$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa File: a159a91f-8956-3df2-8be2-9a8e8214d926.roa (raw, json) Hash identifier: FtunsUIcRmJRGyV7zfn/Q2nxW3rE39eik+kcrM4LC5M= Subject key identifier: BA:26:DC:0C:2B:54:0C:A7:09:66:8B:1C:98:82:9F:AB:FC:79:14:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F575D6DED686DD8D13C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 397193 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f5:75:d6:de:d6:86:dd:8d:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=6501a18a-5d11-4b41-baeb-9b4d6334f305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:71:3e:f0:bc:af:a8:fb:dd:ca:e8:88:f8: 13:cd:42:ab:7b:61:1f:6b:b6:6e:36:44:3a:25:c8: 46:9e:cf:28:94:4f:0d:15:d5:c9:32:5c:d8:5a:27: 0a:0f:f9:7a:f8:0f:77:31:0e:ec:10:8c:e5:54:3c: 58:bc:68:b9:8c:19:9d:61:a7:4d:09:e2:6d:5d:22: 80:04:4a:4a:70:cb:48:d8:64:ad:ea:41:ae:ff:be: f0:4f:0c:00:3d:23:2e:11:d3:2d:57:df:ee:b2:e5: d2:f5:fb:12:5e:30:16:ae:98:af:90:4b:18:55:23: ff:f3:dc:d5:3e:86:18:f3:b9:87:1d:8e:fa:81:b4: 91:f6:fb:78:1e:56:a6:25:a3:fd:18:9a:8f:20:e0: 12:98:43:7f:ae:21:c2:71:74:1d:be:d9:46:8b:ee: 38:53:3e:6a:4d:85:86:ec:0d:56:3e:91:24:bd:15: 11:b4:f8:35:61:09:eb:41:ac:62:c2:59:1d:b2:d8: 14:00:e3:90:33:d0:2b:92:a9:68:42:91:0b:42:b2: 80:64:2f:4a:2a:9d:10:94:55:37:a0:f9:6c:86:37: 3c:33:6d:b3:e8:48:20:61:22:9c:96:ae:7d:de:04: 15:66:6b:ad:10:ed:47:c4:df:37:f5:46:8f:79:48: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:DC:0C:2B:54:0C:A7:09:66:8B:1C:98:82:9F:AB:FC:79:14:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:40:ed:8e:7b:61:5d:fd:bf:91:db:af:a1:d8:5f:ac:06:44: a4:c5:f5:c6:ee:e4:db:ab:a1:27:5b:05:76:25:2c:e9:6a:9f: ac:49:1f:a0:11:e2:68:5f:62:ad:76:89:2f:68:56:1d:7e:31: 9f:d4:15:5f:51:29:97:17:aa:bd:55:99:f2:af:06:12:bd:1e: 4f:9e:ac:ef:e4:98:1e:26:24:c0:c7:87:2c:e0:57:87:c8:db: 91:02:90:de:36:31:39:22:b2:2a:28:d2:e2:08:8a:cd:75:22: 28:6e:ee:8e:87:40:3e:81:5a:41:39:48:5c:11:be:9f:be:bd: f5:94:de:7b:e7:fa:29:f2:cf:0a:42:dd:c7:42:3a:e3:d2:1b: 93:2f:70:39:20:86:c5:eb:0d:d6:a0:15:c4:bc:7a:65:f5:d2: 27:d2:85:18:16:72:8f:95:1e:fb:66:a8:cc:8a:44:e9:a1:86: 61:a3:70:76:37:2d:9e:3c:c8:9a:57:88:b7:4f:98:16:2b:29: 98:32:d8:11:0d:f0:1e:e6:cd:c9:fa:f6:e8:53:76:54:21:88: 02:cb:f8:7e:d2:f6:48:cd:30:00:e5:10:34:99:08:6e:c6:9e: c9:67:da:6b:92:e4:75:fe:3c:c4:1d:7a:ed:e2:1e:7d:09:12: 99:47:5b:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPV11t7Wht2NE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NjUwMWExOGEtNWQxMS00YjQxLWJhZWItOWI0ZDYzMzRmMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl95xPvC8r6j73croiPgTzUKre2Efa7ZuNkQ6 JchGns8olE8NFdXJMlzYWicKD/l6+A93MQ7sEIzlVDxYvGi5jBmdYadNCeJtXSKA BEpKcMtI2GSt6kGu/77wTwwAPSMuEdMtV9/usuXS9fsSXjAWrpivkEsYVSP/89zV PoYY87mHHY76gbSR9vt4HlamJaP9GJqPIOASmEN/riHCcXQdvtlGi+44Uz5qTYWG 7A1WPpEkvRURtPg1YQnrQaxiwlkdstgUAOOQM9ArkqloQpELQrKAZC9KKp0QlFU3 oPlshjc8M22z6EggYSKclq593gQVZmutEO1HxN839UaPeUiCZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLom3AwrVAynCWaLHJiCn6v8eRTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE1OWE5MWYtODk1Ni0z ZGYyLThiZTItOWE4ZTgyMTRkOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUQO2Oe2Fd/b+R26+h2F+sBkSkxfXG7uTbq6EnWwV2JSzpap+sSR+g EeJoX2KtdokvaFYdfjGf1BVfUSmXF6q9VZnyrwYSvR5Pnqzv5JgeJiTAx4cs4FeH yNuRApDeNjE5IrIqKNLiCIrNdSIobu6Oh0A+gVpBOUhcEb6fvr31lN575/op8s8K Qt3HQjrj0huTL3A5IIbF6w3WoBXEvHpl9dIn0oUYFnKPlR77ZqjMikTpoYZho3B2 Ny2ePMiaV4i3T5gWKymYMtgRDfAe5s3J+vboU3ZUIYgCy/h+0vZIzTAA5RA0mQhu xp7JZ9prkuR1/jzEHXrt4h59CRKZR1sK -----END CERTIFICATE-----Generated at Sun May 11 05:30:42 2025 by rpki-client