$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa File: 535be0a1-254e-39da-b317-25ebb54be9fc.roa (raw, json) Hash identifier: MmtNGea8PAiMFwzBNdiBoodpC5ZqEiE2WWeAPYxYANQ= Subject key identifier: 75:F3:B8:99:10:D1:A3:3B:9B:25:14:84:93:27:B4:8B:20:4A:EC:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F852368189A35C57C9A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 397212 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:52:36:81:89:a3:5c:57:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=a48dfa1c-f56f-4641-929d-e8e8d9f6db3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:e8:66:9e:f3:ef:fb:f4:8e:e4:73:92:ff: 13:e0:44:11:e6:42:56:c1:33:4f:06:74:75:28:9e: 42:23:b4:3e:d9:ca:a9:f7:fd:8a:ca:6d:14:08:79: 19:78:4a:0c:cd:05:7d:97:6f:7a:cc:10:c1:69:03: 7c:03:76:c5:eb:fc:0d:19:f7:6b:19:3c:6b:90:9f: e4:1d:77:52:88:cb:98:55:90:e0:6d:e1:39:8c:10: 37:d2:3c:00:c1:00:11:e5:ff:6c:17:5c:58:54:e8: 99:1a:1a:d5:0f:c0:b3:da:24:e0:f0:2e:89:59:d7: c8:e5:7b:f9:52:42:44:3a:d0:c4:87:b4:41:c2:e2: e7:7b:aa:49:d7:d0:e0:b7:d1:69:52:00:47:f7:ce: da:3a:08:7a:f3:e3:40:95:8c:be:e8:ac:ee:34:9a: c0:6a:6a:d9:6b:bd:e9:5b:cd:5c:ed:f1:f2:0f:15: d0:e4:9e:2b:88:79:03:46:57:eb:e9:6a:94:2d:cb: c5:df:e6:e6:ae:ad:f8:15:04:3b:f4:ca:30:72:8d: 86:17:7a:d9:7f:40:59:06:c8:ad:0d:6a:4a:89:7a: 83:dc:1c:56:7b:2b:36:1f:ad:8a:86:d3:ad:40:84: 27:0b:27:f5:e0:19:0f:c9:40:bb:08:f2:62:c9:06: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:B8:99:10:D1:A3:3B:9B:25:14:84:93:27:B4:8B:20:4A:EC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:7a:97:59:c7:5c:1a:3e:3b:c1:80:90:aa:d7:cf:30:72: 3d:d5:6f:05:35:91:5c:00:54:ec:5b:60:a3:1d:32:3a:fd:31: 29:08:85:62:65:ee:be:de:d8:2c:72:d7:a1:4f:ed:2e:26:b9: 2e:d6:21:54:33:80:0d:0a:38:6f:07:fb:52:8e:e7:35:b8:f1: bc:9d:cc:23:67:02:1b:28:2a:57:c3:c5:3c:d6:2e:9c:3c:ed: 10:c4:65:81:f9:ae:51:d5:9e:ed:6e:bd:63:e8:89:3d:d0:b1: f8:e5:65:2e:86:36:ac:57:37:03:f5:cf:f2:63:54:01:db:43: 3e:75:12:b7:f5:8f:35:9a:03:42:5e:e3:53:c3:9e:39:58:d6: 4c:32:72:c8:40:c9:c5:40:7e:f8:c5:24:aa:75:38:f2:fa:26: b1:59:97:3a:a8:0a:5b:c8:2f:0a:92:56:59:27:dd:8b:cb:76: 0a:7a:3c:42:ce:fe:60:8f:ea:c7:73:f8:ac:27:d0:44:28:4f: a4:ff:5e:08:0c:d0:45:c9:3e:61:50:47:1d:cd:28:9c:f2:42: a4:b1:60:91:39:f0:a3:83:46:b4:4c:17:66:6a:c4:2e:c8:51: 6c:03:c4:71:b4:ad:59:dc:2f:b9:71:70:b6:52:90:8c:80:2a: ab:cb:1a:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPhSNoGJo1xXyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YTQ4ZGZhMWMtZjU2Zi00NjQxLTkyOWQtZThlOGQ5ZjZkYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkroZp7z7/v0juRzkv8T4EQR5kJWwTNPBnR1 KJ5CI7Q+2cqp9/2Kym0UCHkZeEoMzQV9l296zBDBaQN8A3bF6/wNGfdrGTxrkJ/k HXdSiMuYVZDgbeE5jBA30jwAwQAR5f9sF1xYVOiZGhrVD8Cz2iTg8C6JWdfI5Xv5 UkJEOtDEh7RBwuLne6pJ19Dgt9FpUgBH987aOgh68+NAlYy+6KzuNJrAamrZa73p W81c7fHyDxXQ5J4riHkDRlfr6WqULcvF3+bmrq34FQQ79Mowco2GF3rZf0BZBsit DWpKiXqD3BxWeys2H62KhtOtQIQnCyf14BkPyUC7CPJiyQaZdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHXzuJkQ0aM7myUUhJMntIsgSuwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM1YmUwYTEtMjU0ZS0z OWRhLWIzMTctMjVlYmI1NGJlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPF3qXWcdcGj47wYCQqtfPMHI91W8FNZFcAFTsW2CjHTI6/TEpCIVi Ze6+3tgsctehT+0uJrku1iFUM4ANCjhvB/tSjuc1uPG8ncwjZwIbKCpXw8U81i6c PO0QxGWB+a5R1Z7tbr1j6Ik90LH45WUuhjasVzcD9c/yY1QB20M+dRK39Y81mgNC XuNTw545WNZMMnLIQMnFQH74xSSqdTjy+iaxWZc6qApbyC8KklZZJ92Ly3YKejxC zv5gj+rHc/isJ9BEKE+k/14IDNBFyT5hUEcdzSic8kKksWCROfCjg0a0TBdmasQu yFFsA8RxtK1Z3C+5cXC2UpCMgCqryxrZ -----END CERTIFICATE-----Generated at Sun May 11 06:10:26 2025 by rpki-client