$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa File: eda64886-9941-3fb3-b88a-e697a40b6a40.roa (raw, json) Hash identifier: p5EpkdlFikAaJ/Q0WgIDHPXzHEAmTOzfG8ePa5T4Cr8= Subject key identifier: 82:19:94:4A:C5:8E:21:98:DE:49:13:3B:64:E4:D8:26:3F:FD:BA:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1078F09B40DD918165C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396566 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:07:8f:09:b4:0d:d9:18:16:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=fd785ba5-865c-41c8-80c6-91f33cfe2683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:1b:5d:6b:a8:44:eb:42:dc:50:43:67:11: 8a:ce:4e:47:e6:cf:47:c0:83:e7:d6:df:9c:f7:5a: 38:7a:f1:23:3f:b9:8f:90:04:5f:27:8a:f5:9e:d2: 26:45:b8:bb:a7:4f:25:15:b2:0e:a2:72:da:24:2c: 85:41:96:97:cc:56:ed:7c:05:ff:4a:9d:14:3f:16: f0:83:67:ba:a3:30:e8:f5:9b:0c:1f:f7:fb:4b:45: 5b:a7:f3:a0:9d:5c:f0:f3:c3:df:c2:41:b6:c7:fb: 83:5f:ae:c0:21:c9:ce:f2:59:bb:54:33:6e:40:96: ac:77:26:1a:1f:94:53:64:2e:c9:e6:fc:59:89:28: 6f:e3:56:84:4d:18:7f:39:74:c0:a7:c7:8c:81:e0: 42:3c:52:0a:51:3b:f5:84:39:2e:d6:5b:95:3c:ee: d9:8f:9d:9b:5c:ce:22:6d:1d:d2:b0:47:52:f9:8d: a3:70:98:eb:d7:b6:f0:ee:2a:ad:03:8b:04:5d:cd: 59:cd:a3:82:0b:5a:ab:03:58:be:ce:26:b0:02:73: f7:ca:73:ba:0a:72:06:d1:3f:62:29:12:be:01:52: fc:f9:19:c0:19:6a:c0:2d:16:07:4c:3f:de:9d:87: e8:42:0e:f7:7a:48:e9:6e:8f:34:f8:cf:18:33:42: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:94:4A:C5:8E:21:98:DE:49:13:3B:64:E4:D8:26:3F:FD:BA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0b:53:b2:14:07:1b:57:8c:79:65:6a:9c:44:3e:3f:95:bb: 30:fb:c4:22:c8:58:79:6f:dd:7f:d6:09:76:0b:77:04:aa:2e: 24:ef:2a:76:4f:6b:57:c2:fd:e2:4b:93:f9:f2:d0:6b:9f:2b: bb:de:d0:de:c3:1a:70:94:db:48:02:93:f7:c6:ba:bd:f2:b7: 1b:7c:09:d0:32:93:ee:48:ab:57:d7:c1:fb:0e:55:e5:89:1f: 99:c9:82:c3:0f:f4:af:75:52:bb:17:ac:26:63:55:6a:48:82: 5e:ad:30:c6:5f:48:de:b2:ac:51:1a:79:b8:fb:7d:99:93:3d: ce:65:c6:f8:ce:ac:e7:a5:73:38:66:a8:04:51:e3:c1:d6:df: 65:48:90:47:c9:be:ee:05:82:4c:18:23:bc:21:d3:5b:18:0a: a4:80:ea:92:10:dc:32:bf:00:8f:25:d3:81:28:0c:eb:84:e6: e4:c3:2b:ab:fb:fd:b4:60:92:d6:62:58:1d:81:13:ef:08:45: 2e:11:eb:f5:b9:22:40:e7:ff:35:35:c0:54:2b:a3:5e:67:a6: 16:26:86:86:e2:1a:e5:10:5e:26:3b:78:b3:c6:4f:5f:20:57: 7f:a0:bd:b9:0f:d0:5f:18:c9:6b:e6:2d:18:12:9b:02:03:36: 61:14:6a:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QePCbQN2RgWXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZmQ3ODViYTUtODY1Yy00MWM4LTgwYzYtOTFmMzNjZmUyNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzgbXWuoROtC3FBDZxGKzk5H5s9HwIPn1t+c 91o4evEjP7mPkARfJ4r1ntImRbi7p08lFbIOonLaJCyFQZaXzFbtfAX/Sp0UPxbw g2e6ozDo9ZsMH/f7S0Vbp/OgnVzw88PfwkG2x/uDX67AIcnO8lm7VDNuQJasdyYa H5RTZC7J5vxZiShv41aETRh/OXTAp8eMgeBCPFIKUTv1hDku1luVPO7Zj52bXM4i bR3SsEdS+Y2jcJjr17bw7iqtA4sEXc1ZzaOCC1qrA1i+ziawAnP3ynO6CnIG0T9i KRK+AVL8+RnAGWrALRYHTD/enYfoQg73ekjpbo80+M8YM0I3AQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIIZlErFjiGY3kkTO2Tk2CY//bpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRhNjQ4ODYtOTk0MS0z ZmIzLWI4OGEtZTY5N2E0MGI2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdC1OyFAcbV4x5ZWqcRD4/lbsw+8QiyFh5b91/1gl2C3cEqi4k7yp2 T2tXwv3iS5P58tBrnyu73tDewxpwlNtIApP3xrq98rcbfAnQMpPuSKtX18H7DlXl iR+ZyYLDD/SvdVK7F6wmY1VqSIJerTDGX0jesqxRGnm4+32Zkz3OZcb4zqznpXM4 ZqgEUePB1t9lSJBHyb7uBYJMGCO8IdNbGAqkgOqSENwyvwCPJdOBKAzrhObkwyur +/20YJLWYlgdgRPvCEUuEev1uSJA5/81NcBUK6NeZ6YWJoaG4hrlEF4mO3izxk9f IFd/oL25D9BfGMlr5i0YEpsCAzZhFGrf -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:33 2025 by rpki-client