$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa File: ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa (raw, json) Hash identifier: 2FH3DWDiA1UYwE8cj88CTejDqQvqsHAAszj5fFUXfPc= Subject key identifier: 83:0D:F8:0E:EC:7F:EE:2D:71:7A:96:68:43:68:CA:FB:31:25:7D:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE105BDEA387E042C6F2400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396551 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:05:bd:ea:38:7e:04:2c:6f:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f2934fad-3739-4459-b27f-f0c24bdfbf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:ce:d1:19:6a:b2:58:d9:ad:95:61:69:dd: 01:53:73:ac:ad:65:00:87:ec:e7:71:41:a8:77:f5: cc:ac:11:88:91:7e:78:7e:88:89:ae:c1:ea:46:f4: bf:56:98:28:64:ec:19:01:07:49:02:fb:e1:4e:4b: 3f:84:75:5f:b2:3d:9d:e0:d8:3d:7f:8c:fb:b4:7a: 65:41:f9:dc:f6:c0:93:dc:89:29:c1:0f:1c:e4:9d: 6a:32:25:a7:62:36:2c:11:cf:af:11:4f:e5:ab:08: 52:f4:44:44:a7:ee:0b:ca:0f:61:4f:4f:5b:fb:53: b5:8f:a6:40:e1:69:15:90:50:71:21:3d:41:30:22: 67:e6:8f:4f:f9:ed:3e:55:89:89:b7:47:0f:32:02: 03:9f:b5:35:f2:df:54:18:5d:49:e0:e0:0d:12:65: 0c:94:b6:26:80:ae:e1:f8:85:d0:4b:9f:ee:ef:f9: e4:95:b5:86:b2:ec:a3:6b:a9:57:01:53:69:3f:6a: 09:f8:d0:81:fc:91:dd:c5:77:ee:fe:c8:c3:bc:e8: 64:98:06:cf:de:d5:3d:ad:56:d5:9f:f3:ac:d9:43: 00:9d:dd:08:8a:b7:dd:09:bc:c4:0f:d2:33:a9:ee: 4d:24:02:81:46:d3:0c:71:0a:77:7f:2d:ec:9e:2a: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0D:F8:0E:EC:7F:EE:2D:71:7A:96:68:43:68:CA:FB:31:25:7D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5e:e2:fd:32:d0:4a:20:7c:0a:f4:22:2f:91:1b:3a:1f:04: 98:be:72:5b:d6:32:66:15:fe:d2:28:cc:16:ed:bd:df:00:ca: fa:3b:29:85:54:bf:ab:ef:42:ac:7b:73:c0:fa:07:64:a1:55: 2b:74:20:71:c5:a3:25:8e:c4:f8:84:41:1b:b1:a1:17:85:67: d9:e0:3a:65:71:2f:6f:68:ab:19:05:a0:df:75:8c:f0:37:2f: 79:95:81:14:19:fb:63:49:46:f5:58:a7:a9:4f:54:e9:ce:00: 68:20:bd:96:76:71:b9:ea:ff:54:ca:57:40:eb:02:0c:02:50: d4:51:a5:4a:86:a0:71:63:5d:12:9f:8e:0b:04:3c:be:54:c5: dd:fd:fc:c0:52:73:f5:a2:6c:84:58:26:07:24:40:58:21:46: ee:41:87:09:1f:c9:79:89:a4:fc:2d:94:2b:c4:e2:95:bc:87: 06:a2:90:ec:4d:7c:7c:d4:0a:36:0b:2b:13:fb:00:27:66:04: 15:36:b1:b9:5c:b4:8e:d7:34:f3:29:d3:64:9b:91:11:6a:41: 8d:84:da:b4:61:a7:05:fa:f1:f0:bb:4d:15:65:10:ff:53:06: 3e:22:29:a6:2e:66:94:a6:6d:60:82:71:0c:a1:95:39:89:27: df:37:a5:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QW96jh+BCxvJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZjI5MzRmYWQtMzczOS00NDU5LWIyN2YtZjBjMjRiZGZiZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN3O0RlqsljZrZVhad0BU3OsrWUAh+zncUGo d/XMrBGIkX54foiJrsHqRvS/VpgoZOwZAQdJAvvhTks/hHVfsj2d4Ng9f4z7tHpl Qfnc9sCT3IkpwQ8c5J1qMiWnYjYsEc+vEU/lqwhS9EREp+4Lyg9hT09b+1O1j6ZA 4WkVkFBxIT1BMCJn5o9P+e0+VYmJt0cPMgIDn7U18t9UGF1J4OANEmUMlLYmgK7h +IXQS5/u7/nklbWGsuyja6lXAVNpP2oJ+NCB/JHdxXfu/sjDvOhkmAbP3tU9rVbV n/Os2UMAnd0IirfdCbzED9Izqe5NJAKBRtMMcQp3fy3snirHuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIMN+A7sf+4tcXqWaENoyvsxJX2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWMxMzVmYmEtNzdhMC0z Y2I2LTgwZWUtOGVhMmNhMjE4YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhXuL9MtBKIHwK9CIvkRs6HwSYvnJb1jJmFf7SKMwW7b3fAMr6OymF VL+r70Kse3PA+gdkoVUrdCBxxaMljsT4hEEbsaEXhWfZ4DplcS9vaKsZBaDfdYzw Ny95lYEUGftjSUb1WKepT1TpzgBoIL2WdnG56v9UyldA6wIMAlDUUaVKhqBxY10S n44LBDy+VMXd/fzAUnP1omyEWCYHJEBYIUbuQYcJH8l5iaT8LZQrxOKVvIcGopDs TXx81Ao2CysT+wAnZgQVNrG5XLSO1zTzKdNkm5ERakGNhNq0YacF+vHwu00VZRD/ UwY+IimmLmaUpm1ggnEMoZU5iSffN6VF -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:19 2025 by rpki-client