$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa File: d51efc8c-0e81-303a-8669-75bf3ad2e229.roa (raw, json) Hash identifier: XJc4r/VPoVBfyla1Dgo3LdYZEeh4TCq/SUkCY5b9nn0= Subject key identifier: 24:01:7C:9B:13:23:19:DC:56:46:23:40:19:6E:5C:CB:5E:86:0C:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10717395428E0F8A0ED80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396560 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:17:39:54:28:e0:f8:a0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=d9a93f73-7f60-4ae7-8592-9e3b0c5694d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:e5:d6:0c:b6:91:16:ac:a3:6f:a7:45:4b: d0:7b:30:2a:a4:11:e4:7d:45:26:3f:fb:ba:ef:b0: 3a:4e:93:0e:79:e9:8c:d0:6d:eb:15:8f:d4:f3:40: fe:5b:35:e1:a8:ce:45:8b:cc:b9:6a:2f:f0:a8:60: e4:0d:df:49:e2:fa:3f:a1:bd:b5:ef:4f:37:92:02: c1:92:22:c3:a1:90:d2:b3:2d:44:3d:36:8d:c4:77: 62:13:a0:22:ad:29:17:f9:be:1e:a8:38:b6:52:69: 09:e7:67:18:6f:8a:e8:fc:91:4d:9e:0d:64:d1:4e: 07:a9:8d:9f:db:c1:0a:81:98:a3:12:6b:5a:f2:c5: da:50:72:b7:fa:75:e2:ae:47:af:d0:e2:c0:68:7e: d4:c8:33:1f:18:87:a2:a6:f4:8c:62:d6:65:a6:30: 2f:56:ed:7a:c8:0e:61:ac:53:7f:87:3f:b0:da:63: 15:1f:16:12:e7:df:74:2e:fd:ce:d4:c1:6e:3d:eb: af:0d:00:2d:eb:66:05:cc:d4:5f:65:b0:4f:89:30: 75:0d:73:30:8b:10:fd:9d:5f:44:08:a3:92:97:55: 54:67:1e:3a:4d:82:74:cf:69:63:5b:a0:da:53:29: 9c:8e:04:e5:a4:25:bb:03:1d:fd:41:01:28:c8:1e: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:01:7C:9B:13:23:19:DC:56:46:23:40:19:6E:5C:CB:5E:86:0C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0c:7c:45:63:d0:82:be:24:d9:18:d1:b7:43:a6:ef:0f:cf: 5e:9a:29:8a:d0:c4:ce:a5:cd:ef:a0:ca:6c:33:2d:e3:f9:09: 40:78:eb:25:aa:71:dd:a5:32:9f:dc:65:be:d4:da:37:f2:b0: c2:87:87:c7:72:03:65:5b:69:38:55:e5:ce:ee:ab:77:52:2b: 10:03:1a:9f:17:07:92:2a:1d:6a:dd:1b:fd:7a:4d:1c:24:3d: 39:cc:90:a1:e0:d8:da:22:b5:c4:b8:1b:8f:32:f3:3b:1d:10: 99:1d:64:24:5d:d6:ef:78:e6:be:7a:fb:70:b4:f4:73:9f:09: eb:f4:ea:0b:5a:8c:ff:9e:42:26:b1:3b:40:28:18:2e:41:9c: 7a:fa:77:af:66:44:1f:04:dd:b6:2f:54:71:06:5e:84:8a:cb: f9:5f:9d:32:5c:d0:83:f2:75:7c:85:ed:a2:ff:d6:07:72:40: e5:34:d3:35:25:fb:73:fa:56:fb:a5:95:86:cd:91:94:a8:1e: 34:4d:49:43:32:24:d4:1e:fa:a3:13:03:af:e9:05:7d:bc:7b: e4:33:79:32:eb:39:55:ea:67:81:69:1a:9a:38:7d:27:d6:79: 66:20:39:13:3a:b4:51:2c:b1:3e:81:e2:60:60:e9:e8:72:b1: bf:ad:56:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QcXOVQo4Pig7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZDlhOTNmNzMtN2Y2MC00YWU3LTg1OTItOWUzYjBjNTY5NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsXl1gy2kRaso2+nRUvQezAqpBHkfUUmP/u6 77A6TpMOeemM0G3rFY/U80D+WzXhqM5Fi8y5ai/wqGDkDd9J4vo/ob217083kgLB kiLDoZDSsy1EPTaNxHdiE6AirSkX+b4eqDi2UmkJ52cYb4ro/JFNng1k0U4HqY2f 28EKgZijEmta8sXaUHK3+nXirkev0OLAaH7UyDMfGIeipvSMYtZlpjAvVu16yA5h rFN/hz+w2mMVHxYS5990Lv3O1MFuPeuvDQAt62YFzNRfZbBPiTB1DXMwixD9nV9E CKOSl1VUZx46TYJ0z2ljW6DaUymcjgTlpCW7Ax39QQEoyB4I9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCQBfJsTIxncVkYjQBluXMtehgzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDUxZWZjOGMtMGU4MS0z MDNhLTg2NjktNzViZjNhZDJlMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdDHxFY9CCviTZGNG3Q6bvD89emimK0MTOpc3voMpsMy3j+QlAeOsl qnHdpTKf3GW+1No38rDCh4fHcgNlW2k4VeXO7qt3UisQAxqfFweSKh1q3Rv9ek0c JD05zJCh4NjaIrXEuBuPMvM7HRCZHWQkXdbveOa+evtwtPRznwnr9OoLWoz/nkIm sTtAKBguQZx6+nevZkQfBN22L1RxBl6Eisv5X50yXNCD8nV8he2i/9YHckDlNNM1 Jftz+lb7pZWGzZGUqB40TUlDMiTUHvqjEwOv6QV9vHvkM3ky6zlV6meBaRqaOH0n 1nlmIDkTOrRRLLE+geJgYOnocrG/rVZy -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:15 2025 by rpki-client