$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa File: ffaf012d-2e1a-3583-938a-62a834478f3d.roa (raw, json) Hash identifier: Mbg3OLGHhWLYtBhCJ6cVREz6OMxezBkaJo/vuNs6wlo= Subject key identifier: 2D:78:93:69:9D:7C:B3:1D:9B:23:41:AC:E2:63:3F:5F:96:8B:DB:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE102C786D64621B4AD1480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36625 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:02:c7:86:d6:46:21:b4:ad:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=245e370d-fd44-407f-820e-6b2384ce6708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:5d:47:00:c4:79:2e:a0:3d:cc:da:ca:51: 53:dc:4e:5f:d5:2e:a3:5d:49:36:93:0a:72:3a:db: 45:c8:e5:67:a2:42:a0:7a:1c:35:b1:0e:0e:61:20: 97:f6:85:6d:6f:63:69:68:d5:bc:41:aa:58:9e:bc: 7e:0b:eb:c4:89:08:0a:23:14:29:17:dd:50:93:a1: 6c:04:3f:3f:bc:ce:04:11:1d:f2:ec:05:12:90:8b: 3e:c6:30:ee:b5:2c:6c:9f:32:70:97:88:14:b9:f5: 62:67:71:6f:e8:5e:e6:bf:21:a0:fb:c1:28:2f:c4: 39:d8:16:dd:ec:41:29:77:fa:b5:88:46:5d:37:de: 13:8c:4f:ca:67:14:d8:a4:db:60:99:e4:df:61:bc: 5f:3a:20:23:5b:c0:67:56:2a:cf:e8:80:58:e4:bf: 8e:43:c0:0c:c0:5a:85:55:7e:f8:0d:55:d4:ee:55: b4:26:46:2b:38:59:01:26:55:6e:e7:ba:82:bc:cc: 6c:9e:7a:60:ec:68:3d:5a:64:c5:4e:22:26:12:86: 29:f7:5f:a2:3d:39:61:ec:76:41:08:9e:3c:22:fd: 1e:25:ee:b2:ec:ae:12:2d:91:9b:57:66:ee:ef:41: 40:c5:69:68:07:2a:9e:5c:09:0f:cd:61:42:8e:24: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:78:93:69:9D:7C:B3:1D:9B:23:41:AC:E2:63:3F:5F:96:8B:DB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:50:e9:2b:2a:b7:89:12:01:93:ed:bb:1d:7f:88:ee:3f:ba: e9:82:70:8b:ea:34:32:41:47:5d:e2:c9:41:a5:5b:6a:16:f3: ff:fc:1e:07:07:cc:ee:14:68:d1:39:3e:f7:c7:3f:1a:a9:b4: f3:c8:4e:70:da:27:aa:49:07:af:26:3d:bd:3c:c8:ca:ea:ca: ad:4e:83:56:0e:c9:90:a6:ed:ba:06:7f:d6:f9:61:79:b4:4a: 49:43:d3:dc:ce:41:d0:8b:6e:ec:0b:8f:e0:09:35:81:02:be: 63:39:e5:8a:6a:ea:77:d0:e6:b1:e9:f1:c6:5b:ef:dc:47:e1: d6:56:05:6b:5e:0c:68:2b:d8:02:05:1e:8e:01:fb:af:f5:fd: 98:b1:42:ab:b1:40:03:de:dd:1f:d4:c9:38:c3:08:bb:48:44: c9:47:89:52:1a:44:b5:a1:06:52:3f:b9:e7:05:59:fa:57:c8: 79:0f:4f:63:ab:92:a2:e1:fd:7c:fc:2a:9a:39:c1:c1:e4:4f: 51:2f:92:cb:91:99:51:ea:bd:40:9c:d7:7e:3a:14:0e:40:cb: 3c:82:56:b2:be:6b:79:02:dc:8e:85:ae:6a:05:5a:90:51:f7: 79:ae:7b:33:ad:e7:8f:31:30:50:0a:2d:eb:d5:ec:4f:2b:bd: 0b:9d:5c:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QLHhtZGIbStFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjQ1ZTM3MGQtZmQ0NC00MDdmLTgyMGUtNmIyMzg0Y2U2NzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHldRwDEeS6gPczaylFT3E5f1S6jXUk2kwpy OttFyOVnokKgehw1sQ4OYSCX9oVtb2NpaNW8QapYnrx+C+vEiQgKIxQpF91Qk6Fs BD8/vM4EER3y7AUSkIs+xjDutSxsnzJwl4gUufViZ3Fv6F7mvyGg+8EoL8Q52Bbd 7EEpd/q1iEZdN94TjE/KZxTYpNtgmeTfYbxfOiAjW8BnVirP6IBY5L+OQ8AMwFqF VX74DVXU7lW0JkYrOFkBJlVu57qCvMxsnnpg7Gg9WmTFTiImEoYp91+iPTlh7HZB CJ48Iv0eJe6y7K4SLZGbV2bu70FAxWloByqeXAkPzWFCjiROIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC14k2mdfLMdmyNBrOJjP1+Wi9tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZhZjAxMmQtMmUxYS0z NTgzLTkzOGEtNjJhODM0NDc4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLUOkrKreJEgGT7bsdf4juP7rpgnCL6jQyQUdd4slBpVtqFvP//B4H B8zuFGjROT73xz8aqbTzyE5w2ieqSQevJj29PMjK6sqtToNWDsmQpu26Bn/W+WF5 tEpJQ9PczkHQi27sC4/gCTWBAr5jOeWKaup30Oax6fHGW+/cR+HWVgVrXgxoK9gC BR6OAfuv9f2YsUKrsUAD3t0f1Mk4wwi7SETJR4lSGkS1oQZSP7nnBVn6V8h5D09j q5Ki4f18/CqaOcHB5E9RL5LLkZlR6r1AnNd+OhQOQMs8glayvmt5AtyOha5qBVqQ Ufd5rnszreePMTBQCi3r1exPK70LnVxj -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:28 2025 by rpki-client