$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa File: c66da466-b538-30d7-b621-37261d8c17d3.roa (raw, json) Hash identifier: I6zxOybjNZH9VHXIf94YYcmc08W1gzdUfdw/W6NzBSU= Subject key identifier: 8F:7B:08:12:7A:C5:60:A6:FF:25:DC:72:93:3B:8E:44:F0:3B:3D:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE108A97B4AD745F7D47900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396576 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:08:a9:7b:4a:d7:45:f7:d4:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=99d39bf0-1222-48ec-8d41-29c787d30941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:8d:ff:2f:ca:71:f8:c5:6a:4d:fe:5f:10: 2d:e1:6a:47:1d:ad:8f:c6:7e:78:98:bc:94:55:6a: d9:f3:2f:0d:49:d5:70:72:4c:93:7d:c2:2d:3f:b0: 5b:33:cd:a4:d1:b0:05:35:5f:27:5c:5b:b2:d0:4d: 51:69:a9:c9:9d:d4:84:50:74:0b:59:ad:91:56:cd: 25:5f:12:77:2d:8a:f9:3d:ba:b5:05:7c:56:19:51: 4d:1a:da:ef:aa:c4:db:2a:0b:1f:b3:87:ea:24:94: 7a:f1:73:38:ad:79:44:e0:e0:96:b4:1a:0b:5e:de: c5:78:18:26:26:62:70:8b:c4:b4:bb:b6:c5:38:58: 14:d2:17:eb:67:9b:95:88:21:9a:63:00:ca:60:4b: 40:7a:6a:49:38:60:ba:b6:61:d6:d8:16:3a:b4:03: 45:a7:1f:ad:5e:68:25:66:26:29:30:36:d5:30:45: de:68:eb:77:bc:9c:71:f1:3a:b5:42:3b:cd:17:48: a2:ba:cd:56:2a:23:0a:87:c4:bc:af:eb:9d:89:65: 42:ee:23:6d:14:3f:02:77:50:19:b3:b6:2a:0a:5a: 67:50:d3:b4:a3:30:9b:99:db:f9:6a:41:4b:6b:54: de:2a:0c:f7:26:98:40:50:61:84:8e:fe:4c:3c:59: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:08:12:7A:C5:60:A6:FF:25:DC:72:93:3B:8E:44:F0:3B:3D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2c:ba:90:9f:f4:b2:40:bf:fd:4e:d1:10:45:51:51:d8:98: 1c:22:d9:ba:fe:79:22:9b:67:7c:a6:dd:1b:91:24:29:99:ca: cb:6d:96:37:13:87:a6:41:8c:56:7c:cc:bc:c2:2b:cc:22:38: e2:9d:08:0a:0c:c3:a1:a5:dc:cf:44:49:98:84:a3:41:c3:e7: 4c:cf:6a:49:a3:14:19:d6:57:b7:8c:24:1a:43:6d:b9:1e:8c: 4b:9d:3b:d7:91:9f:1c:62:b6:1c:85:c8:7a:e0:9f:22:66:df: 96:a1:04:02:be:23:95:65:cb:52:c7:3b:36:19:50:0f:29:62: 49:a8:37:aa:8f:72:39:06:e7:aa:9b:cd:4a:b0:27:4d:dc:7c: 9b:20:85:26:d2:31:6e:55:d6:8b:65:d9:15:87:c6:d6:d4:08: b0:a2:62:f9:b7:c5:4a:f2:71:8e:e8:1d:5f:49:cc:42:dd:64: 56:c1:dd:a1:18:2b:6a:00:79:2d:62:1d:c8:44:bd:64:19:d5: 13:51:f7:f3:23:06:fb:90:b7:3e:fe:b1:e0:44:f3:2e:c5:9d: 2a:84:4a:4f:ad:21:a5:48:4c:3e:45:07:fd:5f:eb:3a:87:22: 75:ce:90:ed:ab:23:f0:a1:ab:95:dc:bd:87:b5:40:7f:ec:b0: 42:b5:e5:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qipe0rXRffUeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTlkMzliZjAtMTIyMi00OGVjLThkNDEtMjljNzg3ZDMwOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSmN/y/KcfjFak3+XxAt4WpHHa2Pxn54mLyU VWrZ8y8NSdVwckyTfcItP7BbM82k0bAFNV8nXFuy0E1RaanJndSEUHQLWa2RVs0l XxJ3LYr5Pbq1BXxWGVFNGtrvqsTbKgsfs4fqJJR68XM4rXlE4OCWtBoLXt7FeBgm JmJwi8S0u7bFOFgU0hfrZ5uViCGaYwDKYEtAempJOGC6tmHW2BY6tANFpx+tXmgl ZiYpMDbVMEXeaOt3vJxx8Tq1QjvNF0iius1WKiMKh8S8r+udiWVC7iNtFD8Cd1AZ s7YqClpnUNO0ozCbmdv5akFLa1TeKgz3JphAUGGEjv5MPFk2RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI97CBJ6xWCm/yXccpM7jkTwOz3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY2ZGE0NjYtYjUzOC0z MGQ3LWI2MjEtMzcyNjFkOGMxN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqLLqQn/SyQL/9TtEQRVFR2JgcItm6/nkim2d8pt0bkSQpmcrLbZY3 E4emQYxWfMy8wivMIjjinQgKDMOhpdzPREmYhKNBw+dMz2pJoxQZ1le3jCQaQ225 HoxLnTvXkZ8cYrYchch64J8iZt+WoQQCviOVZctSxzs2GVAPKWJJqDeqj3I5Bueq m81KsCdN3HybIIUm0jFuVdaLZdkVh8bW1AiwomL5t8VK8nGO6B1fScxC3WRWwd2h GCtqAHktYh3IRL1kGdUTUffzIwb7kLc+/rHgRPMuxZ0qhEpPrSGlSEw+RQf9X+s6 hyJ1zpDtqyPwoauV3L2HtUB/7LBCteX1 -----END CERTIFICATE-----Generated at Sat Apr 12 02:43:53 2025 by rpki-client