$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa File: 2be2b071-452a-3316-af15-4dc60aecd7f8.roa (raw, json) Hash identifier: ltzRARoRrqB8N2QayI7geAHgnFmNgFym9zYWiOUUcYI= Subject key identifier: 66:EA:FA:BD:96:D3:25:A5:12:30:FF:74:80:59:70:A0:99:CB:E2:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F1E694317686DFC5FFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396600 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f1:e6:94:31:76:86:df:c5:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=3e3ab12e-f67c-40ac-a350-ca3fd5c93a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:ed:f2:a6:2b:0d:69:b6:33:71:96:53:f9: de:94:98:df:02:5c:02:e8:b7:6b:2e:03:ad:07:32: 14:ad:fd:fa:27:f7:0a:a2:d8:35:26:91:dc:64:e0: 45:fe:9c:93:6d:44:82:ff:00:9d:d7:35:eb:34:7f: 8d:c1:82:bb:03:8b:41:64:13:a3:70:e7:be:d4:94: f9:1b:ba:f9:2d:fb:c4:26:94:9d:23:e7:c4:97:60: 38:07:db:3f:7a:fa:4e:38:5d:52:89:97:64:20:43: f9:20:59:fa:c0:cc:98:08:7b:e1:e8:c8:53:a6:bd: 6f:02:f6:19:65:0a:5d:9b:0a:69:cc:c8:c7:0d:0a: 89:af:a9:78:be:2f:ee:63:0e:4a:50:f1:bb:c8:b2: e8:bb:6d:69:27:48:5b:1a:da:e6:55:5c:d1:d5:07: 31:63:3f:e6:b8:ed:fe:bd:59:60:cd:55:fc:4d:11: 99:e1:4e:be:f5:e0:4f:eb:4c:c7:04:66:ee:68:21: cf:4f:25:84:5e:da:46:d2:21:93:5d:c6:d8:7f:74: 1f:71:04:3c:42:8b:d0:55:c7:75:ad:71:50:70:3d: 29:99:b0:e0:27:52:2a:57:2f:41:0f:b8:64:f3:55: e9:30:ef:c6:2f:45:62:8c:0e:a4:a4:ca:3a:27:fb: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EA:FA:BD:96:D3:25:A5:12:30:FF:74:80:59:70:A0:99:CB:E2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2f:47:2a:4d:58:f4:74:65:56:69:8f:7e:7d:7e:33:b9:ab: 9c:2f:2a:95:f1:aa:c6:75:5f:6d:05:a4:8e:a4:b2:ff:74:8e: 15:e4:0f:d0:08:50:05:44:68:6d:47:29:8b:c7:36:2b:00:c4: e5:ec:c1:f9:40:36:8d:72:54:d0:4e:a3:fa:bc:ab:34:19:e4: 97:dd:42:45:5f:9a:3f:1a:30:09:cc:cc:44:a2:d1:d5:67:d4: 8f:27:e1:e5:1b:d5:a8:02:40:03:6e:c3:52:36:8b:48:9f:66: 18:5e:ae:7a:53:5f:b1:f3:d3:e7:49:89:cd:18:8e:34:e0:f4: af:4b:a2:13:06:84:ff:61:ed:90:7f:08:1e:79:63:97:f3:95: b5:a8:bd:72:47:7f:c3:67:8d:3a:26:0c:bf:94:dd:fd:ac:d2: 61:59:84:2a:c6:a7:61:ad:86:51:23:9b:1e:f6:d0:5d:fc:cb: 9e:59:37:3e:94:55:8c:0d:c2:6c:52:fc:64:6e:05:3c:77:df: 4d:3d:de:e3:4b:4b:81:e3:d2:79:e7:38:f1:db:b8:e2:8c:cd: 60:f9:38:a9:a3:fc:e2:2f:11:f8:eb:b9:7d:b9:e1:6c:4d:d6: a7:21:68:43:69:ca:27:bb:14:34:52:dc:1b:50:e8:6b:68:01: d0:47:fb:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPHmlDF2ht/F/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk M2UzYWIxMmUtZjY3Yy00MGFjLWEzNTAtY2EzZmQ1YzkzYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirLt8qYrDWm2M3GWU/nelJjfAlwC6LdrLgOt BzIUrf36J/cKotg1JpHcZOBF/pyTbUSC/wCd1zXrNH+NwYK7A4tBZBOjcOe+1JT5 G7r5LfvEJpSdI+fEl2A4B9s/evpOOF1SiZdkIEP5IFn6wMyYCHvh6MhTpr1vAvYZ ZQpdmwppzMjHDQqJr6l4vi/uYw5KUPG7yLLou21pJ0hbGtrmVVzR1QcxYz/muO3+ vVlgzVX8TRGZ4U6+9eBP60zHBGbuaCHPTyWEXtpG0iGTXcbYf3QfcQQ8QovQVcd1 rXFQcD0pmbDgJ1IqVy9BD7hk81XpMO/GL0VijA6kpMo6J/tjtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGbq+r2W0yWlEjD/dIBZcKCZy+IrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJlMmIwNzEtNDUyYS0z MzE2LWFmMTUtNGRjNjBhZWNkN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTL0cqTVj0dGVWaY9+fX4zuaucLyqV8arGdV9tBaSOpLL/dI4V5A/Q CFAFRGhtRymLxzYrAMTl7MH5QDaNclTQTqP6vKs0GeSX3UJFX5o/GjAJzMxEotHV Z9SPJ+HlG9WoAkADbsNSNotIn2YYXq56U1+x89PnSYnNGI404PSvS6ITBoT/Ye2Q fwgeeWOX85W1qL1yR3/DZ406Jgy/lN39rNJhWYQqxqdhrYZRI5se9tBd/MueWTc+ lFWMDcJsUvxkbgU8d99NPd7jS0uB49J55zjx27jijM1g+Tipo/ziLxH467l9ueFs TdanIWhDaconuxQ0UtwbUOhraAHQR/s0 -----END CERTIFICATE-----Generated at Sun May 11 06:04:48 2025 by rpki-client