$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa File: 18792aa5-f8a0-34fd-af64-001b6f6efda1.roa (raw, json) Hash identifier: Bc77oMAucNwmf1cXAPmZeHpO3G7vr0pQ3E+AuP6TReA= Subject key identifier: 50:F7:22:CF:CE:10:4E:19:79:C1:D6:E2:A3:90:13:E4:58:70:1C:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F623559498F424093480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 32651 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:23:55:94:98:f4:24:09:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=f2845ddb-41d4-4751-918d-4c3bba9c28c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:7e:91:40:b9:de:74:53:ac:97:2f:90:96: 31:a9:cf:09:cd:fd:82:ab:8b:06:39:1e:29:2d:87: ea:dd:15:a1:10:d3:d4:4c:90:54:a6:57:de:96:23: 74:20:6e:c8:35:eb:c5:2a:fb:df:17:e7:d1:c5:39: 07:ae:36:58:21:74:b1:27:44:3e:98:60:bb:09:cd: cf:f6:16:f2:97:e6:ce:9d:9f:f3:50:c3:7d:34:77: 3f:d7:23:af:86:76:fc:3f:ef:1e:b5:fb:01:7b:f5: 12:e6:7a:e1:1d:68:fe:15:bc:58:b8:d4:7c:d9:89: 0c:bb:19:16:d8:bb:33:c1:6f:c0:e0:85:46:3b:78: f3:68:78:f0:e0:87:ca:a2:df:fa:74:a3:a9:24:2c: 6d:26:8f:e7:09:e9:78:23:6d:52:a5:11:82:72:3c: 44:39:a6:d7:b0:0b:62:b3:66:d5:c2:d8:c3:65:5f: 26:f3:2a:c4:f0:a0:8b:36:54:ff:1a:7d:c1:ed:48: 3f:fb:bc:27:4c:69:15:7d:8b:0f:ca:68:40:f9:bc: 3d:51:3a:80:c3:1f:da:0c:c6:22:48:91:87:fa:d3: 03:44:cf:a2:d4:00:9d:e8:50:ff:e2:82:d0:f6:62: a3:77:d7:45:74:e8:ca:95:77:9f:f6:e2:19:86:51: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:22:CF:CE:10:4E:19:79:C1:D6:E2:A3:90:13:E4:58:70:1C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:13:d4:f1:12:56:39:d6:65:f3:17:dd:01:8d:2b:b4:a5:7d: 08:ea:a1:77:5f:40:d0:94:ba:13:90:90:10:81:31:a3:bb:18: 0b:e9:cd:0e:b8:a7:c1:04:b1:ed:b2:b2:fe:76:bc:e1:ef:04: 73:3e:51:c7:4f:1f:36:0c:34:f8:77:bd:3b:ac:f3:4a:7f:24: cb:c2:1a:97:c2:97:5e:b7:b7:24:44:c9:95:2c:03:73:6b:e0: df:8a:d3:19:86:f7:2d:b8:fb:ef:58:28:58:2b:09:71:ed:87: cf:f0:83:30:1f:00:a3:54:16:59:3f:13:a9:db:7f:fa:f9:42: bb:1e:e4:0d:55:df:a0:c7:cb:e1:6e:b7:f2:e7:d2:d5:06:43: 60:34:ff:bb:a7:8a:3a:43:ce:79:15:a4:78:86:49:de:06:69: 51:86:9a:6f:df:1b:0b:d6:51:0c:41:5f:ea:e4:27:e5:17:b8: 99:3e:92:cd:e4:58:4c:52:78:58:c9:69:8d:00:bb:44:0c:05: ee:56:56:de:d5:73:6f:3b:5e:88:e6:3f:d2:6b:2b:e1:9b:4a: a0:44:40:37:72:d9:d8:26:cc:c0:ca:ce:de:25:60:b9:6e:cb: 63:42:e2:9d:26:fc:d6:82:e8:cb:9f:60:2e:20:e8:ed:e4:bd: 88:bc:cf:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPYjVZSY9CQJNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjI4NDVkZGItNDFkNC00NzUxLTkxOGQtNGMzYmJhOWMyOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykp+kUC53nRTrJcvkJYxqc8Jzf2Cq4sGOR4p LYfq3RWhENPUTJBUplfeliN0IG7INevFKvvfF+fRxTkHrjZYIXSxJ0Q+mGC7Cc3P 9hbyl+bOnZ/zUMN9NHc/1yOvhnb8P+8etfsBe/US5nrhHWj+FbxYuNR82YkMuxkW 2LszwW/A4IVGO3jzaHjw4IfKot/6dKOpJCxtJo/nCel4I21SpRGCcjxEOabXsAti s2bVwtjDZV8m8yrE8KCLNlT/Gn3B7Ug/+7wnTGkVfYsPymhA+bw9UTqAwx/aDMYi SJGH+tMDRM+i1ACd6FD/4oLQ9mKjd9dFdOjKlXef9uIZhlErYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFD3Is/OEE4ZecHW4qOQE+RYcBz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg3OTJhYTUtZjhhMC0z NGZkLWFmNjQtMDAxYjZmNmVmZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwE9TxElY51mXzF90BjSu0pX0I6qF3X0DQlLoTkJAQgTGjuxgL6c0O uKfBBLHtsrL+drzh7wRzPlHHTx82DDT4d707rPNKfyTLwhqXwpdet7ckRMmVLANz a+DfitMZhvctuPvvWChYKwlx7YfP8IMwHwCjVBZZPxOp23/6+UK7HuQNVd+gx8vh brfy59LVBkNgNP+7p4o6Q855FaR4hkneBmlRhppv3xsL1lEMQV/q5CflF7iZPpLN 5FhMUnhYyWmNALtEDAXuVlbe1XNvO16I5j/Sayvhm0qgREA3ctnYJszAys7eJWC5 bstjQuKdJvzWgujLn2AuIOjt5L2IvM9U -----END CERTIFICATE-----Generated at Sun May 11 08:19:17 2025 by rpki-client