$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa File: eaa59a4e-100d-3652-9f53-d567b63eb683.roa (raw, json) Hash identifier: uSrmMWTYuG841VuYlfUpTY24iTQEvJ3vvdk3SjBNorI= Subject key identifier: FD:44:CC:70:B9:23:59:39:2B:1E:C6:71:8F:F5:0F:12:95:32:43:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849AD1A2453EDF20F8870EA8BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397208 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:24:53:ed:f2:0f:88:70:ea:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=25d5e3f9-320e-41e2-9609-f034cd4d1d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b1:ac:d9:51:8b:80:71:45:4c:ab:51:66:a2: 09:1b:e9:18:aa:fc:d7:30:27:bb:70:97:1d:3a:e7: cd:84:41:2f:13:33:46:c4:1f:00:0d:45:0d:52:84: 9a:f0:71:02:d6:b3:a4:b2:b5:3f:03:e5:97:50:1d: 5a:74:ca:4c:50:04:8e:ab:d3:ae:f5:e0:a5:44:da: e5:84:68:f2:1e:5a:20:80:20:fe:ba:9a:9a:eb:e6: c1:0f:9a:23:94:94:59:9f:98:10:93:d8:16:10:b3: 8a:ef:d1:2d:75:f9:2a:dd:55:48:d1:74:4f:ed:b6: 32:6d:c0:6f:46:b5:4e:04:dd:92:62:8e:ea:9d:30: ba:c7:c9:92:97:f0:10:bd:6d:64:86:fc:bd:42:b3: 0b:8b:b0:2e:46:26:30:5c:f1:17:75:eb:10:f0:d5: 6f:29:e9:d0:73:48:62:37:29:79:fa:93:0a:f5:fe: 95:80:60:77:ed:e9:3b:71:20:8d:65:d5:4d:6e:03: f1:3e:07:df:86:bd:f6:88:3e:ca:25:ab:48:76:18: 85:28:02:74:89:1c:c9:10:e9:e7:28:25:d0:76:3c: d5:90:d9:1e:27:61:d3:42:e5:f4:82:26:bd:ae:dc: 44:a1:a1:a2:ea:69:e7:ab:65:8d:1c:71:bb:68:a7: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:CC:70:B9:23:59:39:2B:1E:C6:71:8F:F5:0F:12:95:32:43:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c0:60:1e:f3:ae:a6:bc:a2:87:0a:96:46:13:23:ab:ff:db: da:ef:29:6b:84:02:67:94:28:5c:c5:85:80:1d:84:7d:7c:50: c3:92:24:4d:e1:28:3c:b6:4e:62:7d:34:ed:ad:bd:04:76:2d: f8:86:04:6b:02:5e:c5:3a:f9:4f:7b:e1:97:17:61:8e:c3:83: 11:e5:22:38:7a:71:eb:67:a6:1a:f1:04:3f:88:26:4b:5c:bf: bf:2d:c3:66:b9:f1:6c:fe:51:ae:3a:32:61:dc:26:42:61:da: 83:fb:a9:e7:48:59:43:8a:4d:2b:97:92:62:c3:98:fb:28:47: 3e:fe:85:73:fc:58:27:42:11:8e:a7:2b:08:a9:23:91:34:8f: 51:11:3d:37:33:e5:10:87:fe:64:b3:1b:70:9a:77:2e:29:b7: 35:a9:5b:4a:2a:69:7b:4e:bb:ad:3d:78:64:43:50:2a:01:ce: f8:ae:4b:db:cf:12:96:32:46:10:7a:97:da:9a:51:73:d5:6f: 4e:b4:47:40:e3:c0:4c:dc:c3:0a:0f:dc:fa:73:c7:66:dd:8a: ad:24:cf:b9:c1:e8:20:a1:64:ea:9b:5f:76:85:b3:a5:b3:63: 60:e7:71:ad:56:5a:e1:1d:5f:35:e2:84:96:0d:40:6f:5f:b1: 87:dc:e6:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGiRT7fIPiHDqi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjVkNWUzZjktMzIwZS00MWUyLTk2MDktZjAzNGNkNGQxZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLGs2VGLgHFFTKtRZqIJG+kYqvzXMCe7cJcd OufNhEEvEzNGxB8ADUUNUoSa8HEC1rOksrU/A+WXUB1adMpMUASOq9Ou9eClRNrl hGjyHloggCD+upqa6+bBD5ojlJRZn5gQk9gWELOK79Etdfkq3VVI0XRP7bYybcBv RrVOBN2SYo7qnTC6x8mSl/AQvW1khvy9QrMLi7AuRiYwXPEXdesQ8NVvKenQc0hi Nyl5+pMK9f6VgGB37ek7cSCNZdVNbgPxPgffhr32iD7KJatIdhiFKAJ0iRzJEOnn KCXQdjzVkNkeJ2HTQuX0gia9rtxEoaGi6mnnq2WNHHG7aKfEnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP1EzHC5I1k5Kx7GcY/1DxKVMkOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhNTlhNGUtMTAwZC0z NjUyLTlmNTMtZDU2N2I2M2ViNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuwGAe866mvKKHCpZGEyOr/9va7ylrhAJnlChcxYWAHYR9fFDDkiRN 4Sg8tk5ifTTtrb0Edi34hgRrAl7FOvlPe+GXF2GOw4MR5SI4enHrZ6Ya8QQ/iCZL XL+/LcNmufFs/lGuOjJh3CZCYdqD+6nnSFlDik0rl5Jiw5j7KEc+/oVz/FgnQhGO pysIqSORNI9RET03M+UQh/5ksxtwmncuKbc1qVtKKml7TrutPXhkQ1AqAc74rkvb zxKWMkYQepfamlFz1W9OtEdA48BM3MMKD9z6c8dm3YqtJM+5weggoWTqm192hbOl s2Ng53GtVlrhHV814oSWDUBvX7GH3OZP -----END CERTIFICATE-----Generated at Sat Jun 7 11:49:45 2025 by rpki-client