$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa File: 2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa (raw, json) Hash identifier: n6PnGRrxX4USdAOyRovkD5/J3fPMtbYsMMmZi7npwxM= Subject key identifier: A5:92:36:BC:B5:A2:FB:F2:7C:7C:C2:EC:E7:1D:8A:65:79:C2:25:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F331CB8D671D41DA1240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396549 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f3:31:cb:8d:67:1d:41:da:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=de15e44f-a45b-4fd8-94d3-c65ca415aa92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:96:ec:33:cd:10:8f:92:fb:70:b6:85:39: 2a:7c:80:2c:01:a9:b4:9a:bb:fb:6e:51:02:b6:18: 0f:a9:e1:2e:47:e1:4d:8d:56:d1:a2:26:60:af:fa: 72:63:5b:dd:31:37:a5:82:24:40:da:3c:52:32:49: 71:ab:b0:cb:96:30:b4:41:8a:79:b1:5c:3e:2d:90: f9:c6:37:fa:5d:c7:a4:ea:a5:6a:33:53:1a:b4:85: f0:2b:69:ee:9e:cf:91:71:91:49:23:15:d8:3c:96: cf:88:97:7c:d8:05:83:9b:c9:62:a6:0c:8e:67:73: 2e:a6:26:56:eb:22:0f:b4:70:6c:ce:7d:2e:c6:51: da:74:a5:bb:1f:83:b0:be:3d:4f:06:27:3f:ee:1a: ab:03:57:2a:18:21:e6:ef:f3:b1:a2:98:4d:84:05: b9:e1:f0:97:bf:8e:12:b1:db:08:e4:1e:a1:51:62: 57:77:7e:af:34:72:6d:6b:ba:bd:9c:46:6e:e3:e9: 7e:03:e1:66:60:d3:e4:1c:94:28:bd:0e:32:9b:fb: b1:e4:e1:96:6f:a0:48:b7:1f:1f:e1:ac:4b:37:19: a6:61:d7:6f:36:a5:9e:e2:8a:96:71:78:94:4f:fe: 81:87:70:7f:06:45:e3:35:a9:cc:96:e7:f6:b6:85: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:36:BC:B5:A2:FB:F2:7C:7C:C2:EC:E7:1D:8A:65:79:C2:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f4:51:69:9e:d3:65:31:dd:2a:11:41:4e:41:de:2a:39:9f: c9:8a:09:9c:7b:16:6d:ed:22:86:dd:77:62:d6:b6:cf:d2:c8: 76:56:57:6b:ea:86:26:40:3f:9a:12:c8:c0:46:56:65:bf:b2: 13:04:34:57:34:90:fb:fb:1b:7e:f4:7e:48:c1:35:1d:2b:38: 56:d6:44:10:0f:9d:66:03:df:5c:aa:25:a7:59:7a:01:50:a2: 8b:99:5c:84:af:1a:82:dc:6d:39:69:e5:25:7f:57:4c:62:4f: 1b:f5:68:25:65:69:ad:88:e0:ce:da:8c:3d:a2:46:78:9c:13: f5:03:9f:ed:85:31:1a:b2:cf:94:0e:e7:aa:fb:cf:b7:50:62: b7:7d:78:67:71:18:3a:20:eb:33:dc:9c:a8:61:a0:63:46:81: 7f:05:6e:d9:c1:5a:67:5f:44:a8:93:d6:72:e8:4f:2b:bf:6e: b8:d6:82:db:cb:29:15:c6:05:e1:81:b8:a7:2d:ed:88:1c:7b: 39:18:7f:5a:7f:a2:c1:4b:7b:72:cc:95:90:19:5b:0a:4b:07: cc:f0:e7:65:3f:7b:ad:05:cd:f7:11:98:b2:58:45:45:ed:d7: 47:a8:e2:1c:6d:43:a2:69:2a:d2:de:53:9e:eb:46:8e:f0:bb: 54:b6:37:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPMxy41nHUHaEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGUxNWU0NGYtYTQ1Yi00ZmQ4LTk0ZDMtYzY1Y2E0MTVhYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAaW7DPNEI+S+3C2hTkqfIAsAam0mrv7blEC thgPqeEuR+FNjVbRoiZgr/pyY1vdMTelgiRA2jxSMklxq7DLljC0QYp5sVw+LZD5 xjf6Xcek6qVqM1MatIXwK2nuns+RcZFJIxXYPJbPiJd82AWDm8lipgyOZ3MupiZW 6yIPtHBszn0uxlHadKW7H4Owvj1PBic/7hqrA1cqGCHm7/OxophNhAW54fCXv44S sdsI5B6hUWJXd36vNHJta7q9nEZu4+l+A+FmYNPkHJQovQ4ym/ux5OGWb6BItx8f 4axLNxmmYddvNqWe4oqWcXiUT/6Bh3B/BkXjNanMluf2toW0dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKWSNry1ovvyfHzC7OcdimV5wiWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUzOTk3MzItMmI0Mi0z MzVjLWIzZjctYmNkYTRkZDA5Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAl9FFpntNlMd0qEUFOQd4qOZ/JigmcexZt7SKG3Xdi1rbP0sh2Vldr 6oYmQD+aEsjARlZlv7ITBDRXNJD7+xt+9H5IwTUdKzhW1kQQD51mA99cqiWnWXoB UKKLmVyErxqC3G05aeUlf1dMYk8b9WglZWmtiODO2ow9okZ4nBP1A5/thTEass+U Dueq+8+3UGK3fXhncRg6IOsz3JyoYaBjRoF/BW7ZwVpnX0Sok9Zy6E8rv2641oLb yykVxgXhgbinLe2IHHs5GH9af6LBS3tyzJWQGVsKSwfM8OdlP3utBc33EZiyWEVF 7ddHqOIcbUOiaSrS3lOe60aO8LtUtjcd -----END CERTIFICATE-----Generated at Sun May 11 05:25:50 2025 by rpki-client