$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa File: e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa (raw, json) Hash identifier: tXDSpdskhQNq2+EMI31/caNR28D1/ItB8s1edDA1kfk= Subject key identifier: F2:1D:2E:13:49:CB:D8:7A:F6:A2:2F:5D:74:D2:97:FF:44:90:03:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10344BE0B68217A414600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396572 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:03:44:be:0b:68:21:7a:41:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=5e623636-c663-45ae-a4cf-1036a11a21d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:6f:3c:24:4c:66:62:44:cc:c2:61:a1:40: 45:ec:1f:d1:6f:7d:b6:31:aa:ba:bf:46:12:10:3b: e7:a4:24:03:3d:ed:7c:00:d8:8e:51:92:24:ed:4d: 58:59:28:c5:c0:c0:ca:da:7f:d3:71:f6:21:de:c3: 31:cf:cc:db:3d:de:4c:62:84:5b:07:8d:08:28:70: f4:f4:df:a0:19:77:80:b8:64:31:2a:a9:95:19:f2: e4:c6:35:ce:57:24:e4:76:45:a6:9e:83:5a:ea:21: 22:6e:f1:a5:93:b1:94:3b:91:24:d7:34:3a:f6:d1: 36:3d:70:82:ec:ef:ac:2d:84:4e:41:e9:a5:b2:83: 67:41:f2:46:06:c7:e7:40:e8:12:66:80:cf:cb:34: 5a:8f:69:48:49:39:8c:25:f6:45:46:25:95:b6:2d: 96:45:a5:23:21:f2:91:6b:70:d6:14:8d:37:73:54: ae:e0:f2:ca:f7:a2:95:29:95:d6:34:37:3e:8e:a1: ee:51:16:53:74:c2:f2:ea:e6:27:fe:df:f5:eb:22: 37:65:64:9a:fa:fb:9b:6c:b0:1b:e7:64:ce:a4:95: ac:52:78:25:0b:8a:60:ab:46:dc:fb:89:9a:9b:dc: cd:ba:b3:dd:42:df:b4:33:67:90:8e:56:36:d3:b0: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1D:2E:13:49:CB:D8:7A:F6:A2:2F:5D:74:D2:97:FF:44:90:03:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b5:cf:ea:cf:64:97:a4:f2:1f:dc:d5:eb:6f:9d:24:e1:20: df:02:f3:a0:92:64:0d:c7:35:c8:72:f7:ef:8c:5a:da:22:cd: 7f:22:38:1e:f4:59:f0:f5:2a:99:7b:2f:35:f3:4c:8e:cb:de: 26:28:2f:5c:f7:30:3f:dd:e7:b4:7c:18:16:7b:76:eb:f2:a2: 05:f5:23:37:4b:b6:80:c2:ec:7e:a7:ea:b3:2e:6b:e7:4a:c3: 1d:40:18:57:4e:a2:d3:db:9f:bf:22:38:fe:37:4f:e0:67:68: 7d:e6:59:c9:81:d4:66:84:d4:29:91:f0:ff:5e:fa:ad:d4:41: 63:2b:b9:3f:6b:39:0d:b4:41:47:d1:64:74:b6:b3:79:36:f9: 37:f1:07:cf:fa:89:6a:76:94:69:28:7b:3d:c8:c1:d2:73:d0: a3:c8:73:1c:1a:17:1c:ca:e5:32:42:f6:74:c3:05:36:a7:28: 83:69:b2:a4:87:23:4b:e1:a1:be:c3:31:bf:6d:44:f3:8d:3d: 10:7a:2e:9f:d2:70:70:a8:d9:bb:ff:9b:51:da:e0:55:7c:12: 60:7e:cd:fa:76:eb:1e:dd:61:ad:d2:6b:c2:99:ef:4f:a1:10: c6:08:0f:7e:3d:bf:df:14:e8:a4:58:3f:67:78:91:eb:24:cb: 45:88:99:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QNEvgtoIXpBRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NWU2MjM2MzYtYzY2My00NWFlLWE0Y2YtMTAzNmExMWEyMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5JvPCRMZmJEzMJhoUBF7B/Rb322Maq6v0YS EDvnpCQDPe18ANiOUZIk7U1YWSjFwMDK2n/TcfYh3sMxz8zbPd5MYoRbB40IKHD0 9N+gGXeAuGQxKqmVGfLkxjXOVyTkdkWmnoNa6iEibvGlk7GUO5Ek1zQ69tE2PXCC 7O+sLYROQemlsoNnQfJGBsfnQOgSZoDPyzRaj2lISTmMJfZFRiWVti2WRaUjIfKR a3DWFI03c1Su4PLK96KVKZXWNDc+jqHuURZTdMLy6uYn/t/16yI3ZWSa+vubbLAb 52TOpJWsUnglC4pgq0bc+4mam9zNurPdQt+0M2eQjlY207DMrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPIdLhNJy9h69qIvXXTSl/9EkAM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTk4N2QxZTQtMmZlOC0z YjU5LWE5MjAtYjkwZTEzYzBkNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmtc/qz2SXpPIf3NXrb50k4SDfAvOgkmQNxzXIcvfvjFraIs1/Ijge 9Fnw9SqZey8180yOy94mKC9c9zA/3ee0fBgWe3br8qIF9SM3S7aAwux+p+qzLmvn SsMdQBhXTqLT25+/Ijj+N0/gZ2h95lnJgdRmhNQpkfD/Xvqt1EFjK7k/azkNtEFH 0WR0trN5Nvk38QfP+olqdpRpKHs9yMHSc9CjyHMcGhccyuUyQvZ0wwU2pyiDabKk hyNL4aG+wzG/bUTzjT0Qei6f0nBwqNm7/5tR2uBVfBJgfs36duse3WGt0mvCme9P oRDGCA9+Pb/fFOikWD9neJHrJMtFiJn9 -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:59 2025 by rpki-client