$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa File: 85aef401-6abe-34e9-8ada-bebf1cc2e924.roa (raw, json) Hash identifier: bkzFd5Ao2BuCNhdORYjaH7qbp3Vw0TY5iqWoGpVmcCM= Subject key identifier: 20:55:DE:E1:42:81:CF:08:B6:3A:69:45:1B:50:89:75:C0:09:B6:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F615C1E76328B4EAE580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396569 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:15:c1:e7:63:28:b4:ea:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=9ee7c42f-2b4a-4711-a0a7-72637cfa76de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:ff:22:5e:f8:b2:70:0a:31:60:54:fb:a2: bd:12:21:f0:ed:c1:00:ad:12:62:7c:69:31:8f:b0: cd:62:bb:0a:16:58:2c:31:d7:9a:95:d3:e7:9d:3c: d7:4f:b1:16:ee:3b:b9:ff:c4:63:24:22:9a:4b:8c: 5c:f6:0f:89:50:55:93:49:19:c6:f7:19:37:13:d0: 03:8c:ea:20:8b:83:04:d9:6f:e1:4b:06:a6:ae:0b: 67:31:8e:6f:37:6d:9c:98:8e:fc:4f:ea:00:88:5a: cb:c1:e5:ff:15:78:99:5d:d7:55:b0:cf:b3:0e:b3: ce:5a:d7:17:ea:d2:c6:ac:19:ad:0c:79:2b:2e:ff: 2c:e5:9a:95:ec:ef:32:9e:fc:91:92:b7:f9:8f:1b: 3b:78:bd:31:27:42:d8:98:87:23:7f:02:5b:74:a2: c9:c5:7c:8a:25:1e:de:17:4d:bb:24:c1:8b:5f:3e: a9:03:d4:95:19:4d:24:da:21:ae:9f:43:b7:01:99: aa:eb:2b:00:26:93:06:8c:15:2a:b8:d3:9a:cb:94: 52:4a:8f:59:70:bd:c8:ed:62:17:aa:0e:24:b2:0e: d1:37:3d:8b:22:72:94:1b:c1:61:e7:65:4e:ee:00: 1e:8b:ee:22:b7:56:5b:e5:d5:90:93:3c:57:16:3e: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:55:DE:E1:42:81:CF:08:B6:3A:69:45:1B:50:89:75:C0:09:B6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bc:b7:be:30:ff:31:59:aa:b1:b0:37:b5:15:a0:a7:5e:c1: b9:77:33:d1:c7:a6:2f:19:ec:b7:d2:ff:a4:1c:f3:48:db:bc: e9:99:29:3c:0e:de:a7:41:5d:5d:63:e5:bc:bb:26:9a:9e:0c: df:1e:eb:de:36:0f:f1:cc:49:ba:ea:90:f1:cb:3e:96:3b:9f: 6c:7d:67:4c:5f:89:ed:c4:d1:50:7b:fb:d8:b2:bc:f9:46:c3: 6b:99:0b:42:9a:9d:19:e6:1c:c8:dc:e3:f0:6b:0a:16:25:90: 8b:8b:2a:6e:65:71:8c:7e:54:7e:97:3d:02:b3:17:4e:8b:e1: f2:cd:2b:3d:ec:69:01:ac:1e:65:aa:5b:2f:34:12:1c:73:09: 70:7d:04:1b:b6:a5:5a:fa:f1:eb:ba:a1:f5:14:5a:97:d8:65: dc:04:30:25:57:9d:60:a9:ad:40:07:cd:8c:67:5d:16:ed:ce: e3:e7:6b:da:ba:f2:74:a2:a5:d7:0c:cb:30:ca:cc:4c:bb:88: 96:8b:40:c9:0d:bc:30:ae:0d:9f:52:f0:37:26:48:85:bb:cf: 1e:22:75:9f:e4:69:81:b5:d8:44:e1:47:28:1b:ae:7b:10:4b: 3d:02:54:28:4c:88:23:48:e4:5c:52:94:ce:19:1b:f9:3f:c7: 1e:b6:4c:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPYVwedjKLTq5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OWVlN2M0MmYtMmI0YS00NzExLWEwYTctNzI2MzdjZmE3NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLP/Il74snAKMWBU+6K9EiHw7cEArRJifGkx j7DNYrsKFlgsMdealdPnnTzXT7EW7ju5/8RjJCKaS4xc9g+JUFWTSRnG9xk3E9AD jOogi4ME2W/hSwamrgtnMY5vN22cmI78T+oAiFrLweX/FXiZXddVsM+zDrPOWtcX 6tLGrBmtDHkrLv8s5ZqV7O8ynvyRkrf5jxs7eL0xJ0LYmIcjfwJbdKLJxXyKJR7e F027JMGLXz6pA9SVGU0k2iGun0O3AZmq6ysAJpMGjBUquNOay5RSSo9ZcL3I7WIX qg4ksg7RNz2LInKUG8Fh52VO7gAei+4it1Zb5dWQkzxXFj6b2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCBV3uFCgc8ItjppRRtQiXXACbYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhZWY0MDEtNmFiZS0z NGU5LThhZGEtYmViZjFjYzJlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6vLe+MP8xWaqxsDe1FaCnXsG5dzPRx6YvGey30v+kHPNI27zpmSk8 Dt6nQV1dY+W8uyaangzfHuveNg/xzEm66pDxyz6WO59sfWdMX4ntxNFQe/vYsrz5 RsNrmQtCmp0Z5hzI3OPwawoWJZCLiypuZXGMflR+lz0CsxdOi+HyzSs97GkBrB5l qlsvNBIccwlwfQQbtqVa+vHruqH1FFqX2GXcBDAlV51gqa1AB82MZ10W7c7j52va uvJ0oqXXDMswysxMu4iWi0DJDbwwrg2fUvA3JkiFu88eInWf5GmBtdhE4UcoG657 EEs9AlQoTIgjSORcUpTOGRv5P8cetkxE -----END CERTIFICATE-----Generated at Sun May 11 06:11:41 2025 by rpki-client