$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa File: 1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa (raw, json) Hash identifier: X7hrS+hD8VAmY0qcKBYHUYecMpVHck9zGuK5wx9kKnc= Subject key identifier: 1B:DA:DF:00:22:75:7A:BF:45:8C:B4:A3:FE:66:92:EA:1D:11:58:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F804B86779C4ADAFB080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396543 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:04:b8:67:79:c4:ad:af:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1cb419b0-afcc-4932-bc3a-9dc52c403310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:f9:d7:da:cd:97:29:e5:35:1d:2d:82:44: e6:53:e2:49:12:30:e2:12:e3:a4:7d:4d:3c:d7:d7: 31:61:64:de:06:50:f1:15:46:6c:d3:85:76:a7:fa: e2:d7:bf:ee:d9:1d:de:39:47:95:95:d9:fd:43:02: b5:3d:d8:bd:ed:0f:4b:7f:b2:75:95:04:7e:ff:2f: 1a:58:eb:ee:d0:e5:fb:a7:d1:3a:96:35:a6:cb:50: 17:f4:e1:fd:5f:2b:5c:64:06:1b:69:de:9f:a5:a0: 9f:0e:1d:7e:b1:01:88:d4:26:9d:ca:bd:8a:31:3c: 3e:a4:ae:01:cd:91:6d:98:f7:8f:77:40:d6:9a:eb: 6a:20:ff:72:db:0c:8c:a8:43:05:4a:ea:c8:eb:05: d1:8e:3e:6f:d1:ba:36:4a:ac:ea:31:b9:7d:35:a8: 04:cf:25:3b:6d:61:a2:7d:71:9f:30:5c:7d:2a:9a: e7:c3:8c:61:d1:ff:49:68:a0:20:20:d9:77:69:6a: 07:a8:ea:2c:96:8b:76:17:73:8e:7b:78:8c:2a:22: 24:d6:2f:71:40:85:8d:3b:ba:1d:a6:12:12:ff:eb: 33:f2:e3:f0:80:b4:23:1c:42:ff:9c:ef:76:08:84: 2f:8b:48:43:d4:a5:14:dc:db:fe:20:3e:07:32:1e: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:DF:00:22:75:7A:BF:45:8C:B4:A3:FE:66:92:EA:1D:11:58:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:65:90:2a:d0:03:1a:33:be:cb:a9:bb:28:31:56:e5:32:4a: 66:4c:07:ec:a4:87:0b:e8:00:53:2c:3f:40:a1:21:0d:d9:dd: fe:ab:5f:4d:60:4b:48:26:26:97:86:ec:05:67:42:6b:ff:3e: a8:ba:53:c3:26:2d:d0:17:28:5d:b9:92:bb:bd:a2:64:dc:0f: 97:f4:a7:ef:34:e8:45:4e:08:c8:1e:95:c9:84:ff:4a:a5:05: ff:6c:b7:3b:81:3b:54:6a:d7:b6:3d:76:ef:7a:c0:cb:f4:4d: f1:cc:68:05:23:72:de:1f:90:1b:3f:0b:18:42:04:67:a4:3c: b3:79:ba:77:19:05:6a:24:2c:70:d6:85:2f:79:2a:fa:71:8a: dc:f5:aa:eb:4f:f8:71:4d:27:ad:6d:4c:86:ab:b7:2f:7c:de: 39:47:ff:b3:c9:80:09:d0:95:90:b5:12:80:f3:71:bc:78:ae: 5c:58:a7:0e:25:16:a0:77:64:f0:bc:ba:e7:73:ac:18:87:45: cc:19:bd:05:17:a9:c8:fb:a0:8a:e7:b4:05:81:3e:be:93:31: 73:28:c4:3d:4b:36:39:ad:dc:43:3d:ea:bd:ab:12:3c:25:72: 96:ff:d4:d5:91:36:c5:6a:f5:d0:71:b0:35:ed:18:44:f6:07: 5c:03:9d:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPgEuGd5xK2vsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWNiNDE5YjAtYWZjYy00OTMyLWJjM2EtOWRjNTJjNDAzMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSj519rNlynlNR0tgkTmU+JJEjDiEuOkfU08 19cxYWTeBlDxFUZs04V2p/ri17/u2R3eOUeVldn9QwK1Pdi97Q9Lf7J1lQR+/y8a WOvu0OX7p9E6ljWmy1AX9OH9XytcZAYbad6fpaCfDh1+sQGI1Cadyr2KMTw+pK4B zZFtmPePd0DWmutqIP9y2wyMqEMFSurI6wXRjj5v0bo2SqzqMbl9NagEzyU7bWGi fXGfMFx9Kprnw4xh0f9JaKAgINl3aWoHqOoslot2F3OOe3iMKiIk1i9xQIWNO7od phIS/+sz8uPwgLQjHEL/nO92CIQvi0hD1KUU3Nv+ID4HMh4hUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBva3wAidXq/RYy0o/5mkuodEVh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg5NWU3ZmMtNWE2OS0z NmE3LWFhMTktOTkyNGQ2N2NkY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANZZAq0AMaM77LqbsoMVblMkpmTAfspIcL6ABTLD9AoSEN2d3+q19N YEtIJiaXhuwFZ0Jr/z6oulPDJi3QFyhduZK7vaJk3A+X9KfvNOhFTgjIHpXJhP9K pQX/bLc7gTtUate2PXbvesDL9E3xzGgFI3LeH5AbPwsYQgRnpDyzebp3GQVqJCxw 1oUveSr6cYrc9arrT/hxTSetbUyGq7cvfN45R/+zyYAJ0JWQtRKA83G8eK5cWKcO JRagd2TwvLrnc6wYh0XMGb0FF6nI+6CK57QFgT6+kzFzKMQ9SzY5rdxDPeq9qxI8 JXKW/9TVkTbFavXQcbA17RhE9gdcA50N -----END CERTIFICATE-----Generated at Sun May 11 05:22:27 2025 by rpki-client