$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: 8xvOJ2U6AHjs7FCRNgZ4+6i15JpyzB7Z+2Gr0CSge3Q= Subject key identifier: 41:6B:0C:92:19:F0:A3:BC:0D:3A:B5:5D:64:7A:07:A0:02:BB:87:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10548D4F2BCF2DFFCFC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:05:48:d4:f2:bc:f2:df:fc:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=261fc1f3-d0a9-432b-9a27-838cb6b940c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:55:ca:17:fe:50:17:69:28:07:de:a2:ed: 55:ae:3b:5e:a2:dc:ce:22:6f:4d:4d:e2:d6:1a:17: 01:60:2b:11:a8:f0:5f:3e:f4:e6:31:a1:14:8f:4c: f5:90:2f:41:23:20:21:85:25:73:80:aa:98:41:7c: fe:49:5b:34:9c:1c:dc:42:af:2d:c3:83:5f:62:e5: c9:92:f5:52:58:a1:09:ae:12:3c:a6:a6:2c:90:ed: 00:05:eb:04:50:5d:bb:06:ad:3a:1d:10:d1:df:39: 77:32:b1:19:38:27:25:b1:0c:38:18:80:ba:04:28: 4d:c4:5b:0b:e3:9d:1c:58:ee:14:c4:8b:64:09:64: d4:49:bc:23:97:c8:c5:8d:c7:f3:c1:08:57:3c:97: 47:01:45:fe:91:db:98:40:6d:82:0c:d1:f0:2f:ca: 5f:10:f3:8f:7d:50:54:2e:8c:b5:c8:6f:97:11:15: 8b:8a:ed:78:58:2a:37:50:c7:55:32:70:1e:92:3e: 44:14:2f:4f:67:d7:52:6c:66:89:a5:7c:1e:c2:ce: 01:ab:79:7c:3e:d0:a7:54:06:be:10:77:71:6f:6f: 4a:bb:44:a5:57:0d:0f:19:9f:3c:65:6e:9e:3f:6b: f0:34:40:99:e2:1b:67:b0:c9:2c:83:af:94:48:6e: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:0C:92:19:F0:A3:BC:0D:3A:B5:5D:64:7A:07:A0:02:BB:87:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:97:a1:12:72:1b:e8:e4:14:c4:d1:df:ac:df:0a:a0:f6:6d: 8d:74:ab:af:15:97:92:0a:94:bc:13:b3:c1:69:4d:52:c6:6a: 91:4d:e2:95:34:4f:0a:d2:a0:ed:62:10:ad:1c:1e:49:50:13: eb:74:0f:c2:b9:30:22:36:a7:f0:da:2c:3d:83:7a:ea:5a:b8: 59:15:16:83:5c:a7:f2:dd:f5:d8:5a:be:b8:3a:6a:5b:b1:82: 01:f1:b8:01:ad:80:4a:aa:e3:21:bf:e6:29:b7:ae:98:22:cd: e3:1f:c7:52:9d:cc:19:78:d1:b2:00:97:7d:50:01:f9:0d:34: eb:69:65:ec:11:3c:53:0d:b6:50:ea:65:16:56:bb:10:68:b9: ec:60:f5:54:87:11:0f:f7:e8:79:af:2c:b2:e2:4f:39:ae:99: ba:2e:41:53:fc:96:5c:59:d9:ff:04:30:2d:f7:84:be:db:7e: 1a:26:7f:e4:7f:ff:36:e9:a8:27:75:11:08:84:29:d2:e7:b3: b1:eb:61:af:ca:5c:1b:80:a5:d2:b1:76:ac:b0:cf:b1:4c:6f: 02:de:38:f7:0c:0e:60:8f:38:be:52:87:66:06:61:36:ae:64: b6:fb:69:d5:c0:c2:67:11:ea:ef:69:ca:d9:2f:1f:a0:03:85: 17:bb:d1:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QVI1PK88t/8/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjYxZmMxZjMtZDBhOS00MzJiLTlhMjctODM4Y2I2Yjk0MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1RVyhf+UBdpKAfeou1VrjteotzOIm9NTeLW GhcBYCsRqPBfPvTmMaEUj0z1kC9BIyAhhSVzgKqYQXz+SVs0nBzcQq8tw4NfYuXJ kvVSWKEJrhI8pqYskO0ABesEUF27Bq06HRDR3zl3MrEZOCclsQw4GIC6BChNxFsL 450cWO4UxItkCWTUSbwjl8jFjcfzwQhXPJdHAUX+kduYQG2CDNHwL8pfEPOPfVBU Loy1yG+XERWLiu14WCo3UMdVMnAekj5EFC9PZ9dSbGaJpXwews4Bq3l8PtCnVAa+ EHdxb29Ku0SlVw0PGZ88ZW6eP2vwNECZ4htnsMksg6+USG5jFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEFrDJIZ8KO8DTq1XWR6B6ACu4c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdl6ESchvo5BTE0d+s3wqg9m2NdKuvFZeSCpS8E7PBaU1SxmqRTeKV NE8K0qDtYhCtHB5JUBPrdA/CuTAiNqfw2iw9g3rqWrhZFRaDXKfy3fXYWr64Ompb sYIB8bgBrYBKquMhv+Ypt66YIs3jH8dSncwZeNGyAJd9UAH5DTTraWXsETxTDbZQ 6mUWVrsQaLnsYPVUhxEP9+h5ryyy4k85rpm6LkFT/JZcWdn/BDAt94S+234aJn/k f/826agndREIhCnS57Ox62GvylwbgKXSsXassM+xTG8C3jj3DA5gjzi+UodmBmE2 rmS2+2nVwMJnEervacrZLx+gA4UXu9EE -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:55 2025 by rpki-client