$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: tR2RsO7DuCDoMizB4vcxfLMTOsvaI+OoyhbtgqQxYLU= Subject key identifier: 85:C9:02:0B:17:FE:F7:4E:52:91:B5:05:B7:24:70:FE:A3:17:FD:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE109CAF056EB5FDE944C10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:ca:f0:56:eb:5f:de:94:4c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=13b5e07a-4b90-46ae-86d9-a2043a6a3f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:db:d0:b5:58:2a:01:e3:f5:6e:21:8f:e3: c0:aa:a4:fe:82:21:7a:9f:f5:59:b0:c0:1a:c1:9d: 51:84:0b:bd:51:a0:17:80:d7:79:c1:0b:a8:37:00: b8:64:c4:cb:a7:49:d4:59:eb:f9:c7:f6:e6:ee:a9: d6:d3:49:96:d8:dd:31:c9:dc:1a:fb:cd:c0:2e:1a: 12:31:cc:88:72:69:77:6c:59:bf:60:27:81:93:44: 71:81:f5:4e:c0:d7:23:80:61:67:08:a3:7b:12:15: 50:ec:6e:62:cb:d5:8f:2c:f0:ad:fe:fd:07:7d:6c: e4:94:85:8d:22:b6:82:ff:17:d2:49:dd:0c:c6:56: a0:e0:cd:43:5f:2b:16:1d:81:1c:b8:ea:a6:ae:f4: 0e:bc:a3:e0:0d:39:24:8c:2a:15:21:35:d1:dc:c6: b0:ae:a5:b9:7b:74:7d:c4:5f:c7:0e:cb:1d:96:3d: 1b:4e:18:d3:0e:c1:4d:ae:63:20:da:04:b6:0e:13: 55:19:b1:c3:12:8e:52:ce:b0:80:95:44:f2:52:4d: 4e:f8:75:dc:e6:7d:6c:15:ba:e9:aa:04:9c:5f:cd: 6d:dd:80:aa:d9:57:d6:37:bf:50:09:6b:a5:ee:5d: 40:47:b3:c4:d9:42:a1:9b:0f:c5:4a:50:a8:dd:86: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:02:0B:17:FE:F7:4E:52:91:B5:05:B7:24:70:FE:A3:17:FD:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:62:19:9a:76:17:32:e0:bc:b8:6c:5c:10:3e:4d:81:1c:cd: c0:f1:5f:26:7d:41:20:30:ec:5f:9f:ed:37:86:f3:4b:ea:b0: 6c:b1:be:1d:76:c1:e6:e3:0a:7f:f8:e8:a3:3a:f2:5a:d5:37: d7:e0:58:9b:8a:fc:4c:94:14:38:4e:2b:04:f6:e3:27:f4:73: ff:30:c7:33:f8:76:dc:40:57:c8:26:c0:9e:b1:ef:d3:aa:ed: fb:f5:54:72:a9:88:93:8c:0c:e9:7f:3c:4e:d3:17:6d:94:61: 4f:c7:da:81:14:a1:5d:8c:1f:db:95:5a:91:4c:6b:4f:c9:70: 61:68:e9:5a:6c:89:09:39:bb:89:c7:e7:20:c1:36:67:06:be: e7:c4:91:54:e6:76:3a:a1:2f:6b:04:7d:bd:fe:6d:90:1b:0b: 4a:43:50:72:d8:54:7e:2f:29:46:45:dc:bd:97:bf:8c:3f:a2: 86:3b:b9:1a:8b:81:f3:f0:e8:d4:fa:94:fe:82:81:59:81:9b: 08:ae:24:d5:0a:39:a6:22:92:ee:e5:9c:15:6d:bb:a1:f6:6a: 10:c9:14:47:1e:b2:ab:c9:1a:28:0a:9a:50:a0:ef:28:36:4b: a0:b1:bb:aa:20:79:4f:d2:12:91:58:68:f4:11:1f:4a:12:7c: 0c:be:37:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QnK8FbrX96UTBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MTNiNWUwN2EtNGI5MC00NmFlLTg2ZDktYTIwNDNhNmEzZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/nb0LVYKgHj9W4hj+PAqqT+giF6n/VZsMAa wZ1RhAu9UaAXgNd5wQuoNwC4ZMTLp0nUWev5x/bm7qnW00mW2N0xydwa+83ALhoS McyIcml3bFm/YCeBk0RxgfVOwNcjgGFnCKN7EhVQ7G5iy9WPLPCt/v0HfWzklIWN IraC/xfSSd0Mxlag4M1DXysWHYEcuOqmrvQOvKPgDTkkjCoVITXR3MawrqW5e3R9 xF/HDssdlj0bThjTDsFNrmMg2gS2DhNVGbHDEo5SzrCAlUTyUk1O+HXc5n1sFbrp qgScX81t3YCq2VfWN79QCWul7l1AR7PE2UKhmw/FSlCo3YbbnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIXJAgsX/vdOUpG1BbckcP6jF/3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdYhmadhcy4Ly4bFwQPk2BHM3A8V8mfUEgMOxfn+03hvNL6rBssb4d dsHm4wp/+OijOvJa1TfX4FibivxMlBQ4TisE9uMn9HP/MMcz+HbcQFfIJsCese/T qu379VRyqYiTjAzpfzxO0xdtlGFPx9qBFKFdjB/blVqRTGtPyXBhaOlabIkJObuJ x+cgwTZnBr7nxJFU5nY6oS9rBH29/m2QGwtKQ1By2FR+LylGRdy9l7+MP6KGO7ka i4Hz8OjU+pT+goFZgZsIriTVCjmmIpLu5ZwVbbuh9moQyRRHHrKryRooCppQoO8o NkugsbuqIHlP0hKRWGj0ER9KEnwMvjcl -----END CERTIFICATE-----Generated at Fri Apr 11 22:10:58 2025 by rpki-client