$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa File: ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa (raw, json) Hash identifier: fps84lv74ZzlD3GPnfHkBLibwPWujKS3tNemj8B4m0w= Subject key identifier: C4:C5:F6:78:7C:6A:47:A6:81:E9:52:F4:EA:89:B5:79:3D:CF:51:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE102B85B81E6CA0B485800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396585 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:02:b8:5b:81:e6:ca:0b:48:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=91f06e26-cfcc-4b96-8763-b18f9dae2aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:d6:ec:f7:22:55:dc:1c:e0:35:bb:22:a5: 57:ff:84:f9:d8:b2:90:02:83:aa:7d:e6:3f:ca:4a: f0:f9:b7:43:1b:72:f9:c6:58:93:9e:88:a8:c4:7a: 09:d7:0b:70:b5:44:6f:54:be:69:56:74:28:41:45: 4f:6d:ce:56:f4:39:fd:af:ed:fe:3b:fd:18:9f:9e: c7:ea:aa:73:89:cc:bf:57:f2:9a:97:9c:6a:09:a8: 8d:87:e0:d3:cb:1e:e0:1b:15:fb:96:b4:d9:4a:4a: c8:5e:17:3a:6f:08:da:54:5a:1d:a3:86:53:34:60: 35:9c:88:3a:c9:c0:b7:a6:a2:a3:23:d2:6d:91:e8: 2b:97:a5:15:c0:03:7a:2e:70:7b:82:d5:6b:cf:2d: 1a:75:0f:f5:24:60:21:d7:8f:16:f9:9a:58:42:84: e1:7c:d4:17:c8:5d:d0:98:dc:3b:0b:08:0a:b5:34: ab:42:ed:70:6c:d5:ce:da:ef:bd:07:2c:23:d5:20: 8e:c7:ef:91:cc:93:73:7a:65:01:be:7a:e4:5a:9d: 3a:29:f2:35:5d:99:4b:26:1a:9c:ab:03:6a:48:7e: 22:fd:9c:92:c4:86:6b:eb:15:c3:24:21:8a:f3:49: cf:59:65:ec:06:b4:ee:e4:ef:82:c3:2d:6e:ae:04: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:F6:78:7C:6A:47:A6:81:E9:52:F4:EA:89:B5:79:3D:CF:51:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:79:10:81:22:1b:61:da:65:21:11:23:da:a6:3d:c5:67:ba: d2:08:3e:75:4e:8a:4f:06:e1:c3:f6:8f:5d:2f:29:85:02:4c: 6b:36:ce:6e:13:04:74:81:53:72:3d:de:37:04:c4:4a:5a:88: 27:2f:0a:39:e8:86:33:19:dc:21:0b:b6:9d:a8:db:42:46:91: 8a:b5:97:e3:04:ad:1c:6e:81:e5:ce:00:ef:75:c5:f0:bd:e7: 03:3f:d6:df:f0:4c:d6:f2:04:18:2c:e4:50:da:a0:20:b4:d1: da:39:d1:ad:20:8d:55:58:7f:a3:a7:60:a2:57:96:d2:47:3a: d4:8c:aa:ad:d2:e4:42:c8:71:b9:d4:25:ba:cf:89:a7:b0:04: fe:e2:51:21:bc:b3:60:4a:e0:9b:96:bb:c4:b8:ca:ef:ce:9e: e2:2a:98:a9:ed:23:ad:df:2a:01:76:05:aa:61:46:9b:b9:46: fc:a2:77:12:b3:fb:ab:3c:06:a6:43:6c:8c:b1:4d:5b:b2:9a: 6c:ce:f9:e6:d2:db:6f:7f:90:e1:12:b5:db:9d:37:b7:1e:78: 93:90:bd:46:69:f5:fd:19:a5:8d:ed:b2:c7:83:82:29:cd:0c: 14:96:b2:fa:f5:fb:d8:f9:cd:60:da:73:ef:96:fa:21:cf:60: 44:d5:1c:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QK4W4HmygtIWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTFmMDZlMjYtY2ZjYy00Yjk2LTg3NjMtYjE4ZjlkYWUyYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAvW7PciVdwc4DW7IqVX/4T52LKQAoOqfeY/ ykrw+bdDG3L5xliTnoioxHoJ1wtwtURvVL5pVnQoQUVPbc5W9Dn9r+3+O/0Yn57H 6qpzicy/V/Kal5xqCaiNh+DTyx7gGxX7lrTZSkrIXhc6bwjaVFodo4ZTNGA1nIg6 ycC3pqKjI9Jtkegrl6UVwAN6LnB7gtVrzy0adQ/1JGAh148W+ZpYQoThfNQXyF3Q mNw7CwgKtTSrQu1wbNXO2u+9Bywj1SCOx++RzJNzemUBvnrkWp06KfI1XZlLJhqc qwNqSH4i/ZySxIZr6xXDJCGK80nPWWXsBrTu5O+Cwy1urgShlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTF9nh8akemgelS9OqJtXk9z1G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWJlMzhiNjgtYTJmNC0z NGExLWJkNGEtOWMzODhjNDAxMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQeRCBIhth2mUhESPapj3FZ7rSCD51TopPBuHD9o9dLymFAkxrNs5u EwR0gVNyPd43BMRKWognLwo56IYzGdwhC7adqNtCRpGKtZfjBK0cboHlzgDvdcXw vecDP9bf8EzW8gQYLORQ2qAgtNHaOdGtII1VWH+jp2CiV5bSRzrUjKqt0uRCyHG5 1CW6z4mnsAT+4lEhvLNgSuCblrvEuMrvzp7iKpip7SOt3yoBdgWqYUabuUb8oncS s/urPAamQ2yMsU1bsppszvnm0ttvf5DhErXbnTe3HniTkL1GafX9GaWN7bLHg4Ip zQwUlrL69fvY+c1g2nPvlvohz2BE1Ryi -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:35 2025 by rpki-client