$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa File: 3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa (raw, json) Hash identifier: qApfYlc5KJNe94vLyTzWqkwKx6VPrfBSZ+B5YSi3F6s= Subject key identifier: 78:AA:CB:76:E2:08:8A:60:E7:A3:88:64:8C:95:B4:85:F0:1B:A3:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F19C54A645E443C87880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36630 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f1:9c:54:a6:45:e4:43:c8:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=fa88a19d-e3d9-4145-8b7e-d5c2f092105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:75:45:3c:1d:f6:a4:eb:71:c1:5c:ee:db: ec:29:1b:e1:01:27:89:c8:60:c3:1a:ce:71:e5:33: a7:e5:07:1e:4d:f3:1d:90:80:95:61:8a:ea:94:fd: 6d:95:71:ae:bf:5b:89:01:86:fd:58:4b:f3:4c:61: 90:72:53:c9:37:2f:2c:a2:b1:58:0e:5b:23:b6:b9: 9c:03:0d:e6:54:3a:32:00:b4:39:ba:93:42:4f:ac: ed:3e:7a:43:97:fc:9c:68:8e:0b:93:cc:22:4f:d3: 05:3d:8b:05:c5:bb:0c:f3:63:84:03:f2:5c:b2:7a: b3:26:49:e6:cb:cd:3e:84:b6:e4:9f:3b:a9:eb:e7: f4:f7:6d:c7:f0:f8:6f:22:d9:eb:32:e7:0f:65:8a: fe:03:79:2d:cf:d6:17:4a:cc:48:44:75:14:fd:08: a0:90:c9:ad:14:4c:46:9f:31:5b:b6:51:01:32:13: 4e:ab:e4:02:fa:f2:a9:a9:b9:c0:34:d0:2e:20:28: e3:07:e6:32:53:5c:c9:61:e5:0a:71:0b:21:94:17: 9f:d5:8c:0a:3b:6d:fb:ec:b1:0d:2b:6f:c1:71:c2: ae:bc:61:65:d5:7d:ef:e0:d2:ea:c4:49:a6:5f:02: 62:32:96:40:3e:bc:3c:9f:28:7b:81:fd:be:86:e5: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AA:CB:76:E2:08:8A:60:E7:A3:88:64:8C:95:B4:85:F0:1B:A3:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:11:7c:8f:05:12:c5:ba:51:ba:2b:6f:45:c1:5d:da:9a:39: ea:c4:d1:d9:42:16:fe:0a:4a:92:08:34:a6:bb:25:08:f2:00: 98:29:a6:4f:ca:36:64:ac:56:d1:c2:6b:81:23:4b:15:1a:ec: 50:33:b0:3d:17:67:55:e5:6e:94:79:a7:7b:b0:0d:f6:89:a2: 43:ac:40:09:2c:59:98:86:2a:dc:88:82:04:eb:11:fb:79:77: 4f:5d:26:66:20:bb:1b:f1:d9:4f:b3:c0:46:21:cc:ce:45:94: 86:49:76:ac:6d:44:3b:ae:bb:80:e0:31:a3:a4:b4:0f:49:d8: aa:9e:74:9f:cc:41:67:16:02:a6:dd:95:67:6e:29:49:4d:99: af:33:3e:1f:b3:fd:cd:63:20:85:e3:67:00:84:48:0d:ae:00: 7d:d7:3c:ef:40:5b:80:89:18:fc:7b:fa:89:50:d5:84:6c:97: e6:cd:e7:51:51:c7:5d:d6:03:04:7f:17:6b:6a:e4:64:28:1f: 92:75:e9:c5:ea:c6:8c:26:3d:99:20:86:a8:69:3c:9f:2f:9e: a9:d3:bf:8f:e3:54:59:50:ed:5d:dc:58:f0:bf:9b:f9:63:bd: d9:4b:8f:d5:86:a3:ed:91:9f:f2:d9:f8:56:76:28:f9:71:d7: e3:2b:7f:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPGcVKZF5EPIeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmE4OGExOWQtZTNkOS00MTQ1LThiN2UtZDVjMmYwOTIxMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOl1RTwd9qTrccFc7tvsKRvhASeJyGDDGs5x 5TOn5QceTfMdkICVYYrqlP1tlXGuv1uJAYb9WEvzTGGQclPJNy8sorFYDlsjtrmc Aw3mVDoyALQ5upNCT6ztPnpDl/ycaI4Lk8wiT9MFPYsFxbsM82OEA/JcsnqzJknm y80+hLbknzup6+f0923H8PhvItnrMucPZYr+A3ktz9YXSsxIRHUU/QigkMmtFExG nzFbtlEBMhNOq+QC+vKpqbnANNAuICjjB+YyU1zJYeUKcQshlBef1YwKO2377LEN K2/BccKuvGFl1X3v4NLqxEmmXwJiMpZAPrw8nyh7gf2+huXHWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHiqy3biCIpg56OIZIyVtIXwG6NwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EzM2I0OGYtZWIxZC0z Y2U5LTk3NTItNmQ3NjU2MWU5MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKEXyPBRLFulG6K29FwV3amjnqxNHZQhb+CkqSCDSmuyUI8gCYKaZP yjZkrFbRwmuBI0sVGuxQM7A9F2dV5W6Uead7sA32iaJDrEAJLFmYhirciIIE6xH7 eXdPXSZmILsb8dlPs8BGIczORZSGSXasbUQ7rruA4DGjpLQPSdiqnnSfzEFnFgKm 3ZVnbilJTZmvMz4fs/3NYyCF42cAhEgNrgB91zzvQFuAiRj8e/qJUNWEbJfmzedR Ucdd1gMEfxdrauRkKB+SdenF6saMJj2ZIIaoaTyfL56p07+P41RZUO1d3Fjwv5v5 Y73ZS4/VhqPtkZ/y2fhWdij5cdfjK398 -----END CERTIFICATE-----Generated at Sun May 11 05:36:22 2025 by rpki-client