$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa File: 40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa (raw, json) Hash identifier: DWIVhuS2WDpn1SvUOjbnLFqL9cJwHWjbe4XRJFD564M= Subject key identifier: 51:FD:11:C9:03:74:B6:C8:90:DE:FE:69:8C:C6:DF:5E:E4:95:1D:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F6E92CAD5E38D4824B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 20431 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:e9:2c:ad:5e:38:d4:82:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=fbb6680c-db1c-4f6b-9adb-7591258942fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:74:b6:79:6d:88:87:70:60:60:ec:17:21: c8:3f:7c:b3:87:d9:ca:53:16:c4:60:f6:63:62:63: 0d:f6:a0:ba:a1:6e:16:4a:70:16:5a:b0:f0:f7:2d: d3:39:88:8e:50:47:24:1f:89:04:d0:d0:5a:70:70: 91:16:99:1a:c4:ab:e1:c8:b5:b3:83:46:87:69:3f: 57:36:e6:d9:e6:77:69:72:0d:ff:85:0d:ca:37:1e: 67:99:ab:83:26:ad:79:f8:c9:c2:a3:95:e1:3c:46: 47:a9:13:a1:b2:b3:d5:5e:73:ac:bb:67:61:e8:b8: b2:aa:16:e9:70:93:0c:84:6e:e2:cd:a2:ee:7a:42: 3f:c6:81:89:3f:fe:7e:33:9b:2e:fc:bf:c5:7e:e6: 04:2a:d3:52:df:45:9d:cf:53:5b:ae:58:3d:a4:57: 19:f5:30:27:51:fb:e8:64:66:be:d2:09:4c:2a:79: 89:8c:b8:42:5b:52:cf:2b:b9:3b:c1:16:7d:71:5d: 3a:b2:2a:8e:25:b5:6f:56:3e:48:69:22:97:5b:40: 16:71:55:3b:77:47:56:2e:e4:21:8c:9b:c0:9e:49: 6a:0b:c2:5e:a1:13:34:4d:c6:ed:3b:2e:83:77:51: dc:f8:85:37:a4:3b:1b:be:4c:d8:72:4f:35:41:53: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FD:11:C9:03:74:B6:C8:90:DE:FE:69:8C:C6:DF:5E:E4:95:1D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:37:e9:65:60:5e:be:af:bf:0c:03:93:6a:9f:13:ac:3d:16: 29:c0:86:ab:00:9f:95:34:f4:31:0b:8a:82:95:4c:8a:10:7b: 6d:23:5a:39:a5:11:44:06:a0:15:23:57:44:cd:c7:d9:34:df: ea:86:e0:72:fc:d9:59:fa:10:8c:15:c1:49:1e:1a:18:06:4c: 65:d2:f8:0b:5e:05:89:0e:7d:70:65:65:de:8e:ff:e6:7f:db: 9d:69:c9:c6:7a:5f:b9:38:06:63:e8:17:0b:48:a2:ee:46:c7: 45:c9:44:52:56:d0:f3:96:71:e7:a4:9e:dd:ee:4a:10:9b:22: bf:81:bf:d1:0a:08:a9:b0:c5:a1:d3:cb:64:3f:3f:17:02:4e: 54:19:2a:7f:56:b7:7a:31:39:7d:6f:5b:c6:28:a7:a6:e3:59: 8c:02:46:28:0a:9e:e7:ef:37:d2:ea:2f:0d:3d:78:b5:9a:1f: 88:64:53:3d:63:b3:10:33:b6:61:14:05:47:01:15:0a:27:dc: 4b:99:28:48:61:f7:11:2d:c4:53:08:db:5c:9d:31:ea:0b:ad: ed:6e:46:d9:34:49:ff:9b:ca:bf:58:48:90:ed:4e:05:88:e8: d2:1c:fc:fa:66:9d:9b:48:62:21:2f:1d:8c:58:73:66:8b:b8: 90:bc:9e:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPbpLK1eONSCS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmJiNjY4MGMtZGIxYy00ZjZiLTlhZGItNzU5MTI1ODk0MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKh0tnltiIdwYGDsFyHIP3yzh9nKUxbEYPZj YmMN9qC6oW4WSnAWWrDw9y3TOYiOUEckH4kE0NBacHCRFpkaxKvhyLWzg0aHaT9X NubZ5ndpcg3/hQ3KNx5nmauDJq15+MnCo5XhPEZHqROhsrPVXnOsu2dh6Liyqhbp cJMMhG7izaLuekI/xoGJP/5+M5su/L/FfuYEKtNS30Wdz1Nbrlg9pFcZ9TAnUfvo ZGa+0glMKnmJjLhCW1LPK7k7wRZ9cV06siqOJbVvVj5IaSKXW0AWcVU7d0dWLuQh jJvAnklqC8JeoRM0TcbtOy6Dd1Hc+IU3pDsbvkzYck81QVNNmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFH9EckDdLbIkN7+aYzG317klR3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYjdhMWUtODA2My0z YWQ2LWFjNzMtNDUwYjRhYTQyYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDN+llYF6+r78MA5NqnxOsPRYpwIarAJ+VNPQxC4qClUyKEHttI1o5 pRFEBqAVI1dEzcfZNN/qhuBy/NlZ+hCMFcFJHhoYBkxl0vgLXgWJDn1wZWXejv/m f9udacnGel+5OAZj6BcLSKLuRsdFyURSVtDzlnHnpJ7d7koQmyK/gb/RCgipsMWh 08tkPz8XAk5UGSp/Vrd6MTl9b1vGKKem41mMAkYoCp7n7zfS6i8NPXi1mh+IZFM9 Y7MQM7ZhFAVHARUKJ9xLmShIYfcRLcRTCNtcnTHqC63tbkbZNEn/m8q/WEiQ7U4F iOjSHPz6Zp2bSGIhLx2MWHNmi7iQvJ6b -----END CERTIFICATE-----Generated at Mon May 12 02:42:02 2025 by rpki-client