$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa File: a011fb90-0047-30f5-a837-cab1b56549ab.roa (raw, json) Hash identifier: NkNZAODdjpWGzK7bCBcn3Btr6Jr0pTLNpj9igJqAB5A= Subject key identifier: 42:55:FA:2F:CE:E8:C1:56:90:A3:6B:0D:8E:ED:BE:9E:3F:D2:A6:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F8171F4A2017C7953EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396551 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:17:1f:4a:20:17:c7:95:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=132ad1c8-e093-4d15-8eda-511a9a242743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:d9:a7:2d:df:2e:57:35:e8:8f:4f:d2:c1: d5:dc:6c:19:0b:8c:05:81:be:40:ab:f7:b7:77:79: 0e:ab:9b:92:e7:59:8b:82:9e:9b:5b:75:e8:6c:dd: 42:95:84:3e:b1:c1:36:ea:a2:66:82:95:4b:53:c2: b4:7e:74:ea:3c:c0:3f:77:cf:9a:1f:3f:2c:d7:1f: 43:56:2c:2e:50:f4:5e:1d:35:87:fe:8c:5c:b4:b2: 8c:3b:80:8c:18:f7:07:f3:fd:58:e6:ea:74:7f:44: 33:78:3d:4d:75:9b:9f:84:fc:69:82:1f:62:d4:ab: 65:2f:5f:74:2b:bf:c2:6e:1b:ee:8c:03:11:e3:6f: 39:01:7e:ab:e4:7f:17:44:26:33:ea:1f:88:88:f5: fc:11:f9:57:0e:08:85:51:dd:29:39:b6:4a:c4:ef: 3b:4b:6c:82:3c:53:25:31:53:45:06:0f:72:f9:22: 4c:b7:77:05:6c:36:0b:fb:8b:79:88:8d:89:c7:c9: 69:e9:4d:40:55:12:01:d6:e5:27:ba:35:f4:8b:19: df:73:02:31:c2:d7:4f:c4:72:9c:96:1b:06:b9:9c: 62:bf:33:43:7e:d4:7b:86:a1:ac:16:65:35:77:96: 93:c3:15:60:03:42:d5:8e:1a:9b:6b:67:28:af:4e: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:FA:2F:CE:E8:C1:56:90:A3:6B:0D:8E:ED:BE:9E:3F:D2:A6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:48:c8:f3:64:7c:ae:81:65:e0:d7:3e:87:d5:c2:e2:05:2f: 4d:26:63:cf:18:5a:4a:12:6c:03:21:04:fd:09:2f:71:7e:2b: 96:06:69:3d:11:6a:e6:be:63:40:5c:5f:bf:e2:63:b1:38:0b: a4:1b:70:11:1e:bf:48:f7:00:c2:78:8a:63:da:46:a1:66:40: 81:eb:dd:13:08:c6:b1:3d:4a:2a:40:32:be:ab:4f:c0:78:08: ad:41:d4:4d:7c:20:c7:2c:78:28:02:c7:0e:6f:5d:fe:83:86: f7:3c:2c:cc:a8:87:a0:06:e7:38:56:bc:32:9f:ff:3c:36:76: 5f:50:3b:89:03:93:1a:f5:6f:64:1c:62:91:04:a1:41:58:49: 4a:12:e2:c1:70:92:b6:49:cf:2f:a8:bf:81:b7:b9:33:74:ed: 19:5a:69:da:71:6b:1d:65:00:a9:dc:fd:bb:35:5c:6a:ec:2b: d3:56:6e:83:08:60:be:ee:c5:46:83:d8:37:bd:10:e9:13:e3: 24:77:62:30:77:78:cb:26:77:86:a3:b8:5b:5d:bc:12:b8:a1: da:36:e8:d1:d8:3a:7c:69:c7:58:80:6c:b6:ef:1a:2c:80:3b: b9:7c:36:1d:6c:2f:eb:dd:c0:9c:8f:ac:6f:e4:07:d8:88:86: 90:47:fd:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPgXH0ogF8eVPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTMyYWQxYzgtZTA5My00ZDE1LThlZGEtNTExYTlhMjQyNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrPZpy3fLlc16I9P0sHV3GwZC4wFgb5Aq/e3 d3kOq5uS51mLgp6bW3XobN1ClYQ+scE26qJmgpVLU8K0fnTqPMA/d8+aHz8s1x9D ViwuUPReHTWH/oxctLKMO4CMGPcH8/1Y5up0f0QzeD1NdZufhPxpgh9i1KtlL190 K7/CbhvujAMR4285AX6r5H8XRCYz6h+IiPX8EflXDgiFUd0pObZKxO87S2yCPFMl MVNFBg9y+SJMt3cFbDYL+4t5iI2Jx8lp6U1AVRIB1uUnujX0ixnfcwIxwtdPxHKc lhsGuZxivzNDftR7hqGsFmU1d5aTwxVgA0LVjhqba2cor05I4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJV+i/O6MFWkKNrDY7tvp4/0qZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTAxMWZiOTAtMDA0Ny0z MGY1LWE4MzctY2FiMWI1NjU0OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACSMjzZHyugWXg1z6H1cLiBS9NJmPPGFpKEmwDIQT9CS9xfiuWBmk9 EWrmvmNAXF+/4mOxOAukG3ARHr9I9wDCeIpj2kahZkCB690TCMaxPUoqQDK+q0/A eAitQdRNfCDHLHgoAscOb13+g4b3PCzMqIegBuc4Vrwyn/88NnZfUDuJA5Ma9W9k HGKRBKFBWElKEuLBcJK2Sc8vqL+Bt7kzdO0ZWmnacWsdZQCp3P27NVxq7CvTVm6D CGC+7sVGg9g3vRDpE+Mkd2Iwd3jLJneGo7hbXbwSuKHaNujR2Dp8acdYgGy27xos gDu5fDYdbC/r3cCcj6xv5AfYiIaQR/2X -----END CERTIFICATE-----Generated at Sun May 11 05:30:42 2025 by rpki-client