$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa File: 6f50020d-3748-3042-8c37-1edde859a49e.roa (raw, json) Hash identifier: XzOpZbmE/p4EzxX9LFWYN9COKnj9ex9M9mJ4K8LKb/I= Subject key identifier: 6E:1C:BD:E8:7E:59:56:77:D3:F5:3B:AE:DA:38:D6:E1:23:E3:04:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F458AD932809B4560CC8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396604 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f4:58:ad:93:28:09:b4:56:0c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=72b08fb7-ebdf-42cc-a43f-8582f6571042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:56:ba:78:f7:93:3b:ce:c1:a2:99:7e:89: f2:2d:b4:c1:68:ce:3c:36:12:16:b7:f6:aa:6d:48: b0:32:f2:00:68:d1:9c:a2:b2:5f:82:bb:d8:23:84: 96:8f:ba:4d:54:1d:f3:51:52:0d:1d:39:2b:1a:ea: a6:c6:51:5b:1a:c9:b2:18:eb:e1:ab:00:13:d1:7f: 17:e5:e4:e2:10:8e:2f:70:dd:b4:03:20:b0:aa:2c: d3:a2:f7:30:72:18:00:a0:9c:34:bc:46:8d:aa:1f: f4:65:14:1d:a6:fa:73:10:53:50:29:57:bf:e4:c7: 9b:87:51:c0:ec:84:ad:ab:de:a5:23:3c:b6:d3:61: f2:83:37:52:99:07:26:82:c4:4d:c0:6c:1c:c0:42: 55:90:a2:fa:4f:bc:0a:35:7e:85:2d:8c:28:59:99: b6:af:ec:da:36:b8:7f:70:f2:9c:7f:43:2a:cc:95: a6:fb:38:00:3a:41:04:ed:d3:0f:a9:7c:4f:da:52: 94:17:ee:10:b8:b3:4a:cc:65:ac:bb:0a:ad:cd:99: 99:8c:dd:5d:6e:37:a8:5d:08:87:bf:c7:4b:9c:48: f7:90:e2:2d:fd:bc:46:56:77:1f:ed:4a:c0:4e:0b: e4:3d:bb:02:75:ab:fe:69:ff:77:01:48:7b:f9:73: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1C:BD:E8:7E:59:56:77:D3:F5:3B:AE:DA:38:D6:E1:23:E3:04:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:20:9c:14:67:e9:3a:2f:ca:06:df:9f:a1:4a:ce:b8:f0:f9: f1:02:43:eb:e8:b8:54:38:99:6e:7b:49:5f:f7:01:c5:90:b1: a8:72:ab:4f:c9:0b:29:82:17:b5:b1:77:83:ca:4c:b8:89:85: 38:2e:d6:bd:da:54:23:fd:21:df:63:7c:a5:0a:35:b3:4b:24: 16:6b:8b:e3:d6:29:2f:0d:e3:80:41:da:3c:14:7c:25:6a:94: 07:92:e7:97:e2:b1:41:b9:9a:f6:c3:2c:b4:c0:40:86:f9:89: c2:09:6b:4b:f6:d9:ba:9d:f2:e6:e6:d6:e9:db:07:f4:d1:7d: 32:09:1c:5c:6c:cd:d0:d8:57:d1:f8:7c:95:1b:76:42:2f:02: a2:61:54:be:95:8d:ed:f8:b5:e1:21:a6:4b:bf:1f:6a:50:71: b9:78:bb:25:be:6f:ec:b7:41:6f:e5:e5:1d:20:12:82:90:f4: 8a:2b:65:67:a3:1d:4e:0d:97:da:ed:63:c9:c9:0e:32:a0:bc: c9:81:e2:0a:1e:4d:cb:e7:32:50:98:37:3b:5d:43:a5:79:42: f0:4f:b1:58:b4:de:ff:a4:1f:55:1e:d2:a4:0c:2a:10:94:b4: f7:f3:76:4f:01:42:c0:57:2c:ce:40:4b:4d:cd:8c:e4:a2:23: 16:b3:d8:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPRYrZMoCbRWDMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NzJiMDhmYjctZWJkZi00MmNjLWE0M2YtODU4MmY2NTcxMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA401Wunj3kzvOwaKZfonyLbTBaM48NhIWt/aq bUiwMvIAaNGcorJfgrvYI4SWj7pNVB3zUVINHTkrGuqmxlFbGsmyGOvhqwAT0X8X 5eTiEI4vcN20AyCwqizTovcwchgAoJw0vEaNqh/0ZRQdpvpzEFNQKVe/5Mebh1HA 7IStq96lIzy202HygzdSmQcmgsRNwGwcwEJVkKL6T7wKNX6FLYwoWZm2r+zaNrh/ cPKcf0MqzJWm+zgAOkEE7dMPqXxP2lKUF+4QuLNKzGWsuwqtzZmZjN1dbjeoXQiH v8dLnEj3kOIt/bxGVncf7UrATgvkPbsCdav+af93AUh7+XN8uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG4cveh+WVZ30/U7rto41uEj4wQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY1MDAyMGQtMzc0OC0z MDQyLThjMzctMWVkZGU4NTlhNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGIJwUZ+k6L8oG35+hSs648PnxAkPr6LhUOJlue0lf9wHFkLGocqtP yQspghe1sXeDyky4iYU4Lta92lQj/SHfY3ylCjWzSyQWa4vj1ikvDeOAQdo8FHwl apQHkueX4rFBuZr2wyy0wECG+YnCCWtL9tm6nfLm5tbp2wf00X0yCRxcbM3Q2FfR +HyVG3ZCLwKiYVS+lY3t+LXhIaZLvx9qUHG5eLslvm/st0Fv5eUdIBKCkPSKK2Vn ox1ODZfa7WPJyQ4yoLzJgeIKHk3L5zJQmDc7XUOleULwT7FYtN7/pB9VHtKkDCoQ lLT383ZPAULAVyzOQEtNzYzkoiMWs9hp -----END CERTIFICATE-----Generated at Sun May 11 06:43:27 2025 by rpki-client