$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db54386-defa-3781-a4f6-c629bbd49b06.roa File: 2db54386-defa-3781-a4f6-c629bbd49b06.roa (raw, json) Hash identifier: nQIzqKsv0JodkQJbR1ETKgRYpoe5LqfI58KUBniQeA8= Subject key identifier: 73:8F:83:56:16:DC:36:DD:08:CB:BB:10:6B:D9:3B:E8:5C:75:E5:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7A6F303C51E355BEA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db54386-defa-3781-a4f6-c629bbd49b06.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396613 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:a6:f3:03:c5:1e:35:5b:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=3bb6d329-c698-4179-8b26-dbb555f86990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:27:62:a0:0d:42:5b:97:fc:6b:f0:46:fe: bb:13:b6:e7:4e:de:e5:3f:24:6c:1b:9c:56:61:1f: 28:81:be:00:75:e2:fc:9c:48:14:45:9f:14:cd:9b: 2d:a5:14:6d:7b:be:78:36:2e:d5:24:79:a8:a4:a0: 09:43:09:54:03:f7:4b:2c:63:e8:7e:60:fe:c3:f4: 77:9f:fb:d6:b5:a7:ff:b7:33:08:4f:67:d3:ad:13: 1b:fc:8a:b1:76:e4:54:aa:46:99:c3:d9:54:b2:fb: 67:e1:45:3c:a3:85:8d:53:60:02:a9:85:b1:18:ba: 9a:c4:68:3f:49:d0:17:f0:a6:33:ce:37:01:1a:15: 41:70:e1:ea:54:d9:b7:c6:69:5f:d2:74:56:31:41: 43:ba:10:14:21:d3:01:ea:1c:f9:e9:70:b0:98:52: f1:bb:1b:13:0a:eb:01:34:e9:57:6a:2a:cf:be:75: 5a:ca:d5:cd:d2:9b:b0:71:53:e1:6e:54:84:25:f5: a8:98:3d:57:00:f6:c6:53:04:0f:c9:e7:66:09:06: 39:a5:a3:c2:f7:58:54:f4:b6:80:aa:3c:d0:d8:e4: 2d:16:a6:bb:f5:48:a5:c4:2e:d3:34:08:fa:ca:e3: dc:4c:98:53:fc:e3:1a:ef:4e:90:50:0e:2e:57:d3: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:83:56:16:DC:36:DD:08:CB:BB:10:6B:D9:3B:E8:5C:75:E5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db54386-defa-3781-a4f6-c629bbd49b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:54:a7:8f:bc:95:c6:10:c8:af:1e:72:86:ed:4a:58:3d:62: 81:c3:90:62:01:dc:ea:e5:6c:59:57:15:fa:d9:c5:04:ea:67: e0:6e:01:e8:d1:57:cf:21:ce:76:56:5a:1b:3b:54:e3:db:13: e9:7c:f9:d9:f8:69:46:38:a2:a2:d6:fa:ce:b4:ca:5e:8b:7a: 4e:6b:f6:40:28:80:42:8a:94:f3:da:c1:70:1a:43:22:1f:a8: 81:6a:d2:0b:1d:1f:e6:78:62:7a:04:b3:c1:90:90:8d:ae:2a: bb:bb:a2:5f:31:67:49:1d:af:a6:cc:c3:ba:9a:99:f5:f7:fb: 2f:b4:7f:aa:51:cf:b9:8e:be:7f:ed:06:23:25:57:15:8b:f1: c2:9c:40:c4:59:a4:84:a1:e2:55:a7:5b:1c:fe:82:18:1f:c2: 53:94:94:45:5f:b6:f8:47:24:24:aa:cd:0b:85:36:35:e4:7f: 2c:27:f8:05:10:3c:e1:7c:c7:5f:58:1c:91:d2:ad:81:bd:c7: 19:83:af:9f:bd:67:c8:45:6b:c9:b3:97:66:35:83:d6:7e:b2: c3:12:f4:2b:df:5a:66:58:62:a2:2d:7d:d2:f3:b7:ec:0d:73: cf:b1:cf:15:12:f1:6a:d1:f3:77:88:e8:72:a9:f0:03:65:2c: e3:4d:c8:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPem8wPFHjVb6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk M2JiNmQzMjktYzY5OC00MTc5LThiMjYtZGJiNTU1Zjg2OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufsnYqANQluX/GvwRv67E7bnTt7lPyRsG5xW YR8ogb4AdeL8nEgURZ8UzZstpRRte754Ni7VJHmopKAJQwlUA/dLLGPofmD+w/R3 n/vWtaf/tzMIT2fTrRMb/IqxduRUqkaZw9lUsvtn4UU8o4WNU2ACqYWxGLqaxGg/ SdAX8KYzzjcBGhVBcOHqVNm3xmlf0nRWMUFDuhAUIdMB6hz56XCwmFLxuxsTCusB NOlXairPvnVaytXN0puwcVPhblSEJfWomD1XAPbGUwQPyedmCQY5paPC91hU9LaA qjzQ2OQtFqa79UilxC7TNAj6yuPcTJhT/OMa706QUA4uV9No0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHOPg1YW3DbdCMu7EGvZO+hcdeVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRiNTQzODYtZGVmYS0z NzgxLWE0ZjYtYzYyOWJiZDQ5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8VKePvJXGEMivHnKG7UpYPWKBw5BiAdzq5WxZVxX62cUE6mfgbgHo 0VfPIc52VlobO1Tj2xPpfPnZ+GlGOKKi1vrOtMpei3pOa/ZAKIBCipTz2sFwGkMi H6iBatILHR/meGJ6BLPBkJCNriq7u6JfMWdJHa+mzMO6mpn19/svtH+qUc+5jr5/ 7QYjJVcVi/HCnEDEWaSEoeJVp1sc/oIYH8JTlJRFX7b4RyQkqs0LhTY15H8sJ/gF EDzhfMdfWByR0q2BvccZg6+fvWfIRWvJs5dmNYPWfrLDEvQr31pmWGKiLX3S87fs DXPPsc8VEvFq0fN3iOhyqfADZSzjTcju -----END CERTIFICATE-----Generated at Mon May 12 11:10:03 2025 by rpki-client