$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa File: 75e71cf3-71a6-3c2b-8128-c55832ec009e.roa (raw, json) Hash identifier: zI5aKW/FnnhE4SFh5Cxz2e0RxNeBhOn1z5bSLOIPJWY= Subject key identifier: 53:59:14:DB:1F:23:F5:92:4F:7C:E8:10:A4:7B:25:64:6A:B4:6F:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F360727303443164E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 397199 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f3:60:72:73:03:44:31:64:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=b149f4e4-14d1-43c1-9aeb-3413903cb69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:67:3d:d7:4f:01:27:9c:62:c7:52:f5:d5:38: ec:26:6e:b4:f1:06:e3:0f:22:ef:25:61:75:98:ef: 2a:3e:f1:b8:34:03:32:d4:91:86:2b:d5:bb:2d:6c: 40:60:d6:20:e4:a0:10:9c:16:59:22:2e:e5:8e:15: 79:4c:83:8e:8c:b1:c5:a3:e4:51:2f:8b:71:26:37: 98:6b:8b:d9:7e:75:69:52:96:d3:b5:c6:55:2e:64: 04:ee:b7:4d:36:1e:8b:93:7b:68:ae:94:b6:09:4f: 0d:0b:04:ab:0a:4d:93:6d:9d:4e:aa:7f:d2:f5:c4: ba:8b:fc:0e:91:84:c0:78:78:3c:44:49:8a:f0:6c: e4:f9:c4:8e:84:2c:82:4e:21:5b:75:6b:93:7a:f1: e5:f2:9b:04:46:b0:9a:4e:fd:9f:fc:4a:0a:f0:3c: 8c:b5:0d:0a:5f:6e:87:c9:a4:98:32:17:0d:b1:95: b1:1e:d6:a0:f4:19:a3:f1:d5:e9:ee:83:b0:9d:af: fb:2e:f0:6c:00:51:da:d5:e5:0a:75:8a:92:68:3e: 51:09:66:27:d3:d8:7b:f2:2d:5e:a1:0f:82:98:6f: 63:3c:75:15:97:ff:f5:ce:f8:d0:f4:a2:51:f3:d8: e5:91:5a:ed:c5:a6:fb:a4:89:0e:7f:32:b8:8a:d4: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:14:DB:1F:23:F5:92:4F:7C:E8:10:A4:7B:25:64:6A:B4:6F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1a:57:b2:51:45:12:26:fc:6f:bd:44:03:08:da:6c:b1:d7: b6:ed:7c:81:29:29:06:23:13:aa:a5:26:1e:45:3f:22:fe:16: 10:8c:a7:be:76:8d:52:17:e8:d8:64:40:ae:dd:1a:d5:4c:e2: 7a:91:f0:55:5e:2a:56:b2:2b:c1:af:f6:41:78:9c:1b:90:91: ae:7a:23:77:20:52:11:ef:78:c2:5a:16:24:cf:26:a4:e0:47: 67:02:68:1b:f3:24:4f:26:67:8f:d1:86:f0:8d:b9:3f:72:e6: ae:71:34:c9:b1:f1:b6:eb:9d:85:f5:c9:f3:d7:a3:ab:18:2b: 3b:b8:9e:03:71:8d:50:c1:01:6d:ac:c5:df:cb:e1:29:b9:87: d0:5d:0c:ce:37:49:cd:96:e2:28:61:53:aa:35:9c:59:62:83: 36:2c:5e:3e:4e:5c:99:39:08:3d:57:4a:11:01:8c:9c:05:17: 24:cb:a3:94:36:c0:ac:4d:c6:f6:b2:72:8f:5d:cf:7b:b3:42: 8f:e1:44:b5:50:b4:93:24:ba:21:ca:f8:49:49:a2:d1:67:8b: f5:b3:57:d8:32:a4:08:08:77:e4:9c:a9:b0:7e:60:44:1b:df: 20:c9:0c:d7:50:77:dc:bb:ac:39:6b:f7:71:4c:4f:3b:20:ed: e6:63:1d:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPNgcnMDRDFk4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YjE0OWY0ZTQtMTRkMS00M2MxLTlhZWItMzQxMzkwM2NiNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGc9108BJ5xix1L11TjsJm608QbjDyLvJWF1 mO8qPvG4NAMy1JGGK9W7LWxAYNYg5KAQnBZZIi7ljhV5TIOOjLHFo+RRL4txJjeY a4vZfnVpUpbTtcZVLmQE7rdNNh6Lk3torpS2CU8NCwSrCk2TbZ1Oqn/S9cS6i/wO kYTAeHg8REmK8Gzk+cSOhCyCTiFbdWuTevHl8psERrCaTv2f/EoK8DyMtQ0KX26H yaSYMhcNsZWxHtag9Bmj8dXp7oOwna/7LvBsAFHa1eUKdYqSaD5RCWYn09h78i1e oQ+CmG9jPHUVl//1zvjQ9KJR89jlkVrtxab7pIkOfzK4itRQ4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFNZFNsfI/WST3zoEKR7JWRqtG+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzVlNzFjZjMtNzFhNi0z YzJiLTgxMjgtYzU1ODMyZWMwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHGleyUUUSJvxvvUQDCNpssde27XyBKSkGIxOqpSYeRT8i/hYQjKe+ do1SF+jYZECu3RrVTOJ6kfBVXipWsivBr/ZBeJwbkJGueiN3IFIR73jCWhYkzyak 4EdnAmgb8yRPJmeP0Ybwjbk/cuaucTTJsfG2652F9cnz16OrGCs7uJ4DcY1QwQFt rMXfy+EpuYfQXQzON0nNluIoYVOqNZxZYoM2LF4+TlyZOQg9V0oRAYycBRcky6OU NsCsTcb2snKPXc97s0KP4US1ULSTJLohyvhJSaLRZ4v1s1fYMqQICHfknKmwfmBE G98gyQzXUHfcu6w5a/dxTE87IO3mYx3B -----END CERTIFICATE-----Generated at Sun May 11 08:37:41 2025 by rpki-client