$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/650c4a50-d469-315a-bc14-feaab108cd48.roa File: 650c4a50-d469-315a-bc14-feaab108cd48.roa (raw, json) Hash identifier: xbm5uMpQ47LCKc/CqPwkhPV4v/VcCk8c9DZDXmT/M00= Subject key identifier: 3C:E0:82:5D:54:69:42:5C:A1:AB:30:21:00:6A:0E:E8:42:AF:29:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F8253509719FB4F97838 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/650c4a50-d469-315a-bc14-feaab108cd48.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36625 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:25:35:09:71:9f:b4:f9:78:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=ba20981c-f8df-4893-a4c2-b3889ab2d6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:79:37:47:a6:f6:b4:31:d7:92:ce:1b:b3: 62:c5:97:6f:df:d4:63:7e:33:b4:bd:cb:72:b9:29: 6d:52:f9:a1:3a:7f:82:e9:30:e6:f3:62:96:43:02: 9d:b8:71:18:13:6c:b1:23:cf:2e:ac:03:6f:85:15: 85:b0:57:79:13:51:85:b3:fd:8d:95:b9:7a:a7:3c: 86:a1:33:6a:31:a4:30:0b:3a:b0:49:ea:66:3b:cf: ce:ff:e5:0e:a3:c6:b6:83:59:ad:9c:aa:df:4a:70: 2f:a5:1e:01:06:08:96:ab:64:80:a9:98:c7:a3:0c: f5:ad:4d:9a:06:48:20:6c:94:00:28:73:58:e6:47: 4c:40:69:d5:e4:45:51:5f:b0:c9:da:a5:2e:b4:66: fc:b1:2c:21:70:ea:62:65:90:be:92:fe:86:d0:2d: 12:f8:65:10:ff:a9:ee:7e:08:c1:d9:d3:8c:48:49: 2e:7b:3b:19:7b:00:9e:be:12:7d:d2:08:3a:b8:80: 72:2f:ac:fa:c7:71:e0:2b:05:31:04:ab:a6:a3:66: ec:91:f5:f5:c6:aa:71:d1:8b:8b:c0:3e:8d:32:79: f1:71:be:02:f0:07:27:79:43:12:07:44:20:67:0e: 25:bc:d1:c0:12:5d:5d:09:79:ae:40:ad:6f:86:c5: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:82:5D:54:69:42:5C:A1:AB:30:21:00:6A:0E:E8:42:AF:29:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/650c4a50-d469-315a-bc14-feaab108cd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c1:2e:07:bb:c5:1b:20:6e:0b:9c:1b:43:da:5d:2c:c1:9f: 41:08:6b:7d:46:45:8a:50:da:c8:5b:8b:6f:80:b7:56:af:49: f3:c8:82:f1:7f:8a:0c:55:9c:0f:3e:ea:64:3e:0c:71:98:e8: ae:54:23:94:c5:ed:5e:3b:af:d5:41:60:aa:93:74:fd:80:87: 43:6e:a2:96:d2:8e:67:c5:c6:3c:91:a3:3f:e7:a0:34:27:a4: 37:92:78:fe:77:91:1f:f8:e3:21:02:de:eb:97:15:50:22:eb: 38:e2:80:bd:59:2d:f5:25:f0:88:7e:e1:99:cc:28:c0:99:42: 6b:29:6b:8a:36:c0:d0:6f:a9:f7:1a:9c:34:cf:65:c2:b3:e5: f6:5f:23:81:16:ed:ed:4e:78:ad:54:6f:d5:f3:d1:60:22:91: 46:ea:65:0a:2a:7e:b9:70:4b:88:b9:38:12:9f:e1:fe:bd:c8: 71:6d:50:97:64:22:77:3a:ac:6e:f3:27:2a:6d:15:10:79:dd: 01:c6:83:78:1d:73:cc:18:b9:61:cf:b9:de:24:93:a7:2f:36: 89:c1:9b:b0:a6:21:c2:a8:a1:9c:5b:a3:6f:da:37:97:51:65: ba:3c:9c:47:17:f5:df:0f:68:d9:3e:36:2a:f2:55:67:0e:4e: b4:a4:c6:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPglNQlxn7T5eDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YmEyMDk4MWMtZjhkZi00ODkzLWE0YzItYjM4ODlhYjJkNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sh5N0em9rQx15LOG7NixZdv39RjfjO0vcty uSltUvmhOn+C6TDm82KWQwKduHEYE2yxI88urANvhRWFsFd5E1GFs/2Nlbl6pzyG oTNqMaQwCzqwSepmO8/O/+UOo8a2g1mtnKrfSnAvpR4BBgiWq2SAqZjHowz1rU2a BkggbJQAKHNY5kdMQGnV5EVRX7DJ2qUutGb8sSwhcOpiZZC+kv6G0C0S+GUQ/6nu fgjB2dOMSEkuezsZewCevhJ90gg6uIByL6z6x3HgKwUxBKumo2bskfX1xqpx0YuL wD6NMnnxcb4C8AcneUMSB0QgZw4lvNHAEl1dCXmuQK1vhsXsjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDzggl1UaUJcoaswIQBqDuhCrymWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjUwYzRhNTAtZDQ2OS0z MTVhLWJjMTQtZmVhYWIxMDhjZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUwS4Hu8UbIG4LnBtD2l0swZ9BCGt9RkWKUNrIW4tvgLdWr0nzyILx f4oMVZwPPupkPgxxmOiuVCOUxe1eO6/VQWCqk3T9gIdDbqKW0o5nxcY8kaM/56A0 J6Q3knj+d5Ef+OMhAt7rlxVQIus44oC9WS31JfCIfuGZzCjAmUJrKWuKNsDQb6n3 Gpw0z2XCs+X2XyOBFu3tTnitVG/V89FgIpFG6mUKKn65cEuIuTgSn+H+vchxbVCX ZCJ3Oqxu8ycqbRUQed0BxoN4HXPMGLlhz7neJJOnLzaJwZuwpiHCqKGcW6Nv2jeX UWW6PJxHF/XfD2jZPjYq8lVnDk60pMbp -----END CERTIFICATE-----Generated at Sun May 11 06:47:59 2025 by rpki-client