$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50f3e518-e7d1-3da7-a2ff-f85b0982b649.roa File: 50f3e518-e7d1-3da7-a2ff-f85b0982b649.roa (raw, json) Hash identifier: Rgzc1TvzNVKBhAevdH4C4XhUFGJ9Ewx/ZQONEw54Ufg= Subject key identifier: F8:E6:4B:58:92:64:C5:F3:9E:E9:56:F3:9E:41:FC:15:04:AF:B8:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F74210D774EE6714C2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50f3e518-e7d1-3da7-a2ff-f85b0982b649.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 397207 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:42:10:d7:74:ee:67:14:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=3ed873b7-cbf3-4091-bcd9-117516a13d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:8c:d1:87:8c:f4:2b:c9:8a:5a:b1:0f:8e: af:38:c0:04:0c:ac:38:50:0d:f1:d4:1b:74:79:a8: a7:0c:d4:4b:e1:07:0c:0e:60:58:e1:9d:b7:a3:ad: ae:ef:e0:53:a1:a1:bf:01:df:57:61:8c:fd:a1:d6: 08:65:cb:74:20:54:cd:6a:27:fb:a8:e8:a8:a3:69: 65:f8:83:bf:79:c7:12:1d:4d:dc:09:99:dc:53:af: 26:ed:c8:57:aa:c3:a6:05:1a:57:21:42:6e:7a:bf: 60:ff:20:6a:91:c1:59:72:45:03:a5:02:b2:f7:79: d7:a5:ea:12:19:3d:a0:7d:73:b9:16:9b:4d:e2:86: b2:02:ae:89:2c:19:dc:4d:a2:c0:74:a0:64:ca:06: 5f:ae:29:c1:e4:98:8b:82:86:c3:38:57:6d:a3:b8: f8:89:6c:c7:a2:12:18:a3:8f:62:9e:d5:29:29:04: 6b:aa:2f:ab:1c:68:e6:6a:eb:c4:dc:09:dc:6b:87: 65:86:f8:fa:89:2b:5d:7c:6a:18:81:f8:4a:80:84: 12:40:a8:6c:bf:06:cb:12:00:a0:d7:b1:65:3f:04: 7e:d7:66:79:d5:c2:4d:4a:e2:34:36:97:bf:1c:62: 3c:52:ad:8a:a4:2e:d9:27:7c:9d:da:2b:86:10:15: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E6:4B:58:92:64:C5:F3:9E:E9:56:F3:9E:41:FC:15:04:AF:B8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50f3e518-e7d1-3da7-a2ff-f85b0982b649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3a:21:22:a7:ad:0a:3c:9c:4c:4b:16:4f:71:bb:11:9b:f0: 10:4c:62:1b:13:52:43:96:dc:11:56:79:9b:a5:ac:ec:50:b8: 8d:f2:fe:e8:65:4c:ad:ab:d6:96:2f:78:81:05:30:7b:37:2e: e7:47:b5:f4:0e:d7:9b:df:8d:99:20:9a:03:92:4e:1b:6e:62: 47:6e:a7:26:50:8c:8b:90:3f:76:90:17:d9:c8:12:28:30:ad: 6f:c5:76:e7:93:c8:b1:55:0a:6b:2e:19:3d:9b:4a:1c:6b:d4: 18:77:a3:18:73:f9:29:84:54:c6:6c:72:1c:37:b2:7f:47:b6: 13:72:17:80:a5:75:56:28:e0:ce:31:28:7f:94:10:24:ad:a7: 4b:ba:59:d3:b9:58:16:8b:b8:e1:ef:1c:87:22:30:56:19:a8: 69:e5:c9:d0:1a:b5:8b:48:e8:37:8d:c6:d4:11:99:c4:59:5d: 76:9f:65:f5:d6:31:6d:38:94:4d:d4:34:33:13:68:ba:53:ac: 84:49:d6:b4:64:e4:c5:17:95:fa:64:7a:30:8c:db:48:5a:b6: 35:72:9f:c7:e4:03:e6:c1:72:2f:5b:4e:a0:42:62:b2:02:e3: d3:85:94:24:4a:3d:5a:6b:b6:14:14:13:db:5c:97:54:a2:99: 3a:bd:c0:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPdCENd07mcUwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk M2VkODczYjctY2JmMy00MDkxLWJjZDktMTE3NTE2YTEzZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25GM0YeM9CvJilqxD46vOMAEDKw4UA3x1Bt0 eainDNRL4QcMDmBY4Z23o62u7+BToaG/Ad9XYYz9odYIZct0IFTNaif7qOioo2ll +IO/eccSHU3cCZncU68m7chXqsOmBRpXIUJuer9g/yBqkcFZckUDpQKy93nXpeoS GT2gfXO5FptN4oayAq6JLBncTaLAdKBkygZfrinB5JiLgobDOFdto7j4iWzHohIY o49intUpKQRrqi+rHGjmauvE3Anca4dlhvj6iStdfGoYgfhKgIQSQKhsvwbLEgCg 17FlPwR+12Z51cJNSuI0Npe/HGI8Uq2KpC7ZJ3yd2iuGEBWHgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPjmS1iSZMXznulW855B/BUEr7hYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTBmM2U1MTgtZTdkMS0z ZGE3LWEyZmYtZjg1YjA5ODJiNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkOiEip60KPJxMSxZPcbsRm/AQTGIbE1JDltwRVnmbpazsULiN8v7o ZUytq9aWL3iBBTB7Ny7nR7X0Dteb342ZIJoDkk4bbmJHbqcmUIyLkD92kBfZyBIo MK1vxXbnk8ixVQprLhk9m0oca9QYd6MYc/kphFTGbHIcN7J/R7YTcheApXVWKODO MSh/lBAkradLulnTuVgWi7jh7xyHIjBWGahp5cnQGrWLSOg3jcbUEZnEWV12n2X1 1jFtOJRN1DQzE2i6U6yESda0ZOTFF5X6ZHowjNtIWrY1cp/H5APmwXIvW06gQmKy AuPThZQkSj1aa7YUFBPbXJdUopk6vcB5 -----END CERTIFICATE-----Generated at Sun May 11 05:25:49 2025 by rpki-client