$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa File: bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa (raw, json) Hash identifier: yIBCGPr97WSM05XnUvm1JhsviFJjkPOisgP1ErprZJM= Subject key identifier: AC:E7:E1:95:DF:BA:ED:F5:6E:84:23:2B:A3:40:F1:E3:3D:D4:E3:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10983F31CF995394B0940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396584 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:09:83:f3:1c:f9:95:39:4b:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=e46620b9-3938-442e-89d3-29e963e43357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:40:1b:3b:bf:df:83:c2:7e:8f:8b:f2:c1: 06:e7:0e:dd:19:0e:54:e3:70:78:11:09:24:23:f4: c7:0c:1e:34:64:ce:4b:0b:4d:04:73:15:e9:46:fb: 39:92:9a:bd:07:1b:6b:06:6b:70:13:0e:50:b0:33: 1e:e1:27:1a:7d:ab:b4:1a:6f:1b:2c:5e:1e:d3:37: 4d:bb:0b:65:3f:c9:ac:a5:b1:99:c6:69:37:8a:79: 5f:0c:1c:e9:2d:30:10:38:fe:55:9d:f1:9a:5c:19: 50:5c:1d:95:16:45:bd:f8:55:2e:a0:2d:9f:66:5c: 79:2a:2d:93:47:58:b9:1f:ca:75:67:5f:7b:2e:48: 4a:26:a7:0e:4d:e1:66:73:67:31:5a:41:30:90:7b: 6f:78:e5:f4:c7:15:ee:8d:62:fc:b8:87:6e:02:80: 9f:22:69:d1:de:86:c9:9f:8d:a2:80:8d:c3:ea:12: ee:a3:9c:1b:58:61:97:d9:77:03:f9:f5:15:4f:49: 5c:5c:77:d4:b2:60:0d:3d:46:5a:36:8d:45:a6:44: fb:aa:7f:de:a4:be:87:e2:07:62:c3:8b:b6:cc:f2: c9:f4:37:1f:08:4f:14:4b:87:76:c0:77:5a:b5:31: 43:39:4f:91:12:40:da:84:07:73:14:72:85:1f:e3: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:E1:95:DF:BA:ED:F5:6E:84:23:2B:A3:40:F1:E3:3D:D4:E3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:92:2b:a0:1b:39:09:76:8e:b8:2a:c1:04:fe:e8:0c:76:42: ea:d5:07:63:6a:b2:ab:0b:ac:ea:c6:5f:32:58:92:62:ee:da: 92:ec:a4:15:4d:8e:fb:66:b1:86:70:a3:d5:44:c2:f3:8e:df: 15:7c:26:27:a1:2c:37:05:50:a0:7b:98:a4:ae:d2:0a:a6:6e: ae:c9:67:e6:62:07:81:65:d2:57:dd:e6:43:3c:e3:aa:1b:a8: 59:5e:68:e0:ba:fa:7a:f2:f1:20:16:af:35:37:11:17:70:48: 4f:3c:4c:be:09:78:a6:e6:73:f7:e8:af:73:27:7a:0a:42:69: 00:23:8e:c8:2e:cf:6f:8e:73:85:2d:77:71:1a:6b:15:39:ba: 90:7e:5d:4d:a2:db:8e:b2:1f:1f:34:a9:d3:d2:55:fd:5a:1c: 99:e8:b4:07:81:62:b8:80:5e:d6:19:eb:c8:35:8b:e6:00:5f: 4f:98:11:01:0e:85:f1:89:bc:18:73:1f:32:f5:9d:db:11:79: 26:80:e3:b5:59:89:a8:f5:09:8b:3f:f8:f4:ce:e8:36:cd:ad: c9:3e:30:c4:7d:5e:1b:de:fd:83:67:64:7f:55:89:ce:c4:82: 7e:f5:de:aa:a9:33:54:3a:a1:c4:91:ee:72:02:0d:f0:66:04: 70:25:3d:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QmD8xz5lTlLCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZTQ2NjIwYjktMzkzOC00NDJlLTg5ZDMtMjllOTYzZTQzMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle1AGzu/34PCfo+L8sEG5w7dGQ5U43B4EQkk I/THDB40ZM5LC00EcxXpRvs5kpq9BxtrBmtwEw5QsDMe4Scafau0Gm8bLF4e0zdN uwtlP8mspbGZxmk3inlfDBzpLTAQOP5VnfGaXBlQXB2VFkW9+FUuoC2fZlx5Ki2T R1i5H8p1Z197LkhKJqcOTeFmc2cxWkEwkHtveOX0xxXujWL8uIduAoCfImnR3obJ n42igI3D6hLuo5wbWGGX2XcD+fUVT0lcXHfUsmANPUZaNo1FpkT7qn/epL6H4gdi w4u2zPLJ9DcfCE8US4d2wHdatTFDOU+REkDahAdzFHKFH+NrXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKzn4ZXfuu31boQjK6NA8eM91ONEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmZhNTkxOTEtYjgxYi0z ODJiLWFmZmYtMGNiNWRkOGVjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVkiugGzkJdo64KsEE/ugMdkLq1QdjarKrC6zqxl8yWJJi7tqS7KQV TY77ZrGGcKPVRMLzjt8VfCYnoSw3BVCge5ikrtIKpm6uyWfmYgeBZdJX3eZDPOOq G6hZXmjguvp68vEgFq81NxEXcEhPPEy+CXim5nP36K9zJ3oKQmkAI47ILs9vjnOF LXdxGmsVObqQfl1NotuOsh8fNKnT0lX9WhyZ6LQHgWK4gF7WGevINYvmAF9PmBEB DoXxibwYcx8y9Z3bEXkmgOO1WYmo9QmLP/j0zug2za3JPjDEfV4b3v2DZ2R/VYnO xIJ+9d6qqTNUOqHEke5yAg3wZgRwJT3D -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:33 2025 by rpki-client