$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa File: 165b190a-bc48-3899-87f2-27377652e3af.roa (raw, json) Hash identifier: QrDj+WoywGpoDs/qt/CHfwm2Ox6cQz8TNh+BJ6uksm0= Subject key identifier: 2B:CB:5B:D3:A5:C4:70:46:7D:A4:0D:24:89:A2:A7:80:76:38:85:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F87FC1783BD50521E1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396580 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:7f:c1:78:3b:d5:05:21:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=5c34fdb0-a5cd-4dbf-9fb1-91b282a6a44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:77:34:af:b2:c6:45:f7:e8:2f:93:80:58: 87:32:41:e6:d9:5d:97:a6:7a:df:1d:af:9e:d3:7c: 18:a0:f2:8b:9b:33:81:53:90:29:4a:be:a0:c6:4d: 3d:26:10:30:39:74:11:fb:b3:2e:4f:80:e8:ab:71: 44:68:40:aa:fe:10:b8:d7:cb:8c:62:89:9f:5e:bc: 08:3b:58:e7:e7:48:39:36:d5:3c:34:31:86:60:7b: 12:02:7f:6f:6e:83:3a:6d:c8:a9:c3:63:80:c4:9b: 32:10:e1:fe:b7:df:6a:5c:30:1a:63:50:79:43:ef: df:68:19:14:d7:f7:e1:87:3a:31:9a:e7:26:29:c4: 95:47:18:22:1c:05:bd:35:cf:c2:af:ae:ed:f4:a3: f4:c7:a7:d9:b6:91:a3:55:3d:54:31:93:42:e4:1c: d6:12:83:83:bc:68:fb:f6:e9:ff:95:6b:f7:82:40: 4a:83:95:10:85:0f:11:d5:a5:23:36:3d:eb:23:96: d5:a5:24:50:20:a4:f3:41:03:0e:a9:d3:13:c4:4c: a5:8f:c4:8a:f3:10:1b:ff:32:13:77:44:f0:df:e0: 0b:8f:b7:5d:50:09:71:c1:87:24:d9:e1:7b:22:4c: 09:87:05:d0:5c:a1:eb:87:5d:df:bb:b7:a0:53:84: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:5B:D3:A5:C4:70:46:7D:A4:0D:24:89:A2:A7:80:76:38:85:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:24:f9:94:9a:7d:51:88:2f:70:62:76:88:e0:c1:38:9c:4a: ca:5b:59:15:43:49:6e:a2:2c:2f:05:c2:d1:67:df:d8:cf:ef: 59:af:e4:dd:ae:6f:0c:60:15:d3:62:c5:84:94:8c:c3:a2:a7: c1:3e:3a:95:10:f6:d4:97:c5:66:6a:7d:11:68:4d:a0:ed:d5: 0d:e7:3a:be:0e:72:ad:12:30:32:c6:8f:19:96:5c:a3:15:a3: 8a:56:a5:d3:2d:63:48:c2:80:a9:cb:55:c5:cf:73:be:cc:56: e1:d8:a9:67:f7:4d:f1:73:a5:8c:f7:f2:47:b7:bb:14:af:43: da:e8:45:d9:1b:8f:8d:ec:1e:00:ab:7b:b0:56:2e:3f:47:0e: 05:e8:54:19:fe:a7:cf:87:96:37:56:a1:7e:d2:f4:3b:37:8d: 9e:e2:89:12:3f:ec:88:c8:df:87:42:da:75:6c:79:06:4a:25: 0d:5a:f6:33:e7:24:ff:22:c2:33:d3:49:33:ae:9d:21:26:54: 72:77:ce:58:18:5e:7e:33:78:57:db:ac:6e:1e:aa:e2:f2:68: d2:8d:e0:81:ea:04:b2:38:3d:17:2d:7a:4e:e7:2c:b4:ef:26: 8b:df:c3:71:ed:e8:92:f0:f8:35:9a:0b:fd:b4:33:c5:cf:5f: fd:53:39:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPh/wXg71QUh4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NWMzNGZkYjAtYTVjZC00ZGJmLTlmYjEtOTFiMjgyYTZhNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSp3NK+yxkX36C+TgFiHMkHm2V2XpnrfHa+e 03wYoPKLmzOBU5ApSr6gxk09JhAwOXQR+7MuT4Doq3FEaECq/hC418uMYomfXrwI O1jn50g5NtU8NDGGYHsSAn9vboM6bcipw2OAxJsyEOH+t99qXDAaY1B5Q+/faBkU 1/fhhzoxmucmKcSVRxgiHAW9Nc/Cr67t9KP0x6fZtpGjVT1UMZNC5BzWEoODvGj7 9un/lWv3gkBKg5UQhQ8R1aUjNj3rI5bVpSRQIKTzQQMOqdMTxEylj8SK8xAb/zIT d0Tw3+ALj7ddUAlxwYck2eF7IkwJhwXQXKHrh13fu7egU4Q2KQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvLW9OlxHBGfaQNJImip4B2OIXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTY1YjE5MGEtYmM0OC0z ODk5LTg3ZjItMjczNzc2NTJlM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4JPmUmn1RiC9wYnaI4ME4nErKW1kVQ0luoiwvBcLRZ9/Yz+9Zr+Td rm8MYBXTYsWElIzDoqfBPjqVEPbUl8Vman0RaE2g7dUN5zq+DnKtEjAyxo8Zllyj FaOKVqXTLWNIwoCpy1XFz3O+zFbh2Kln903xc6WM9/JHt7sUr0Pa6EXZG4+N7B4A q3uwVi4/Rw4F6FQZ/qfPh5Y3VqF+0vQ7N42e4okSP+yIyN+HQtp1bHkGSiUNWvYz 5yT/IsIz00kzrp0hJlRyd85YGF5+M3hX26xuHqri8mjSjeCB6gSyOD0XLXpO5yy0 7yaL38Nx7eiS8Pg1mgv9tDPFz1/9Uzl3 -----END CERTIFICATE-----Generated at Sun May 11 06:36:32 2025 by rpki-client