$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: 2u9hBJ7/TEXuz4EtO5/F3qyGT3cJW6CKieNlZJDR1Jo= Subject key identifier: 5A:E8:9A:B0:E6:24:D0:68:47:DF:8F:B0:4F:E5:28:1D:26:06:23:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE106EC6FB511CDA9A32880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:06:ec:6f:b5:11:cd:a9:a3:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=4beac050-8660-4f16-bb81-0bca3885025b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:6c:65:51:18:9a:38:c1:d4:e7:73:fd:f4: fd:88:7b:ce:6f:0a:f8:97:b2:b9:08:59:c1:cc:66: 4e:4b:b6:b1:52:3c:2f:33:7e:47:c5:4b:fb:5f:77: bd:66:5e:90:96:08:46:90:ee:e7:5f:32:0a:58:23: 16:e9:c0:3a:a4:40:65:3e:b9:d8:59:02:21:8f:5e: ff:28:36:e1:3d:10:b1:5d:5c:08:4a:18:e2:29:02: ca:64:eb:e2:c8:b9:e0:7a:c9:53:b5:54:66:22:0e: 23:14:15:f0:62:6b:e8:17:5a:65:46:ee:57:02:b3: 60:1f:7e:a4:c9:4b:da:ca:85:e5:84:12:90:cd:fe: 6f:43:46:f6:5d:24:b7:23:5d:53:b8:bf:94:c5:c5: b6:c3:05:fe:60:62:34:ba:dc:f0:e6:9e:5e:6c:45: 95:5b:7c:81:b3:5b:c5:3b:65:dc:cc:2a:8a:dc:46: 3d:07:68:7c:7f:83:5a:3d:af:d3:c0:e0:23:fb:46: 37:95:39:a6:f5:78:b0:fe:31:54:39:3d:28:73:89: 85:9e:44:88:66:d0:76:3e:5b:a6:97:70:e4:b2:e5: 6f:61:01:e8:10:47:da:bf:10:12:ff:b4:93:49:c4: 4e:f1:09:33:19:c3:db:0f:73:06:2f:db:11:09:b7: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:9A:B0:E6:24:D0:68:47:DF:8F:B0:4F:E5:28:1D:26:06:23:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:80:80:63:f0:28:b8:61:a4:05:5e:e9:ad:86:46:c3:39:e0: 09:58:13:64:ae:85:f6:9d:9d:82:9d:0d:b5:d6:62:40:6c:48: 9e:d1:4b:7a:67:0c:05:bb:00:02:56:a7:c7:80:f6:41:a7:d4: e3:b3:cb:00:92:b7:de:e4:ec:7b:8b:51:c0:03:2d:5f:ac:b1: 8e:5f:4e:08:1d:ca:6c:cd:4f:dc:f4:af:b3:31:7f:d5:b6:ec: 08:4d:bb:f7:32:46:eb:74:00:ce:2f:ac:00:66:55:f8:66:07: 32:55:f0:aa:09:c8:c3:06:e3:1b:e0:26:21:18:e8:b5:3e:3f: 62:63:65:29:8e:36:5f:0a:4a:d6:8e:8e:a4:57:ab:8f:ee:bf: 6e:7b:59:92:4c:2a:e6:0d:a8:8a:bb:79:9d:c1:29:cc:39:d5: aa:e0:c7:1b:6c:6b:00:d3:23:14:11:3b:38:41:c6:2d:e4:07: a5:37:47:44:20:47:68:62:9f:80:7d:d8:8c:e4:39:9b:48:69: 94:7f:a2:32:f2:70:4d:2a:5b:f4:a7:e5:8e:cc:81:08:df:cb: 82:9b:17:f2:22:b3:64:20:7e:a9:43:6f:36:f1:52:26:e6:c2: 43:54:f1:23:5c:48:af:ab:81:63:e3:59:e6:c8:45:4b:55:71: b7:f3:37:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qbsb7URzamjKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NGJlYWMwNTAtODY2MC00ZjE2LWJiODEtMGJjYTM4ODUwMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuRsZVEYmjjB1Odz/fT9iHvObwr4l7K5CFnB zGZOS7axUjwvM35HxUv7X3e9Zl6QlghGkO7nXzIKWCMW6cA6pEBlPrnYWQIhj17/ KDbhPRCxXVwIShjiKQLKZOviyLngeslTtVRmIg4jFBXwYmvoF1plRu5XArNgH36k yUvayoXlhBKQzf5vQ0b2XSS3I11TuL+UxcW2wwX+YGI0utzw5p5ebEWVW3yBs1vF O2XczCqK3EY9B2h8f4NaPa/TwOAj+0Y3lTmm9Xiw/jFUOT0oc4mFnkSIZtB2Plum l3DksuVvYQHoEEfavxAS/7STScRO8QkzGcPbD3MGL9sRCbcjqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFromrDmJNBoR9+PsE/lKB0mBiPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAugIBj8Ci4YaQFXumthkbDOeAJWBNkroX2nZ2CnQ211mJAbEie0Ut6 ZwwFuwACVqfHgPZBp9Tjs8sAkrfe5Ox7i1HAAy1frLGOX04IHcpszU/c9K+zMX/V tuwITbv3MkbrdADOL6wAZlX4ZgcyVfCqCcjDBuMb4CYhGOi1Pj9iY2UpjjZfCkrW jo6kV6uP7r9ue1mSTCrmDaiKu3mdwSnMOdWq4McbbGsA0yMUETs4QcYt5AelN0dE IEdoYp+AfdiM5DmbSGmUf6Iy8nBNKlv0p+WOzIEI38uCmxfyIrNkIH6pQ2828VIm 5sJDVPEjXEivq4Fj41nmyEVLVXG38zfw -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:59 2025 by rpki-client