$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa File: 3af75ab3-84a4-3e81-96c9-79648513a39c.roa (raw, json) Hash identifier: 40/Rk198jEaFjTUNcI0KnZtTqY8g0xb7M3gboItH5bA= Subject key identifier: FC:3F:A9:15:BC:69:EF:79:DE:51:9F:B4:60:66:E1:D8:0D:BB:80:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F238FFB0462C653D7F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396584 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:38:ff:b0:46:2c:65:3d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=af2da307-272c-4dee-9321-e6269872a435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:b7:77:18:a4:ff:ef:4f:b8:61:29:45:be: 26:66:7a:06:6a:e7:d8:bb:9d:4c:71:4b:cb:b6:09: f2:a1:09:25:e1:e3:4d:c3:18:77:2d:c6:e3:26:91: 8c:ee:52:6b:24:d0:f2:7b:4f:e3:07:16:b8:9c:06: 96:3e:6d:81:3f:91:04:f9:68:15:b2:dc:c9:4b:a0: 18:23:f5:4f:13:07:b3:26:c3:b7:57:51:2f:57:c3: a0:6d:cf:40:6e:df:05:35:60:65:64:b0:87:a7:39: db:2d:9b:46:de:21:c6:92:41:c8:d0:ed:ef:e4:e1: ab:ea:f1:62:ff:8d:6f:f9:02:be:c0:59:b7:ac:6c: 5b:4d:ba:db:01:1a:c1:15:f8:19:67:33:d0:6b:0d: b1:bf:12:b5:87:47:23:8f:cc:1c:74:10:7f:99:f8: be:ee:bd:a2:45:0d:a9:9b:39:bb:04:fb:61:b1:87: ba:8e:bc:e7:f1:c4:49:31:33:7b:18:cc:c2:3e:86: 00:3e:09:86:9b:3d:43:d1:12:dd:aa:36:ef:fd:0d: b2:f4:3f:38:2a:fa:27:6c:84:a7:e3:9c:60:a1:9c: 65:99:2d:8d:6d:b1:43:1d:0d:fa:02:0e:8e:7a:0a: d7:9f:47:24:9b:b9:7d:15:ff:e6:da:c8:86:e6:57: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3F:A9:15:BC:69:EF:79:DE:51:9F:B4:60:66:E1:D8:0D:BB:80:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:67:f9:2e:a8:6c:5d:89:26:5c:83:04:89:2a:f3:17:75:aa: 11:e8:c5:d9:85:a6:f9:db:b0:b1:2c:4e:e5:c5:78:20:51:2d: 68:b3:82:66:0f:e7:a0:a8:75:23:3f:08:b6:a0:f1:3d:0b:3d: 4a:15:1b:51:41:b3:85:a1:45:14:1c:8e:16:84:e2:1b:a7:38: 3e:f3:87:24:45:09:db:45:7c:dd:f7:bd:0a:f2:11:43:86:83: bc:e6:e0:23:c9:27:20:14:cc:97:4b:66:cc:14:42:3b:fa:be: a3:fe:ec:da:5c:b2:c6:29:4a:c0:02:b7:b5:ea:5b:88:c7:7e: 01:f4:28:37:87:01:38:09:43:77:34:0c:d8:14:b1:5d:d1:ef: 90:61:49:59:6f:82:2c:58:cc:70:46:eb:ee:ef:39:59:45:8d: 98:67:df:43:1d:65:11:f8:39:eb:b0:b5:50:9d:4f:51:5f:44: 4b:e4:13:e4:37:38:0c:49:78:f1:c5:c2:ab:fa:b6:77:2b:ab: fe:9e:52:07:36:c5:90:5b:1a:c5:e6:78:cb:07:8a:c0:36:71: b8:35:7d:22:ff:c4:ae:21:47:de:59:b6:79:2f:89:b2:1a:71: 14:22:d6:60:60:6a:37:bf:d9:c2:51:a7:db:6d:6f:b3:da:75: ec:46:28:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPI4/7BGLGU9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YWYyZGEzMDctMjcyYy00ZGVlLTkzMjEtZTYyNjk4NzJhNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje23dxik/+9PuGEpRb4mZnoGaufYu51McUvL tgnyoQkl4eNNwxh3LcbjJpGM7lJrJNDye0/jBxa4nAaWPm2BP5EE+WgVstzJS6AY I/VPEwezJsO3V1EvV8Ogbc9Abt8FNWBlZLCHpznbLZtG3iHGkkHI0O3v5OGr6vFi /41v+QK+wFm3rGxbTbrbARrBFfgZZzPQaw2xvxK1h0cjj8wcdBB/mfi+7r2iRQ2p mzm7BPthsYe6jrzn8cRJMTN7GMzCPoYAPgmGmz1D0RLdqjbv/Q2y9D84KvonbISn 45xgoZxlmS2NbbFDHQ36Ag6OegrXn0ckm7l9Ff/m2siG5lcU+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPw/qRW8ae953lGftGBm4dgNu4BYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FmNzVhYjMtODRhNC0z ZTgxLTk2YzktNzk2NDg1MTNhMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/Z/kuqGxdiSZcgwSJKvMXdaoR6MXZhab527CxLE7lxXggUS1os4Jm D+egqHUjPwi2oPE9Cz1KFRtRQbOFoUUUHI4WhOIbpzg+84ckRQnbRXzd970K8hFD hoO85uAjyScgFMyXS2bMFEI7+r6j/uzaXLLGKUrAAre16luIx34B9Cg3hwE4CUN3 NAzYFLFd0e+QYUlZb4IsWMxwRuvu7zlZRY2YZ99DHWUR+DnrsLVQnU9RX0RL5BPk NzgMSXjxxcKr+rZ3K6v+nlIHNsWQWxrF5njLB4rANnG4NX0i/8SuIUfeWbZ5L4my GnEUItZgYGo3v9nCUafbbW+z2nXsRigi -----END CERTIFICATE-----Generated at Sun May 11 08:40:43 2025 by rpki-client