$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa File: 940344f4-0160-35f8-8292-c2448905d4ba.roa (raw, json) Hash identifier: ZD42yiapCEMQm+xUUjUH6XOK0jddhqvqlZi47+ARw+w= Subject key identifier: 64:76:C6:04:76:BF:12:68:37:C2:A3:0F:49:44:E3:B8:5C:28:88:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F3A0F47502ED47243A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36629 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f3:a0:f4:75:02:ed:47:24:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=49f421e3-0c70-419b-baaf-eb9545919d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:b0:1a:10:2d:f6:1a:58:13:20:f8:98:4d: 0d:a2:ba:57:95:66:7a:c3:e7:96:ce:fb:c1:97:58: 38:be:93:ec:98:53:90:d9:5c:a6:f5:fd:42:aa:99: dc:8d:1a:31:25:94:83:5c:89:24:a1:ee:d4:7c:fd: bb:82:81:84:e3:bc:5e:19:69:79:c0:02:d6:80:d5: 9e:8d:43:bf:bc:c7:f4:a8:ac:3a:99:3f:8a:2e:13: ed:c8:fc:ce:5c:d2:9b:8e:df:a5:91:8a:b2:a8:0d: ed:05:b5:4b:e5:87:db:bf:cf:84:eb:8a:fc:b4:c6: b1:e6:79:51:96:d6:64:69:0f:4a:38:5a:58:bf:df: bf:bf:0c:41:7d:70:95:3a:bf:e5:41:43:28:f1:03: 26:94:74:6e:ce:8c:5a:26:16:85:a2:1c:ff:e4:1d: e3:bc:65:ea:c0:46:f5:94:c1:56:d8:d9:6d:3c:b5: dc:d2:6d:45:ab:ce:2f:8d:00:22:89:05:75:d3:eb: e4:1c:dd:8d:eb:82:7a:e1:88:d4:70:b9:f5:37:90: c3:75:dc:c2:aa:41:03:a2:8e:a0:8f:83:b7:9e:ed: 12:6d:4c:87:d5:63:20:70:e3:76:ff:eb:76:f7:28: bf:39:ca:98:7b:4e:43:fb:1a:fa:a7:c1:1e:4e:0f: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:76:C6:04:76:BF:12:68:37:C2:A3:0F:49:44:E3:B8:5C:28:88:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a9:2f:d6:fa:3c:65:51:e3:e6:4d:91:6d:c7:31:e2:cf:4a: 94:f7:10:d6:e0:da:ae:f5:6e:68:bd:57:86:85:b8:e3:86:43: 97:ad:a6:9b:8d:74:37:c3:82:37:99:9f:f4:e7:10:3a:c1:ed: 40:2f:f6:d6:77:e6:18:11:eb:b9:0f:df:43:dd:8c:9a:cd:92: 0b:7b:bf:5d:8c:92:cc:09:cf:d3:68:8a:33:0b:41:61:92:d1: 4a:2b:b6:d2:50:e6:dd:d5:75:58:d5:03:6d:7d:95:0d:b4:c9: 2a:be:25:e1:9d:4f:d0:92:16:04:77:9e:a3:64:9f:db:cd:0d: 37:f5:47:32:a8:1a:ed:0d:24:52:23:2e:24:50:8e:ab:f1:b8: 48:f4:13:23:45:0f:5b:bd:cb:3f:46:db:0b:63:ad:3d:ea:85: 0e:72:87:2c:d8:3c:5a:19:a0:c5:71:81:b4:71:fe:18:49:1e: e8:91:f8:a2:21:85:1e:42:c8:ed:73:0a:1e:e5:7a:49:f8:be: 99:c4:be:c1:03:d3:98:e6:06:e6:f3:c9:ca:2d:b3:f1:ad:65: 95:0c:fc:76:1d:2c:87:f8:e3:84:d1:f7:ec:5c:b1:ea:38:05: 86:35:da:d7:0c:c4:9e:d4:b6:63:f1:c8:01:a1:36:7e:d8:a8: 7e:0c:1f:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPOg9HUC7UckOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NDlmNDIxZTMtMGM3MC00MTliLWJhYWYtZWI5NTQ1OTE5ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOGwGhAt9hpYEyD4mE0NorpXlWZ6w+eWzvvB l1g4vpPsmFOQ2Vym9f1CqpncjRoxJZSDXIkkoe7UfP27goGE47xeGWl5wALWgNWe jUO/vMf0qKw6mT+KLhPtyPzOXNKbjt+lkYqyqA3tBbVL5Yfbv8+E64r8tMax5nlR ltZkaQ9KOFpYv9+/vwxBfXCVOr/lQUMo8QMmlHRuzoxaJhaFohz/5B3jvGXqwEb1 lMFW2NltPLXc0m1Fq84vjQAiiQV10+vkHN2N64J64YjUcLn1N5DDddzCqkEDoo6g j4O3nu0SbUyH1WMgcON2/+t29yi/OcqYe05D+xr6p8EeTg+UQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGR2xgR2vxJoN8KjD0lE47hcKIgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQwMzQ0ZjQtMDE2MC0z NWY4LTgyOTItYzI0NDg5MDVkNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmqS/W+jxlUePmTZFtxzHiz0qU9xDW4Nqu9W5ovVeGhbjjhkOXraab jXQ3w4I3mZ/05xA6we1AL/bWd+YYEeu5D99D3YyazZILe79djJLMCc/TaIozC0Fh ktFKK7bSUObd1XVY1QNtfZUNtMkqviXhnU/QkhYEd56jZJ/bzQ039UcyqBrtDSRS Iy4kUI6r8bhI9BMjRQ9bvcs/RtsLY6096oUOcocs2DxaGaDFcYG0cf4YSR7okfii IYUeQsjtcwoe5XpJ+L6ZxL7BA9OY5gbm88nKLbPxrWWVDPx2HSyH+OOE0ffsXLHq OAWGNdrXDMSe1LZj8cgBoTZ+2Kh+DB+K -----END CERTIFICATE-----Generated at Sun May 11 06:20:32 2025 by rpki-client