$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa File: 33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa (raw, json) Hash identifier: Xd7Ca1pDg1o/1YnzEX1dhrBDj2SYiEYCQVk8UODq3QI= Subject key identifier: 3C:88:31:DF:96:02:34:60:5E:84:D0:7D:89:7D:97:01:35:61:E8:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F8DBEAF90F5178AFBB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396594 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:db:ea:f9:0f:51:78:af:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=af5e7608-b8b8-465d-a5aa-386740a42377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:7f:e5:88:6b:50:8d:9e:5a:87:c8:04:28: dd:a0:13:ab:34:41:56:40:c6:4e:54:53:8e:f2:23: e3:e1:f2:62:b7:f0:3e:e5:3c:b5:a0:33:8b:b1:6f: b3:66:0c:8b:79:05:3c:9d:e0:6e:69:72:f3:25:d0: 53:92:92:1f:40:4c:6f:fc:f4:ba:5c:d2:ef:d8:97: 59:57:e0:e4:e2:57:f4:fe:0c:83:e6:d1:61:61:c2: 58:7f:23:fd:0f:c9:56:01:21:77:33:cc:96:01:6c: d0:49:5e:ef:da:05:68:74:df:16:48:c5:a7:9a:b8: 01:ae:e9:f9:81:f7:70:44:f9:5d:ba:f9:50:4f:cd: 66:93:a8:6d:c6:ed:8b:bd:af:ed:a7:4a:37:17:f1: ab:67:88:5c:65:c8:82:2f:8c:6e:e7:90:50:50:4c: a8:93:c5:0e:af:85:40:7e:7c:06:71:1e:8a:1b:b3: 3a:f3:5c:ef:52:e8:5f:ce:c7:fe:00:e5:87:cc:35: da:1d:72:b3:1f:f3:57:44:8a:f4:54:0c:b9:5b:ae: 1e:16:af:1e:cf:5c:d5:90:d3:2e:6e:a5:07:cc:37: b1:22:8a:cb:cb:52:a6:a7:78:47:2c:5c:2a:69:6c: cb:83:21:cb:77:78:aa:e2:31:4e:2b:f6:7d:b2:f4: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:31:DF:96:02:34:60:5E:84:D0:7D:89:7D:97:01:35:61:E8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2a:7f:37:bf:1d:6a:6d:b8:b9:e5:ef:de:b4:62:16:56:f8: e2:39:ae:04:f0:5f:76:88:37:a4:70:cd:01:30:7b:27:8a:15: 0c:43:60:c2:ad:0d:3a:8e:cb:37:2f:2e:43:0c:73:29:e4:a5: 16:9d:e5:d2:0a:45:ba:2a:a4:09:17:88:2c:bc:58:bc:5e:00: 64:f2:54:9e:13:79:e8:cb:ae:24:90:42:d8:8a:f2:db:1d:97: e5:44:45:42:2a:08:85:15:d4:34:14:1e:10:59:47:f6:aa:9e: a0:23:6e:a4:6d:e6:be:c2:27:d5:59:3c:bb:2e:0d:a4:52:a0: 26:fe:93:ae:0e:67:65:74:00:43:1b:34:e5:cb:18:9c:98:c4: e8:5a:bb:3f:3a:7a:6e:67:3c:13:29:2b:09:24:e6:87:a1:fb: b7:fc:74:6a:56:db:8d:82:48:06:22:0e:27:f8:9a:3e:17:68: b3:4d:1f:82:ca:8f:92:72:42:b3:2f:bc:87:11:42:31:f9:c6: 08:90:13:bb:b3:9b:e7:5c:e0:45:53:06:fd:47:6f:f8:e7:b4: f0:c4:7c:f4:ff:54:19:e6:82:db:b5:93:9c:3c:46:47:48:f8: 89:dd:6a:b4:05:30:8b:32:f2:49:30:3e:12:d6:f0:70:bd:fd: f2:ef:c8:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPjb6vkPUXivu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YWY1ZTc2MDgtYjhiOC00NjVkLWE1YWEtMzg2NzQwYTQyMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ9/5YhrUI2eWofIBCjdoBOrNEFWQMZOVFOO 8iPj4fJit/A+5Ty1oDOLsW+zZgyLeQU8neBuaXLzJdBTkpIfQExv/PS6XNLv2JdZ V+Dk4lf0/gyD5tFhYcJYfyP9D8lWASF3M8yWAWzQSV7v2gVodN8WSMWnmrgBrun5 gfdwRPlduvlQT81mk6htxu2Lva/tp0o3F/GrZ4hcZciCL4xu55BQUEyok8UOr4VA fnwGcR6KG7M681zvUuhfzsf+AOWHzDXaHXKzH/NXRIr0VAy5W64eFq8ez1zVkNMu bqUHzDexIorLy1Kmp3hHLFwqaWzLgyHLd3iq4jFOK/Z9svQqNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDyIMd+WAjRgXoTQfYl9lwE1YejMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNjNTJkZGEtY2NjOS0z Y2IxLThjMTktODNjZWEwOWVlZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsKn83vx1qbbi55e/etGIWVvjiOa4E8F92iDekcM0BMHsnihUMQ2DC rQ06jss3Ly5DDHMp5KUWneXSCkW6KqQJF4gsvFi8XgBk8lSeE3noy64kkELYivLb HZflREVCKgiFFdQ0FB4QWUf2qp6gI26kbea+wifVWTy7Lg2kUqAm/pOuDmdldABD GzTlyxicmMToWrs/OnpuZzwTKSsJJOaHofu3/HRqVtuNgkgGIg4n+Jo+F2izTR+C yo+SckKzL7yHEUIx+cYIkBO7s5vnXOBFUwb9R2/457TwxHz0/1QZ5oLbtZOcPEZH SPiJ3Wq0BTCLMvJJMD4S1vBwvf3y78hG -----END CERTIFICATE-----Generated at Sun May 11 05:32:16 2025 by rpki-client