$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: 3i8iPuotbVwbSPXIgYUmIQppRyVtQOkWvw5guiQWodo= Subject key identifier: 49:23:25:6D:15:36:67:5D:94:F9:A6:63:9C:7C:EE:C9:FA:44:75:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE10A0FC9431508BE7E8230 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0a:0f:c9:43:15:08:be:7e:82:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=24422b7c-2acd-45c3-988b-23c5e443e773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:ab:9a:5d:be:5b:8d:c6:09:4e:62:a1:c2: ca:41:e4:1d:4a:d5:a2:d8:5c:8a:a3:cb:f5:58:53: 67:48:d0:d3:32:c4:a5:9c:e8:c4:ce:39:d5:30:fe: 6b:4b:83:2b:30:20:97:e5:59:7f:fe:42:01:05:40: 50:d0:46:b0:12:69:74:53:a3:47:58:6a:a6:88:6c: 21:23:2d:37:a6:f5:10:87:85:eb:fd:89:82:81:9c: 10:6e:5c:1c:8e:11:f8:63:d7:c7:e3:da:2d:2c:57: 1f:cc:e5:18:80:4d:dc:75:32:63:84:cb:1f:34:59: dd:ca:a7:2d:ce:0b:b3:40:a9:c7:93:4d:6f:90:7f: b6:f9:24:35:b4:a4:77:2a:53:d4:27:a1:1b:58:ed: 12:55:d4:09:18:bf:f4:47:eb:38:19:81:03:81:49: ec:c6:74:6f:ae:bd:07:77:e6:5a:c7:15:a6:f3:3c: 5c:a0:23:ec:a3:fc:2b:26:3f:dd:31:aa:a0:30:8e: 84:99:af:32:b9:77:02:f7:60:08:e6:76:33:d7:4b: b9:e2:cf:2c:95:ed:a3:65:de:f6:1d:90:7f:2b:a9: ee:fb:9c:34:c0:23:5b:f0:0c:63:4d:fd:2d:0e:68: b2:91:81:94:0d:b9:c1:da:d2:1a:69:c7:6f:0c:99: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:25:6D:15:36:67:5D:94:F9:A6:63:9C:7C:EE:C9:FA:44:75:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a7:2c:4f:33:ba:54:7a:22:9e:98:64:da:7b:ff:1b:e0:89: 60:99:1e:3f:8e:94:68:10:2f:74:16:8a:e8:26:db:9a:7d:c1: 64:ba:83:58:05:a1:1a:6b:87:0c:2a:01:f3:5b:5f:68:5e:48: a0:f3:f8:11:68:c3:67:44:a3:15:dd:ac:a2:26:04:08:29:05: 24:4b:77:13:10:66:05:e1:11:58:85:67:9b:a2:43:82:ec:18: ca:5c:c9:1a:da:23:2a:a7:52:da:7c:b8:52:bd:97:86:cb:f1: 50:e5:e3:e8:e5:c2:79:30:f8:f5:ca:c7:bb:5b:bd:87:90:0c: 9a:c7:47:b1:71:86:ed:8a:85:6b:dc:b5:a7:a6:df:9b:f3:46: 16:8c:3a:6f:8f:d9:f6:df:2b:57:9d:b5:58:f5:ac:cc:7f:23: e6:1c:87:d8:2b:e8:4d:b5:d0:23:23:44:16:51:1a:b2:c5:e8: 85:62:18:d3:67:94:e5:bb:54:4e:41:f3:ec:7f:71:61:37:9c: 41:e1:b7:bb:1b:3d:d5:1d:3a:1a:7a:33:29:03:30:92:07:1b: 31:42:29:de:62:ad:d3:40:88:9f:c4:74:80:d5:2d:b8:37:5a: ce:e4:eb:24:1c:1e:3f:e2:eb:79:83:7d:70:7a:5b:32:07:d7: 3c:82:5d:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QoPyUMVCL5+gjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjQ0MjJiN2MtMmFjZC00NWMzLTk4OGItMjNjNWU0NDNlNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqmrml2+W43GCU5iocLKQeQdStWi2FyKo8v1 WFNnSNDTMsSlnOjEzjnVMP5rS4MrMCCX5Vl//kIBBUBQ0EawEml0U6NHWGqmiGwh Iy03pvUQh4Xr/YmCgZwQblwcjhH4Y9fH49otLFcfzOUYgE3cdTJjhMsfNFndyqct zguzQKnHk01vkH+2+SQ1tKR3KlPUJ6EbWO0SVdQJGL/0R+s4GYEDgUnsxnRvrr0H d+ZaxxWm8zxcoCPso/wrJj/dMaqgMI6Ema8yuXcC92AI5nYz10u54s8sle2jZd72 HZB/K6nu+5w0wCNb8AxjTf0tDmiykYGUDbnB2tIaacdvDJlb1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEkjJW0VNmddlPmmY5x87sn6RHVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwpyxPM7pUeiKemGTae/8b4IlgmR4/jpRoEC90ForoJtuafcFkuoNY BaEaa4cMKgHzW19oXkig8/gRaMNnRKMV3ayiJgQIKQUkS3cTEGYF4RFYhWebokOC 7BjKXMka2iMqp1LafLhSvZeGy/FQ5ePo5cJ5MPj1yse7W72HkAyax0excYbtioVr 3LWnpt+b80YWjDpvj9n23ytXnbVY9azMfyPmHIfYK+hNtdAjI0QWURqyxeiFYhjT Z5Tlu1ROQfPsf3FhN5xB4be7Gz3VHToaejMpAzCSBxsxQineYq3TQIifxHSA1S24 N1rO5OskHB4/4ut5g31welsyB9c8gl0G -----END CERTIFICATE-----Generated at Sat Apr 12 02:06:46 2025 by rpki-client