$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa File: eaa59a4e-100d-3652-9f53-d567b63eb683.roa (raw, json) Hash identifier: S9XfUGAZfCiMnBhhE7jTHxNcnih9qz6y2lJ9a4KecdM= Subject key identifier: 3D:35:0C:E3:DA:95:22:AA:27:79:76:45:4A:04:40:12:41:0E:77:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1086EF0690C7A51797580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397208 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:08:6e:f0:69:0c:7a:51:79:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=aac34a01-9e78-4b62-8e8a-52fbcc082048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:18:b7:6d:fb:63:6f:49:7f:99:7e:af:01: 4e:cb:0e:61:8d:e5:c8:5a:85:5b:7b:f0:e9:05:22: 6a:0a:90:34:32:a5:f8:f1:c6:2e:75:82:f2:b0:7b: 34:15:a3:c2:4c:96:3a:f9:7e:1c:d8:c4:ce:73:6e: 70:5c:2a:0e:88:91:08:b1:d4:1b:94:08:f4:c5:e1: 94:a1:a4:c1:75:2a:9e:56:42:d5:a0:81:f9:64:d9: c5:68:16:b9:5a:34:d9:92:1e:20:e7:bd:79:48:43: d4:3a:44:85:3d:22:39:ce:fd:9e:e0:a2:a1:ef:6f: 39:af:64:c7:3c:19:81:2d:c5:c2:90:5e:61:18:dd: c2:aa:aa:eb:ff:a5:60:86:3f:6c:11:6f:10:10:5f: 49:74:b2:0f:2f:a5:a9:05:c3:8b:98:f1:49:76:c3: 4b:78:61:7a:4e:60:98:fd:95:e9:66:a4:85:71:ee: 8e:83:c4:83:8d:b6:30:ef:c7:28:fb:48:8b:76:bb: f5:4a:da:bc:cf:de:8e:eb:2a:dc:d5:d7:30:68:e9: dd:a8:c8:5c:2f:07:6d:21:c7:6b:fb:d4:c8:ee:fb: fb:3c:48:26:98:80:d4:09:c2:28:35:89:61:45:a9: 16:0c:d5:56:4c:ed:92:58:8d:f6:a5:14:47:74:d7: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:35:0C:E3:DA:95:22:AA:27:79:76:45:4A:04:40:12:41:0E:77:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b2:89:66:e3:3b:46:fe:a7:d8:16:b7:05:d6:11:19:3b:a5: 8b:2f:77:dc:ea:16:41:c2:e2:9c:70:66:a8:28:88:cb:d6:25: 86:a8:31:93:32:a7:58:9a:a8:c8:9f:da:ee:9e:c9:0f:35:dd: fc:c6:26:88:50:33:ae:42:d2:13:5f:e2:8e:95:8f:eb:f2:f6: bf:7d:31:46:ac:fb:0d:b8:87:26:64:fe:44:1e:b3:cb:b1:99: 2b:dc:89:ff:9b:8b:e6:da:6d:26:0b:ef:ca:53:4e:e0:14:69: 31:7f:b4:cb:4d:59:0c:67:a4:a9:b2:58:67:da:13:42:3f:3e: ca:d8:6a:00:fe:e6:b9:44:7f:8a:1b:4f:c6:ec:77:80:54:8f: 57:30:7d:d1:24:cc:55:b7:97:3f:e6:c0:f2:74:58:9e:7b:39: c9:b2:97:02:33:ab:3a:91:7a:6c:e8:0e:fa:39:e0:b5:f0:b6: e9:5d:fc:58:7b:13:d6:f8:38:c2:4d:62:1a:8e:e7:39:6e:d2: 5f:5c:04:17:3d:37:ac:f3:d3:7a:b9:aa:05:2d:fc:de:9b:c4: bd:67:d3:9a:e8:95:35:ba:d8:f3:50:95:df:c4:66:79:6f:d9: 9b:8b:e7:07:95:1a:db:ff:65:62:02:51:96:ee:79:f4:17:74: 57:ba:a4:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4Qhu8GkMelF5dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YWFjMzRhMDEtOWU3OC00YjYyLThlOGEtNTJmYmNjMDgyMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGAYt237Y29Jf5l+rwFOyw5hjeXIWoVbe/Dp BSJqCpA0MqX48cYudYLysHs0FaPCTJY6+X4c2MTOc25wXCoOiJEIsdQblAj0xeGU oaTBdSqeVkLVoIH5ZNnFaBa5WjTZkh4g5715SEPUOkSFPSI5zv2e4KKh7285r2TH PBmBLcXCkF5hGN3Cqqrr/6Vghj9sEW8QEF9JdLIPL6WpBcOLmPFJdsNLeGF6TmCY /ZXpZqSFce6Og8SDjbYw78co+0iLdrv1Stq8z96O6yrc1dcwaOndqMhcLwdtIcdr +9TI7vv7PEgmmIDUCcIoNYlhRakWDNVWTO2SWI32pRRHdNfOcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD01DOPalSKqJ3l2RUoEQBJBDnfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhNTlhNGUtMTAwZC0z NjUyLTlmNTMtZDU2N2I2M2ViNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWsolm4ztG/qfYFrcF1hEZO6WLL3fc6hZBwuKccGaoKIjL1iWGqDGT MqdYmqjIn9runskPNd38xiaIUDOuQtITX+KOlY/r8va/fTFGrPsNuIcmZP5EHrPL sZkr3In/m4vm2m0mC+/KU07gFGkxf7TLTVkMZ6Spslhn2hNCPz7K2GoA/ua5RH+K G0/G7HeAVI9XMH3RJMxVt5c/5sDydFieeznJspcCM6s6kXps6A76OeC18LbpXfxY exPW+DjCTWIajuc5btJfXAQXPTes89N6uaoFLfzem8S9Z9Oa6JU1utjzUJXfxGZ5 b9mbi+cHlRrb/2ViAlGW7nn0F3RXuqS4 -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:58 2025 by rpki-client