$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70570140-2f1c-33cf-8a91-1743c9fea3e3.roa File: 70570140-2f1c-33cf-8a91-1743c9fea3e3.roa (raw, json) Hash identifier: nlyeh+UPczaRpt7h3HFJxFslt4QhjDg1gW1K6Ux47lU= Subject key identifier: CC:90:2C:79:C1:25:89:14:DE:42:01:D7:17:41:F6:B3:32:65:F1:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F83579F0BAC2C0350620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70570140-2f1c-33cf-8a91-1743c9fea3e3.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36622 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:35:79:f0:ba:c2:c0:35:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=19636728-fde5-4b56-a0a1-20cc7a20b91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:68:b8:47:53:cb:8a:08:e3:a9:6a:42:80: a3:8f:ae:3e:17:54:b5:16:c8:21:73:79:85:30:ea: c3:14:3f:b3:25:d7:f2:a3:04:fa:61:30:8d:e4:a7: 42:0f:99:9a:45:df:d4:41:73:3b:60:e7:fa:66:2e: 08:3e:76:22:2f:bc:a7:93:18:21:29:1b:1b:21:f6: 28:74:8f:22:9c:f5:3c:30:c7:43:fd:ae:ff:ba:ab: 99:da:80:7d:fd:56:26:1c:dc:80:51:ab:2c:d0:db: 14:49:4b:c1:73:72:b5:d1:1e:c0:87:e0:f5:26:22: 0e:0b:96:80:34:57:df:e3:9a:6c:ff:e9:41:5f:eb: b6:c8:6d:30:e3:22:42:f6:3c:64:1c:de:e8:a4:d5: 00:43:c3:7c:d5:0f:fe:d5:7d:19:a9:aa:25:85:87: 06:42:d2:94:e0:e9:fb:14:e0:66:c5:a6:02:d0:8a: 2e:52:34:15:f7:48:da:bc:7b:b5:c3:8e:69:e0:e7: df:27:22:3e:dc:9d:c2:11:0f:92:ae:67:89:d1:27: d3:ed:07:7f:91:63:ff:0e:ce:c9:45:1a:eb:0e:ad: 6a:28:4a:76:ad:6b:21:7d:7c:44:60:6c:c0:c5:6c: 65:ea:31:ea:09:36:4c:89:7a:80:8e:a8:81:c6:de: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:2C:79:C1:25:89:14:DE:42:01:D7:17:41:F6:B3:32:65:F1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70570140-2f1c-33cf-8a91-1743c9fea3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:fb:01:25:7a:56:4b:66:07:02:49:71:03:fd:96:a3:cb: 53:00:e4:19:65:ed:48:c4:c0:a8:a6:47:c9:ed:e6:1d:0b:8e: 32:e7:59:de:eb:32:bd:7d:e6:83:80:f8:a1:b6:06:52:54:da: 95:5b:fd:4a:00:ca:7c:f3:12:ab:49:a3:0d:11:48:c5:0e:5c: e1:5f:14:a7:8d:7b:6f:b1:7e:08:cd:c1:78:39:df:d0:8a:36: c6:59:ec:91:f7:dd:c4:94:c3:90:73:8c:40:44:1a:dc:2f:fc: 36:e0:f1:d3:ee:0d:19:bd:fc:ce:29:ee:17:02:4b:b5:6d:b7: 5d:f0:d5:4e:23:b6:c6:f5:91:11:0b:49:a8:ea:a1:ff:44:0b: f9:58:1d:f8:d6:3c:63:0e:7b:d2:83:ea:1a:e5:c6:82:7c:8d: 89:47:c3:10:df:98:63:cc:5e:7a:88:2f:b4:f1:a2:2d:6e:9d: 5f:04:57:6d:e8:39:5d:56:7e:6e:88:98:d2:6a:79:9d:92:f1: 3f:43:aa:2f:fc:fd:db:a5:51:6e:58:be:d8:bc:6f:9b:40:c1: 8c:60:97:57:7d:19:1c:c2:73:8e:ee:ff:ed:75:1b:c2:c1:34: 58:4b:67:9d:c6:aa:de:b2:24:0a:46:0a:85:05:86:0f:08:56: 5b:4d:b1:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPg1efC6wsA1BiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTk2MzY3MjgtZmRlNS00YjU2LWEwYTEtMjBjYzdhMjBiOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ZouEdTy4oI46lqQoCjj64+F1S1Fsghc3mF MOrDFD+zJdfyowT6YTCN5KdCD5maRd/UQXM7YOf6Zi4IPnYiL7ynkxghKRsbIfYo dI8inPU8MMdD/a7/uquZ2oB9/VYmHNyAUass0NsUSUvBc3K10R7Ah+D1JiIOC5aA NFff45ps/+lBX+u2yG0w4yJC9jxkHN7opNUAQ8N81Q/+1X0ZqaolhYcGQtKU4On7 FOBmxaYC0IouUjQV90javHu1w45p4OffJyI+3J3CEQ+SrmeJ0SfT7Qd/kWP/Ds7J RRrrDq1qKEp2rWshfXxEYGzAxWxl6jHqCTZMiXqAjqiBxt6N2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMyQLHnBJYkU3kIB1xdB9rMyZfHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzA1NzAxNDAtMmYxYy0z M2NmLThhOTEtMTc0M2M5ZmVhM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1uPsBJXpWS2YHAklxA/2Wo8tTAOQZZe1IxMCopkfJ7eYdC44y51ne 6zK9feaDgPihtgZSVNqVW/1KAMp88xKrSaMNEUjFDlzhXxSnjXtvsX4IzcF4Od/Q ijbGWeyR993ElMOQc4xARBrcL/w24PHT7g0ZvfzOKe4XAku1bbdd8NVOI7bG9ZER C0mo6qH/RAv5WB341jxjDnvSg+oa5caCfI2JR8MQ35hjzF56iC+08aItbp1fBFdt 6DldVn5uiJjSanmdkvE/Q6ov/P3bpVFuWL7YvG+bQMGMYJdXfRkcwnOO7v/tdRvC wTRYS2edxqresiQKRgqFBYYPCFZbTbFk -----END CERTIFICATE-----Generated at Mon May 12 05:10:04 2025 by rpki-client