$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa File: bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa (raw, json) Hash identifier: Ppy64vEXftrlPen0b/YnpUDOp3LU4aHmMfzIFOpVC+g= Subject key identifier: E2:BF:77:31:71:2E:A7:19:B0:67:4F:B5:C0:8F:0B:28:6D:A1:C3:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE106DE4E4C4768A7BB9220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397207 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:de:4e:4c:47:68:a7:bb:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=32c0eca9-e687-4d1c-860e-71f57c0df485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:fe:6b:0d:5d:4e:39:dc:1b:3a:ca:71:62: 30:89:14:40:13:fa:ee:49:a3:5e:b7:2d:44:6b:a4: d4:39:92:9d:90:e9:05:44:38:f8:75:86:57:bb:fe: 59:f6:18:96:13:43:8e:c9:a1:ef:3c:ca:63:d7:9b: fd:3e:b9:80:c4:f3:70:28:7d:3c:81:cc:ed:a6:2c: fb:d9:60:c1:28:f0:53:ad:d4:97:86:09:63:90:0a: ce:f0:f7:d7:b0:e0:2f:9d:ca:c9:3d:23:f6:76:0c: 4e:2f:5f:2c:80:10:96:10:a4:ed:c9:f1:1f:03:65: 69:bb:f5:78:bb:ae:48:1f:b8:d2:c6:69:60:0a:d2: bf:7c:de:21:53:1e:eb:b1:f1:91:b1:a5:c0:24:a8: da:28:cf:43:9b:27:0b:73:b1:c6:12:c2:84:e2:14: 6a:67:f1:69:9a:73:cb:a2:d2:a2:3a:d0:ec:6f:ce: 77:8b:6a:43:81:c6:66:11:8c:b0:1f:b3:d5:79:4b: c6:a0:f8:01:2a:5d:cc:f1:0d:21:fb:32:85:37:8e: 4d:b9:2b:92:d0:00:b0:a2:f3:45:12:0b:1e:6b:59: ef:30:d2:aa:c6:7e:27:72:2f:13:d6:9e:55:95:e5: 82:13:3d:03:d0:5c:9e:c3:09:d0:6a:85:6d:70:15: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:77:31:71:2E:A7:19:B0:67:4F:B5:C0:8F:0B:28:6D:A1:C3:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d5:00:8c:3b:2d:19:f6:c6:2f:13:b7:8d:22:41:67:d6:6e: 44:b2:f7:1c:c9:0e:9b:c1:e1:b3:b8:ec:66:4d:94:cb:cf:34: 68:ab:e8:3f:ce:9f:fe:90:f8:ff:0b:15:15:be:a2:4e:ef:e2: c4:9e:2e:a4:3e:63:10:f7:ef:d2:f3:36:59:f8:a6:6f:64:4c: f8:be:41:11:08:6e:f9:01:41:ee:d0:a4:c1:7a:a9:a9:1c:02: 90:a8:97:4b:d2:7e:e0:83:ed:a7:0a:92:00:41:63:f7:56:d6: 7f:82:34:4d:e4:13:12:76:44:09:6e:c4:6a:a9:7e:42:c5:47: f2:0f:02:ff:6f:c8:a8:b3:c3:89:65:6a:31:4b:e9:dc:ea:81: b8:b1:b7:48:91:a9:f3:16:14:82:da:31:88:f2:ce:b6:ec:27: 1f:3c:85:f5:9e:e1:78:41:f3:03:e6:70:c8:5e:5d:41:7b:79: c1:d5:15:57:8b:fe:a9:e1:bf:b2:73:b7:db:85:ee:90:69:39: 1a:6a:c6:51:57:9f:73:28:a5:56:a7:83:2a:ab:af:94:47:79: 68:c0:2f:7e:b3:71:ab:62:94:16:6c:b0:d0:d6:30:16:bb:bd: 5e:b0:32:27:f4:d2:76:49:f8:a0:40:ff:9e:44:ba:4d:22:35: 48:d7:d3:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QbeTkxHaKe7kiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MzJjMGVjYTktZTY4Ny00ZDFjLTg2MGUtNzFmNTdjMGRmNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUf+aw1dTjncGzrKcWIwiRRAE/ruSaNety1E a6TUOZKdkOkFRDj4dYZXu/5Z9hiWE0OOyaHvPMpj15v9PrmAxPNwKH08gcztpiz7 2WDBKPBTrdSXhgljkArO8PfXsOAvncrJPSP2dgxOL18sgBCWEKTtyfEfA2Vpu/V4 u65IH7jSxmlgCtK/fN4hUx7rsfGRsaXAJKjaKM9DmycLc7HGEsKE4hRqZ/FpmnPL otKiOtDsb853i2pDgcZmEYywH7PVeUvGoPgBKl3M8Q0h+zKFN45NuSuS0ACwovNF Egsea1nvMNKqxn4nci8T1p5VleWCEz0D0FyewwnQaoVtcBX0wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOK/dzFxLqcZsGdPtcCPCyhtocPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJkZGZmZDEtZTczYS0z OWI2LWE3YjktMmRjMTQ5Y2MxMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB71QCMOy0Z9sYvE7eNIkFn1m5EsvccyQ6bweGzuOxmTZTLzzRoq+g/ zp/+kPj/CxUVvqJO7+LEni6kPmMQ9+/S8zZZ+KZvZEz4vkERCG75AUHu0KTBeqmp HAKQqJdL0n7gg+2nCpIAQWP3VtZ/gjRN5BMSdkQJbsRqqX5CxUfyDwL/b8ios8OJ ZWoxS+nc6oG4sbdIkanzFhSC2jGI8s627CcfPIX1nuF4QfMD5nDIXl1Be3nB1RVX i/6p4b+yc7fbhe6QaTkaasZRV59zKKVWp4Mqq6+UR3lowC9+s3GrYpQWbLDQ1jAW u71esDIn9NJ2SfigQP+eRLpNIjVI19M1 -----END CERTIFICATE-----Generated at Fri Apr 11 23:51:53 2025 by rpki-client