$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa File: bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa (raw, json) Hash identifier: 37U+j2FP/jfn92p+g9x1xBYnwcGbDAMP+/QcxnVIgcE= Subject key identifier: 9B:64:92:3A:20:E7:6E:3F:17:E8:41:E6:45:2C:76:B3:3F:B7:29:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10A809707AD61F3ACE300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 211369 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0a:80:97:07:ad:61:f3:ac:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=6c9308ad-491b-484a-b6e1-e1febc9cb12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:df:bb:c4:5f:b5:64:a9:dc:3e:78:2d:ad: 4c:79:1b:d2:be:90:0d:c5:94:ab:99:04:7b:11:d6: 71:64:c4:ca:84:d5:8a:73:3b:fb:99:c1:e5:73:39: f3:07:2a:ee:43:54:ba:55:a4:66:14:53:39:3e:bc: f7:db:6d:86:38:93:8f:78:de:cb:89:e8:44:91:a3: de:c0:69:6c:f6:e6:e2:81:83:ad:fd:cf:fa:95:a9: d0:1e:35:b2:76:73:69:aa:3a:01:d6:d4:2f:35:25: c4:3b:65:ea:34:c7:c6:03:9b:fc:42:20:c8:6c:30: 2a:7d:ea:32:d1:d6:6b:f6:17:4e:68:e1:0b:9c:2e: 62:03:fd:3c:5e:99:39:03:e9:91:e1:b7:cc:55:6f: ad:fd:ec:b0:63:62:bb:df:d3:42:ad:1d:03:73:47: 6f:ca:1d:70:c2:e5:7c:8f:22:7e:72:31:36:cc:88: 02:1a:35:18:6c:16:91:55:2d:a2:96:81:21:36:96: f4:5a:0d:72:ab:0b:69:47:62:e4:a6:26:22:03:e2: 65:95:37:bc:eb:50:ab:d1:f6:94:6b:7a:91:d6:b2: 7f:77:98:75:47:cb:68:b4:2b:17:f4:ff:b7:c0:8c: ba:b5:2e:be:1c:56:89:8b:de:d6:7e:17:c9:1d:58: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:64:92:3A:20:E7:6E:3F:17:E8:41:E6:45:2C:76:B3:3F:B7:29:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cb:f6:3c:4e:2c:b0:5f:77:2d:27:a2:b5:d2:18:1c:3f:d4: 19:fb:31:cd:3a:0c:b4:55:5d:16:25:dc:fb:28:60:09:dd:11: db:89:14:9a:cd:40:23:ac:06:53:d0:16:0f:db:0a:83:a7:3f: 7b:ad:ed:cb:fc:2e:a3:52:b3:89:c4:10:6c:94:53:7e:2f:53: 73:2b:75:3a:bc:87:03:30:2b:56:90:60:4b:d6:c4:24:5e:a0: e9:a8:30:e7:05:d3:7e:15:74:26:7c:dc:b7:f6:d7:84:67:bf: db:90:71:ae:18:65:2e:68:ca:5b:7a:80:7e:99:76:92:38:a2: 5b:8d:0c:bc:4d:a3:c9:bb:fc:8a:a6:2c:bc:12:cc:c0:b5:82: 8f:36:92:09:1b:e4:de:a6:13:d4:2c:e9:a9:19:f6:70:2a:34: ea:3a:f6:c3:3e:f1:22:dd:f0:c6:73:49:24:8c:6c:7a:f5:35: cf:20:74:59:32:f4:ae:cc:d0:2c:8e:ce:17:d5:a6:b7:66:88: 76:ef:ff:55:e5:38:f1:2c:8e:e3:27:7f:86:35:4e:44:8c:b5: 5d:e7:a0:a1:7a:bf:d3:bb:68:69:73:03:9e:74:d3:64:cf:ab: 82:3d:65:e7:e2:78:03:1a:b2:e3:24:4b:8c:f8:be:7a:09:55: b1:2a:8c:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QqAlwetYfOs4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NmM5MzA4YWQtNDkxYi00ODRhLWI2ZTEtZTFmZWJjOWNiMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSnfu8RftWSp3D54La1MeRvSvpANxZSrmQR7 EdZxZMTKhNWKczv7mcHlcznzByruQ1S6VaRmFFM5Prz3222GOJOPeN7LiehEkaPe wGls9ubigYOt/c/6lanQHjWydnNpqjoB1tQvNSXEO2XqNMfGA5v8QiDIbDAqfeoy 0dZr9hdOaOELnC5iA/08Xpk5A+mR4bfMVW+t/eywY2K739NCrR0Dc0dvyh1wwuV8 jyJ+cjE2zIgCGjUYbBaRVS2iloEhNpb0Wg1yqwtpR2LkpiYiA+JllTe861Cr0faU a3qR1rJ/d5h1R8totCsX9P+3wIy6tS6+HFaJi97WfhfJHViVeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJtkkjog524/F+hB5kUsdrM/tykcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM2Zjk2MjctMGM1ZC0z OTU3LThiMmEtNDkxMDY0YmIzYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADy/Y8TiywX3ctJ6K10hgcP9QZ+zHNOgy0VV0WJdz7KGAJ3RHbiRSa zUAjrAZT0BYP2wqDpz97re3L/C6jUrOJxBBslFN+L1NzK3U6vIcDMCtWkGBL1sQk XqDpqDDnBdN+FXQmfNy39teEZ7/bkHGuGGUuaMpbeoB+mXaSOKJbjQy8TaPJu/yK piy8EszAtYKPNpIJG+TephPULOmpGfZwKjTqOvbDPvEi3fDGc0kkjGx69TXPIHRZ MvSuzNAsjs4X1aa3Zoh27/9V5TjxLI7jJ3+GNU5EjLVd56Cher/Tu2hpcwOedNNk z6uCPWXn4ngDGrLjJEuM+L56CVWxKowg -----END CERTIFICATE-----Generated at Sun Apr 13 01:00:30 2025 by rpki-client