$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa File: 23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa (raw, json) Hash identifier: 3QfIP5SrXqGKETK+hlsiDqPOPG1djpbW/1XOgijRpCY= Subject key identifier: 07:39:4D:C1:15:DB:38:79:51:17:37:A9:FF:58:F8:05:DA:27:DA:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F86E697ECB1AA81028C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396566 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:6e:69:7e:cb:1a:a8:10:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=00c9fdbb-2b1d-4e5a-9073-b073558ab4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:74:6d:77:e0:90:63:8a:74:52:03:8a:21: ae:58:ec:16:9f:8e:8d:9c:0d:ff:dd:96:99:74:65: 70:7f:12:83:69:47:7c:1c:88:76:60:e5:03:e6:f6: 33:4c:34:48:1d:67:25:d3:a0:78:5a:fb:b2:44:d1: ba:07:97:f0:c7:ed:4d:69:c0:2b:4b:62:94:9b:e9: fe:71:76:fc:92:72:00:1d:14:64:f4:57:7d:09:4a: 6f:1a:d9:e8:46:95:2d:7d:22:2b:61:b6:ad:31:4c: 0e:19:de:fa:46:37:dc:ab:df:e3:ee:9c:55:b6:04: b9:4f:a9:8d:a6:6b:db:1f:fa:1f:ea:6b:d7:bb:b5: ed:f5:8f:a2:07:ef:96:92:3c:f6:96:ff:9b:6a:37: 9c:3f:84:99:e7:89:d7:87:b9:eb:58:1f:d3:44:83: db:bb:47:a6:78:09:e6:69:5a:1c:03:58:c1:3f:66: fe:8d:be:e6:2f:88:fc:1d:2c:d6:0d:8a:08:fb:ac: 5c:76:c9:98:48:fe:63:2e:d8:fc:66:82:4a:5a:16: 9f:60:ea:aa:49:cd:ba:7d:c7:b3:7e:7c:d9:ce:80: 0b:bb:9f:3d:83:9a:16:0c:9a:b2:e1:e3:3c:97:19: 9d:24:07:d8:4f:2a:2a:3c:2f:d7:ef:d7:6c:64:86: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:39:4D:C1:15:DB:38:79:51:17:37:A9:FF:58:F8:05:DA:27:DA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:40:30:5e:d2:b0:83:1b:01:6a:b7:72:aa:10:46:e1:b9:c0: b6:1b:ff:7f:0d:54:96:9c:91:57:a0:d9:9b:46:43:7c:0b:01: 15:cd:98:b7:ee:83:9e:e9:8f:c2:10:4f:f6:43:d7:c6:bc:7d: 71:dc:fa:4f:9a:9b:0d:ea:85:98:1a:80:f3:21:c0:e7:e1:b3: 91:d0:75:e3:53:32:b8:de:6e:65:cd:a5:7f:77:e3:db:85:fb: 9b:2b:ce:bf:a9:26:84:27:22:1e:db:1d:81:c4:8f:08:5c:29: 6b:ef:6d:aa:70:81:2d:70:2d:28:7e:37:ca:12:5f:6c:c0:a8: b9:99:f8:68:af:e7:8d:2a:09:9a:1b:f4:01:47:c2:c7:61:cd: b7:de:80:e7:bf:17:ca:c6:55:cc:a2:7a:2c:c4:58:d9:20:47: 78:36:8b:cd:fe:d1:94:c1:1e:18:52:cd:10:87:0d:99:8d:9e: fd:42:de:44:5b:4d:89:ea:27:f7:41:a3:5d:14:13:fe:83:4f: 1c:44:ed:58:8a:6e:4b:8f:df:6f:eb:8c:dd:c0:a9:0c:4a:88: 1a:c2:0c:26:e5:d8:9e:1f:8f:1f:84:e2:d0:23:5b:46:08:b6: 8a:6f:b1:75:f7:94:8f:a0:af:68:cf:50:e2:60:39:76:4e:00: 96:b3:88:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPhuaX7LGqgQKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MDBjOWZkYmItMmIxZC00ZTVhLTkwNzMtYjA3MzU1OGFiNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJl0bXfgkGOKdFIDiiGuWOwWn46NnA3/3ZaZ dGVwfxKDaUd8HIh2YOUD5vYzTDRIHWcl06B4WvuyRNG6B5fwx+1NacArS2KUm+n+ cXb8knIAHRRk9Fd9CUpvGtnoRpUtfSIrYbatMUwOGd76Rjfcq9/j7pxVtgS5T6mN pmvbH/of6mvXu7Xt9Y+iB++Wkjz2lv+bajecP4SZ54nXh7nrWB/TRIPbu0emeAnm aVocA1jBP2b+jb7mL4j8HSzWDYoI+6xcdsmYSP5jLtj8ZoJKWhafYOqqSc26fcez fnzZzoALu589g5oWDJqy4eM8lxmdJAfYTyoqPC/X79dsZIbjXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAc5TcEV2zh5URc3qf9Y+AXaJ9oEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNiYjU5OWEtOTRmNC0z YWM0LThjYjEtMDdiMjBjOWM3YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmQDBe0rCDGwFqt3KqEEbhucC2G/9/DVSWnJFXoNmbRkN8CwEVzZi3 7oOe6Y/CEE/2Q9fGvH1x3PpPmpsN6oWYGoDzIcDn4bOR0HXjUzK43m5lzaV/d+Pb hfubK86/qSaEJyIe2x2BxI8IXClr722qcIEtcC0ofjfKEl9swKi5mfhor+eNKgma G/QBR8LHYc233oDnvxfKxlXMonosxFjZIEd4NovN/tGUwR4YUs0Qhw2ZjZ79Qt5E W02J6if3QaNdFBP+g08cRO1Yim5Lj99v64zdwKkMSogawgwm5dieH48fhOLQI1tG CLaKb7F195SPoK9oz1DiYDl2TgCWs4ip -----END CERTIFICATE-----Generated at Sun May 11 05:32:16 2025 by rpki-client