$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa File: 33018004-ef85-3ba0-a2dd-2ab891abc96e.roa (raw, json) Hash identifier: KkcCOdzypKe7NjxacN7a7yqr6PQqVLgUptfGgvpu+Rc= Subject key identifier: 4D:9D:F6:82:FE:95:12:26:15:81:CF:FD:74:BA:19:AB:E0:90:E7:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F5BE7EC3D8D40884B400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396572 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f5:be:7e:c3:d8:d4:08:84:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=c250daac-fff3-48de-9805-a7c541129587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:c4:0a:f5:47:20:5f:b1:e0:4a:a5:c5:5f: 70:d3:8e:f4:29:9e:4e:6a:30:22:8d:9d:ff:70:09: 0a:e5:21:3f:2a:d7:cb:b8:d8:70:cb:13:d4:4a:df: 75:eb:6f:a6:1c:dc:9b:6d:f5:32:5e:58:db:01:ab: 5f:f9:7f:11:b8:3e:3f:cd:c5:ae:b4:59:1a:cd:be: 46:3f:5c:5c:82:2b:41:06:58:54:a3:54:54:22:f3: e7:f1:24:93:5d:11:bf:7b:36:77:a0:89:37:e3:f3: 7c:12:ee:f9:34:91:1a:8c:ab:95:bb:64:51:24:af: 53:32:af:b1:5d:6f:d7:ab:6a:f9:0c:89:6b:8e:2f: be:13:29:29:6d:bb:34:85:13:6e:c2:aa:b4:ed:93: f1:35:83:ac:be:47:eb:a5:64:05:bf:49:8b:fe:d1: 30:e8:bf:74:96:bf:8b:23:2e:0a:20:8e:63:90:9b: 17:52:ea:c3:d8:3e:c9:fe:7d:8f:b7:d3:3c:7c:82: 32:4d:f0:9a:54:cb:cb:28:df:8f:e5:3d:d6:19:56: ff:f3:70:d7:31:80:5e:27:58:e7:f3:4c:95:1f:1b: dd:4f:09:9d:e6:9b:78:4c:ea:70:9e:5e:31:f5:90: 4c:20:4d:7d:fe:21:3f:4c:54:5a:b4:f8:58:b2:81: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:F6:82:FE:95:12:26:15:81:CF:FD:74:BA:19:AB:E0:90:E7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bd:f6:62:36:13:db:9f:56:80:95:37:99:16:af:fd:a6:fe: 52:3b:a5:7f:6f:13:01:60:65:d9:e3:41:62:8a:a5:ce:2a:92: 6a:38:47:d8:63:1f:77:34:a4:b2:76:3f:67:44:85:57:bc:d6: b7:05:ab:79:0e:c2:a8:31:02:cd:39:71:fd:c8:bd:07:a6:33: 5b:a1:a0:c5:b2:ee:55:ba:41:3d:3c:e7:72:64:59:87:17:b1: 0f:d2:61:2c:4f:b4:a5:6f:6c:26:f1:d9:eb:47:a7:91:e4:f7: ea:b2:73:03:97:6a:c7:ff:ad:4a:0e:9e:8c:5a:7c:19:b3:e4: 1f:63:05:b9:e2:4a:46:40:e1:02:ef:2a:77:d5:89:08:7c:11: b7:99:9d:f5:75:a0:43:63:2a:f6:91:74:95:78:ab:a3:81:e4: bf:c7:35:88:0c:b5:d6:f0:e8:ae:d9:05:6e:73:6a:12:03:98: 2c:39:f1:71:29:4b:66:10:64:4f:91:0b:bc:07:dd:cd:8f:48: d9:87:4e:91:f7:00:70:d0:65:7b:9c:67:f2:4a:52:07:3f:7d: af:ce:c5:4a:ed:67:b3:ee:ce:d1:cc:48:75:6d:30:66:28:12: e0:c8:1d:a9:b5:92:b9:43:f2:11:a4:24:8f:ad:52:a2:9a:ab: 15:3e:72:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPW+fsPY1AiEtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YzI1MGRhYWMtZmZmMy00OGRlLTk4MDUtYTdjNTQxMTI5NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixzECvVHIF+x4EqlxV9w0470KZ5OajAijZ3/ cAkK5SE/KtfLuNhwyxPUSt9162+mHNybbfUyXljbAatf+X8RuD4/zcWutFkazb5G P1xcgitBBlhUo1RUIvPn8SSTXRG/ezZ3oIk34/N8Eu75NJEajKuVu2RRJK9TMq+x XW/Xq2r5DIlrji++Eykpbbs0hRNuwqq07ZPxNYOsvkfrpWQFv0mL/tEw6L90lr+L Iy4KII5jkJsXUurD2D7J/n2Pt9M8fIIyTfCaVMvLKN+P5T3WGVb/83DXMYBeJ1jn 80yVHxvdTwmd5pt4TOpwnl4x9ZBMIE19/iE/TFRatPhYsoGciwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE2d9oL+lRImFYHP/XS6GavgkOecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzMwMTgwMDQtZWY4NS0z YmEwLWEyZGQtMmFiODkxYWJjOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQvfZiNhPbn1aAlTeZFq/9pv5SO6V/bxMBYGXZ40FiiqXOKpJqOEfY Yx93NKSydj9nRIVXvNa3Bat5DsKoMQLNOXH9yL0HpjNboaDFsu5VukE9POdyZFmH F7EP0mEsT7Slb2wm8dnrR6eR5PfqsnMDl2rH/61KDp6MWnwZs+QfYwW54kpGQOEC 7yp31YkIfBG3mZ31daBDYyr2kXSVeKujgeS/xzWIDLXW8Oiu2QVuc2oSA5gsOfFx KUtmEGRPkQu8B93Nj0jZh06R9wBw0GV7nGfySlIHP32vzsVK7Wez7s7RzEh1bTBm KBLgyB2ptZK5Q/IRpCSPrVKimqsVPnJA -----END CERTIFICATE-----Generated at Sun May 11 08:39:45 2025 by rpki-client