e5:f0:57:47:01:f5:df:c3:4b:56: 41:a9:d2:84:28:98:fe:66:a7:3f:c5:51:dc:c2:8f:01:60:4a: 8e:60:0a:4c:40:3f:17:5f:dc:11:8a:d3:0c:74:44:b5:57:b6: f2:45:a2:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qod7a4nXQIPJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MmIxYzBhNmMtZTk3ZC00YzdkLTlhNDMtZGM5OGVlNjgwMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkKlpomPCo+906qNmWIdigpO5vbxakGwInXv AH5gRXrrITcKA0VgdhDJjyd3Ry0Rjjz8IIS9/mygXC8usBXnTp6oBLNia9rntZfW FRUbNttwLdrm6ph4nKuzJ26+HlaYITJAODryuLGlDLMRJbxRTXch9ZQjBB/2Q/8l EGbxhisDFPP/D2WVWeGTZvhL0cp3H7KnrWMD6QnS+kzeG6oUay+RQUzHyuihUZp3 HLgGw85AVagvWAHR8/p/YJ3MCDuKT1wLbH6yL+/VCTCJNNh4MSEWOvsge8Pm+N4y AD3zEddonwn/JorxDqpML7OY0/JtauEfnx7d5+6QhfTM95RyZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMCDocQZGSPX77sLrX4pemtzhkEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3ZWYzZjYtNjZhMy0z YzdkLTljOTctMWZlNWQ2YTQzOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrupTXd8MRq377+AekPzXTHhQDP1/kfCexFQ3fFX1mgmPhRGZTLf5B gSNseaNQkt4jKVJPR7ez3QDuYPJlEigdrCmjv7Zx87B584y1KJN5ilQDtX+7XbGf HTZ3hQDLfJNoX80LhTkSJubXmsSi/rwBBa1fHihP6Doll3ZfF2G7495Btn0FFXyO iyaOQGkwwsDWG8V8qaaqTcW2LUKUXO0Z6/oiE2NgKdZR6G0AijtXwYbg41El3qTb jE1UuLOqO5eMBtX+LK/Wu1nndyp+3OXwV0cB9d/DS1ZBqdKEKJj+Zqc/xVHcwo8B YEqOYApMQD8XX9wRitMMdES1V7byRaJ+ -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:52 2025 by rpki-client