$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa File: a725409d-9980-3cc5-89e4-a1049996251a.roa (raw, json) Hash identifier: 0PmgHNwVvsl7TYYLKgX9N2rxxnpfvhAqo/h4/ZKKebY= Subject key identifier: 53:13:62:76:0A:0C:BE:93:85:8B:76:D9:12:BE:AE:95:FE:25:0D:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE103E98E37DB84B1EAEC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397200 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:03:e9:8e:37:db:84:b1:ea:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=eeea89c1-0305-44a2-88fb-18f57a830322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:f2:79:ce:9d:68:3b:5f:fa:41:7e:c4:95: af:d9:7c:e3:ab:ec:bd:9a:39:de:cf:74:68:3e:53: 5a:11:b5:22:72:a8:5c:be:5d:ca:13:73:d2:c1:c9: ea:8f:b7:9b:cd:a5:ee:a3:61:d5:b1:a8:6d:96:53: 96:a8:4a:b6:44:c2:de:a1:f9:ed:0f:a9:78:88:54: a2:69:0a:9d:ec:8e:c4:c5:20:76:c4:51:6f:9c:aa: f3:7d:7a:84:35:5b:dc:ea:d6:bc:05:61:e7:54:a0: 1e:bd:10:68:0a:07:f5:85:6b:47:61:ec:2e:a2:b5: 61:58:20:87:86:11:09:87:8d:5a:8b:e6:bd:2d:42: 8f:ec:31:f9:75:ad:15:27:39:1b:52:15:8e:b7:dd: ed:1e:64:b6:33:32:59:ab:ef:2a:4d:78:38:c4:d4: 4c:fe:6d:e0:88:be:95:8f:b9:ab:80:73:61:61:ee: 96:d8:3d:92:d0:21:72:89:bd:5d:63:32:cc:5c:91: 03:03:89:42:b3:21:75:c6:9a:c2:29:1c:33:e0:bf: 60:ea:df:ad:8d:df:88:b1:c8:11:d0:c2:05:fc:56: bc:c4:8f:46:20:33:95:57:5e:2e:a3:46:6e:b7:ab: 8d:ed:ad:17:d1:65:ef:72:1c:95:f4:2f:2f:ba:c2: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:62:76:0A:0C:BE:93:85:8B:76:D9:12:BE:AE:95:FE:25:0D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0e:e2:2d:fa:d0:7b:ff:f1:38:79:59:85:4b:fa:d1:e1:ff: 31:29:26:90:aa:87:85:5e:8b:05:cf:65:01:c8:a5:4a:8d:f8: 37:77:51:4e:6f:77:63:8d:d9:cc:99:76:68:25:fa:68:98:f2: 17:8a:b8:aa:9d:25:04:a8:80:ab:28:f5:bb:f4:53:07:09:52: e6:8a:31:c0:0a:84:d8:bf:01:99:a5:d7:df:c8:f2:34:76:a8: af:7d:4e:49:f9:eb:e7:c4:04:13:f3:89:9d:29:d2:96:77:b1: 54:46:e8:9e:2c:24:77:9c:ff:9a:91:93:71:4c:a9:02:7a:97: 0e:21:7c:4b:16:90:b6:83:f5:24:bb:0f:74:ba:80:d2:93:53: 28:d6:25:1b:fc:37:a8:1d:7c:fb:fb:3a:9d:f2:0b:28:20:af: 9e:d5:b2:5c:f1:3b:8c:59:31:42:af:27:2e:95:05:38:b4:1a: 5d:71:06:d2:0d:f8:a3:32:26:78:96:9b:05:a6:10:80:03:e7: 6d:ea:4b:1e:86:b8:08:3d:4c:e9:4c:4d:13:b2:ef:93:96:73: 16:64:6e:d4:a3:c1:ee:01:35:30:db:8c:1c:69:0b:4d:7a:0f: 20:dd:87:a5:dc:0c:c2:04:e9:78:78:df:a4:1b:2f:1f:33:7e: 54:77:03:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QPpjjfbhLHq7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZWVlYTg5YzEtMDMwNS00NGEyLTg4ZmItMThmNTdhODMwMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8/yec6daDtf+kF+xJWv2Xzjq+y9mjnez3Ro PlNaEbUicqhcvl3KE3PSwcnqj7ebzaXuo2HVsahtllOWqEq2RMLeofntD6l4iFSi aQqd7I7ExSB2xFFvnKrzfXqENVvc6ta8BWHnVKAevRBoCgf1hWtHYewuorVhWCCH hhEJh41ai+a9LUKP7DH5da0VJzkbUhWOt93tHmS2MzJZq+8qTXg4xNRM/m3giL6V j7mrgHNhYe6W2D2S0CFyib1dYzLMXJEDA4lCsyF1xprCKRwz4L9g6t+tjd+IscgR 0MIF/Fa8xI9GIDOVV14uo0Zut6uN7a0X0WXvchyV9C8vusLKUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFMTYnYKDL6ThYt22RK+rpX+JQ2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcyNTQwOWQtOTk4MC0z Y2M1LTg5ZTQtYTEwNDk5OTYyNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/DuIt+tB7//E4eVmFS/rR4f8xKSaQqoeFXosFz2UByKVKjfg3d1FO b3djjdnMmXZoJfpomPIXiriqnSUEqICrKPW79FMHCVLmijHACoTYvwGZpdffyPI0 dqivfU5J+evnxAQT84mdKdKWd7FURuieLCR3nP+akZNxTKkCepcOIXxLFpC2g/Uk uw90uoDSk1Mo1iUb/DeoHXz7+zqd8gsoIK+e1bJc8TuMWTFCryculQU4tBpdcQbS DfijMiZ4lpsFphCAA+dt6ksehrgIPUzpTE0Tsu+TlnMWZG7Uo8HuATUw24wcaQtN eg8g3Yel3AzCBOl4eN+kGy8fM35UdwOs -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:41 2025 by rpki-client