$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa File: a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa (raw, json) Hash identifier: vxIQiC26axBt3zR0clGbi+vZkVeLnITogtSyxPKiGEk= Subject key identifier: BD:D8:DA:8B:BA:6F:E6:DF:C5:97:D3:4C:89:0B:60:59:5A:98:2D:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F20694C5DDCCD40E8A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396578 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:06:94:c5:dd:cc:d4:0e:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=8b4b6284-05e6-4122-a7b5-a1a989cd9b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:ec:6f:37:8d:2e:63:7c:f8:0c:94:29:2c: 17:4c:3b:14:3f:00:26:28:30:03:a4:a1:7c:04:44: a6:7a:a5:36:01:25:b4:0e:4c:6d:11:85:a8:d6:d6: 3a:2b:4b:63:b0:3d:e0:47:0a:17:44:fc:b6:b9:82: 02:4a:56:a0:20:87:ae:5b:98:7b:ed:32:6f:bf:6c: 5e:17:93:ba:a9:b5:6e:03:9f:c2:28:5b:0d:bc:f5: 66:35:bd:1a:7e:2f:b8:6f:7a:2b:16:26:7c:7e:5c: 60:6e:92:02:69:eb:14:19:82:be:e2:b3:78:0f:7a: 1a:08:fe:0e:97:90:62:09:dd:c1:22:68:b2:0c:96: 0d:f1:26:ab:12:25:44:2d:b0:68:a7:fa:77:d8:07: 93:da:3e:f4:d6:d6:de:72:ca:9f:7c:dc:37:07:bd: d7:dc:6c:31:cd:5a:72:0b:b8:6e:cf:ae:a5:89:8e: 9b:4f:4f:40:05:05:e4:b2:dc:74:64:97:ff:f4:b0: 1f:86:43:57:9d:67:10:a2:d8:9a:14:c0:94:9b:b6: 50:c2:d9:f2:1a:29:51:58:6f:91:c1:0b:d9:70:86: 6d:ba:b0:ba:96:e1:ba:ec:b8:88:e2:7e:8d:05:a9: 83:33:e8:6b:78:74:55:31:2e:bf:85:14:c0:31:3f: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D8:DA:8B:BA:6F:E6:DF:C5:97:D3:4C:89:0B:60:59:5A:98:2D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3f:94:34:b6:c2:20:ec:90:4a:1f:84:43:64:c9:99:6b:7e: a2:93:bd:e1:fa:31:56:4e:21:87:e8:d3:04:0a:69:34:3b:4d: 52:38:b8:00:be:29:26:60:f3:ff:2c:6b:e5:cc:98:c4:cb:7c: 43:01:16:66:50:f2:6e:63:ba:b5:0a:c0:eb:88:a7:65:4f:07: ae:9c:72:4d:9e:d1:0d:81:56:57:51:a0:19:e6:b0:79:0c:8b: 49:1c:cc:ea:04:9b:e1:16:5b:1a:0a:64:67:15:7f:b0:d6:fc: 7f:3d:09:c1:67:32:d3:d4:f0:9a:16:65:f8:71:a2:bb:b2:51: a9:af:fa:87:84:3b:6d:d4:d0:d8:c0:c0:4b:06:61:1c:97:59: d5:8d:eb:b5:81:b7:37:18:42:70:ff:1b:1e:c3:58:79:2f:a0: ee:20:fc:dd:5d:84:fd:8d:62:d1:ea:78:e4:2b:51:d5:75:95: 3f:98:fa:92:3b:7a:46:03:6e:28:16:24:4c:52:a2:3c:52:4e: d4:fc:b3:88:53:aa:4f:56:29:dc:11:59:1c:44:17:1b:56:ae: ef:1a:b1:ed:15:a2:ec:b0:7a:99:8d:12:da:60:1e:c4:5f:93: 7c:b7:db:ac:50:e1:c8:22:13:d7:bf:dc:be:3b:4e:8a:ac:4b: 6c:ea:da:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPIGlMXdzNQOioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OGI0YjYyODQtMDVlNi00MTIyLWE3YjUtYTFhOTg5Y2Q5YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypfsbzeNLmN8+AyUKSwXTDsUPwAmKDADpKF8 BESmeqU2ASW0DkxtEYWo1tY6K0tjsD3gRwoXRPy2uYICSlagIIeuW5h77TJvv2xe F5O6qbVuA5/CKFsNvPVmNb0afi+4b3orFiZ8flxgbpICaesUGYK+4rN4D3oaCP4O l5BiCd3BImiyDJYN8SarEiVELbBop/p32AeT2j701tbecsqffNw3B73X3GwxzVpy C7huz66liY6bT09ABQXkstx0ZJf/9LAfhkNXnWcQotiaFMCUm7ZQwtnyGilRWG+R wQvZcIZturC6luG67LiI4n6NBamDM+hreHRVMS6/hRTAMT/q8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL3Y2ou6b+bfxZfTTIkLYFlamC0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU5NzJmNWUtYjMzZi0z M2E1LWEwMDYtMGZiNjE2YTFjMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqP5Q0tsIg7JBKH4RDZMmZa36ik73h+jFWTiGH6NMECmk0O01SOLgA vikmYPP/LGvlzJjEy3xDARZmUPJuY7q1CsDriKdlTweunHJNntENgVZXUaAZ5rB5 DItJHMzqBJvhFlsaCmRnFX+w1vx/PQnBZzLT1PCaFmX4caK7slGpr/qHhDtt1NDY wMBLBmEcl1nVjeu1gbc3GEJw/xsew1h5L6DuIPzdXYT9jWLR6njkK1HVdZU/mPqS O3pGA24oFiRMUqI8Uk7U/LOIU6pPVincEVkcRBcbVq7vGrHtFaLssHqZjRLaYB7E X5N8t9usUOHIIhPXv9y+O06KrEts6tqf -----END CERTIFICATE-----Generated at Sun May 11 05:26:50 2025 by rpki-client