$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: Wi/dW4mP1gSzhiOD9yLHLXPwTXyAMETJKidvaZP2RXE= Subject key identifier: 24:87:83:2D:B8:A7:CD:88:97:A4:F6:48:A8:55:27:8A:66:8C:32:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7E31BE173725CD6A980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:e3:1b:e1:73:72:5c:d6:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=c0ec4cd8-6439-4222-b3be-35e82679551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:3f:42:8f:37:02:7e:89:ba:2d:fc:6e:26: ee:0c:e9:e2:40:30:8b:59:62:df:14:ef:d4:c1:92: 9f:7a:85:da:8b:c3:69:9c:37:de:fa:15:3f:22:55: 0f:69:81:d0:1c:ad:70:37:c5:f2:8a:76:c6:d4:95: 98:f5:a4:73:0f:22:2b:ba:68:50:24:06:74:23:03: 5e:7a:5d:ce:b4:b2:9b:e9:fc:20:98:c4:44:b8:25: a5:57:ff:9d:b5:d2:71:3e:1e:1c:5c:7b:ff:88:b8: ac:48:b7:a4:a8:5e:e8:01:f8:4a:0e:96:e4:11:a1: de:4d:2f:ee:e5:6d:05:f3:11:97:af:c0:d7:44:72: fe:38:78:18:93:84:ef:90:ca:0d:e9:a4:3b:e8:49: b7:55:5d:67:c0:ab:cf:7c:1b:cd:ef:2d:87:93:3f: cd:7b:dd:18:2e:aa:98:a5:b1:10:ef:9e:1d:28:29: 2c:7c:6c:e3:8f:e1:c4:39:be:5a:f4:15:9f:c5:d2: da:64:66:4c:42:5a:b2:28:3f:b2:ff:d1:33:d6:b7: bb:6a:63:9c:88:8f:09:ad:d6:bc:5b:cc:8c:8c:06: 92:a1:06:4f:4a:92:5a:8d:69:c6:b5:67:ad:bf:b2: bd:c3:a7:af:6e:d5:01:a3:68:49:7c:22:3b:68:81: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:87:83:2D:B8:A7:CD:88:97:A4:F6:48:A8:55:27:8A:66:8C:32:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:86:e2:49:6b:1f:a6:66:74:ec:d4:87:cb:2a:7c:29:57:c6: e1:ca:24:1c:31:97:6f:98:a7:51:af:41:fb:ed:d6:c0:c9:f9: a1:e9:be:5c:95:15:23:04:e7:0b:3a:47:c1:5e:3f:0c:f0:8d: 56:8e:0c:c0:48:78:1c:f5:c2:a9:82:cf:57:d3:0f:dd:36:da: de:73:5b:87:68:d1:4b:c0:58:54:e7:03:dc:a0:a5:35:bd:c6: 2f:4c:32:8d:fb:e1:ed:4d:58:ea:4e:63:51:b7:2e:69:4d:cc: 6a:ca:f7:47:8b:75:a1:8f:b0:a0:01:7e:81:44:1f:27:46:47: b4:82:0a:e9:84:97:81:9c:66:f7:1d:18:91:e7:7c:ab:03:bd: 7b:a0:bb:cd:e1:1b:1a:9b:36:32:ee:bc:78:69:d3:9c:dd:ff: 10:27:22:f4:57:61:a3:5b:9c:e0:b7:b4:58:79:6a:2a:c8:59: 84:a8:6b:06:59:14:24:5e:e5:05:cb:a6:ac:00:86:c0:fc:e7: 76:71:27:be:74:01:22:fb:e4:01:fa:30:14:28:3e:53:58:03: f2:fe:ac:0f:55:52:7b:03:5b:17:43:89:38:14:bb:9d:b4:e9: ca:41:a4:99:01:c1:3c:9b:c3:de:46:86:98:72:d0:6a:91:e3: 55:2c:ce:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPfjG+FzclzWqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YzBlYzRjZDgtNjQzOS00MjIyLWIzYmUtMzVlODI2Nzk1NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6c/Qo83An6Jui38bibuDOniQDCLWWLfFO/U wZKfeoXai8NpnDfe+hU/IlUPaYHQHK1wN8XyinbG1JWY9aRzDyIrumhQJAZ0IwNe el3OtLKb6fwgmMREuCWlV/+dtdJxPh4cXHv/iLisSLekqF7oAfhKDpbkEaHeTS/u 5W0F8xGXr8DXRHL+OHgYk4TvkMoN6aQ76Em3VV1nwKvPfBvN7y2Hkz/Ne90YLqqY pbEQ754dKCksfGzjj+HEOb5a9BWfxdLaZGZMQlqyKD+y/9Ez1re7amOciI8Jrda8 W8yMjAaSoQZPSpJajWnGtWetv7K9w6evbtUBo2hJfCI7aIGgiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCSHgy24p82Il6T2SKhVJ4pmjDJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAhuJJax+mZnTs1IfLKnwpV8bhyiQcMZdvmKdRr0H77dbAyfmh6b5c lRUjBOcLOkfBXj8M8I1WjgzASHgc9cKpgs9X0w/dNtrec1uHaNFLwFhU5wPcoKU1 vcYvTDKN++HtTVjqTmNRty5pTcxqyvdHi3Whj7CgAX6BRB8nRke0ggrphJeBnGb3 HRiR53yrA717oLvN4RsamzYy7rx4adOc3f8QJyL0V2GjW5zgt7RYeWoqyFmEqGsG WRQkXuUFy6asAIbA/Od2cSe+dAEi++QB+jAUKD5TWAPy/qwPVVJ7A1sXQ4k4FLud tOnKQaSZAcE8m8PeRoaYctBqkeNVLM4b -----END CERTIFICATE-----Generated at Sun May 11 05:34:58 2025 by rpki-client