$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa File: 2a80d895-c606-39f8-a6c7-314e5449573e.roa (raw, json) Hash identifier: kiJYr48L8vwxbQDjLYwll+w5Gir52iSgRHww24rWNvM= Subject key identifier: A6:05:F0:F7:AF:46:FE:B6:AD:DB:07:85:B6:F2:78:84:60:CE:15:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F40F80B844088C07BA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 27544 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f4:0f:80:b8:44:08:8c:07:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=4b2bfd6c-b102-4613-879b-7dc4b53e50e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:9c:5e:de:e5:7c:82:09:1b:0a:17:21:df: e1:a8:13:f0:7a:32:e1:b9:96:1e:b1:7d:64:ca:18: 1c:b9:fb:24:47:84:4a:92:6d:cc:4f:3d:8a:e5:5b: fb:b3:bd:ff:87:4a:d2:c7:61:96:b0:4b:e8:5e:62: ca:08:7c:e5:6a:ba:a6:23:cc:34:48:fa:38:12:1f: 0d:e9:69:3b:08:a9:af:44:96:4c:1f:34:4f:8e:36: 1b:e5:e7:50:d1:5c:7c:f7:1a:d0:89:8d:66:32:38: 78:48:9e:a3:92:bc:b7:56:78:fe:7b:b3:ea:24:ed: 0b:05:8b:b4:f9:c0:91:9f:3a:76:fb:b5:75:f6:2a: ca:54:ba:07:31:c4:7b:97:7a:5c:14:48:35:b6:b0: 34:e9:86:36:6b:b2:a7:99:c2:d5:8d:27:3b:63:00: 5c:f9:1f:9a:48:47:1f:ad:93:31:c7:a6:8b:78:bd: 33:ad:04:8c:83:b2:25:44:ab:52:57:83:7f:36:63: 6b:bb:fb:d8:67:4b:ac:9e:80:41:29:11:9e:b0:73: f0:7e:0a:ad:46:08:89:a5:af:25:a2:1b:11:10:f3: 11:2f:b9:1a:fa:6a:ba:0b:ad:6c:7f:02:3a:c1:b1: 5b:65:c5:d7:47:cc:d7:4a:f2:c9:d3:42:54:bb:67: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:F0:F7:AF:46:FE:B6:AD:DB:07:85:B6:F2:78:84:60:CE:15:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e4:ae:5e:de:d5:83:d4:19:ad:73:19:3a:4c:f9:6d:0d:55: c6:e0:c0:c8:10:77:ff:22:ae:e4:85:50:3a:0e:b2:0c:13:62: 1b:a5:cf:58:09:a1:ca:41:10:78:62:da:ca:fb:20:26:72:ae: 73:e9:0d:9d:38:a7:e1:11:6d:96:7c:7f:e9:da:3f:22:e6:2c: 93:a8:ac:fd:28:45:fd:71:fb:4a:fe:d2:9a:9d:44:cd:9e:78: f4:04:ca:0b:ce:50:97:3a:c1:ff:43:32:e4:54:71:79:49:c9: 47:76:42:95:5a:6b:18:3a:f3:9c:1d:f4:93:93:df:92:73:de: 60:35:55:50:48:a2:3a:18:40:01:e5:02:52:b1:3f:b5:41:4b: 97:9a:fb:9b:0a:7f:d5:e5:de:1d:47:b4:39:02:b7:52:44:df: 96:53:cf:78:c5:53:71:e8:09:4a:49:1a:3c:07:10:88:3c:4a: 4a:de:6f:46:be:6e:ec:cb:f6:e3:dc:12:c5:64:3d:ea:87:28: 3e:b9:6c:53:ec:e3:da:1e:b8:cc:e2:a2:12:d1:0c:2a:b9:13: b6:2a:53:4c:45:4d:7b:1e:b4:ae:b0:5b:31:bc:3a:93:6d:36: 9d:06:55:46:cb:05:86:19:77:09:1f:74:9a:97:ba:2a:9a:b7: 56:c7:79:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPQPgLhECIwHugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NGIyYmZkNmMtYjEwMi00NjEzLTg3OWItN2RjNGI1M2U1MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bacXt7lfIIJGwoXId/hqBPwejLhuZYesX1k yhgcufskR4RKkm3MTz2K5Vv7s73/h0rSx2GWsEvoXmLKCHzlarqmI8w0SPo4Eh8N 6Wk7CKmvRJZMHzRPjjYb5edQ0Vx89xrQiY1mMjh4SJ6jkry3Vnj+e7PqJO0LBYu0 +cCRnzp2+7V19irKVLoHMcR7l3pcFEg1trA06YY2a7KnmcLVjSc7YwBc+R+aSEcf rZMxx6aLeL0zrQSMg7IlRKtSV4N/NmNru/vYZ0usnoBBKRGesHPwfgqtRgiJpa8l ohsREPMRL7ka+mq6C61sfwI6wbFbZcXXR8zXSvLJ00JUu2fwRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKYF8PevRv62rdsHhbbyeIRgzhW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE4MGQ4OTUtYzYwNi0z OWY4LWE2YzctMzE0ZTU0NDk1NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA75K5e3tWD1Bmtcxk6TPltDVXG4MDIEHf/Iq7khVA6DrIME2Ibpc9Y CaHKQRB4YtrK+yAmcq5z6Q2dOKfhEW2WfH/p2j8i5iyTqKz9KEX9cftK/tKanUTN nnj0BMoLzlCXOsH/QzLkVHF5SclHdkKVWmsYOvOcHfSTk9+Sc95gNVVQSKI6GEAB 5QJSsT+1QUuXmvubCn/V5d4dR7Q5ArdSRN+WU894xVNx6AlKSRo8BxCIPEpK3m9G vm7sy/bj3BLFZD3qhyg+uWxT7OPaHrjM4qIS0QwquRO2KlNMRU17HrSusFsxvDqT bTadBlVGywWGGXcJH3Sal7oqmrdWx3nm -----END CERTIFICATE-----Generated at Sun May 11 05:34:59 2025 by rpki-client