$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa File: ac50bba1-b410-355e-9d80-f5325e4659d1.roa (raw, json) Hash identifier: dCxnwW5NJZzABj9KUzJrxR0WESpwlZIn6Ma+ha3U8bs= Subject key identifier: 7D:0E:FC:33:E6:8B:8C:4F:65:A4:FC:42:E4:BA:36:3C:1A:6C:77:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F2E5639E186C6E9BF800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396565 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:e5:63:9e:18:6c:6e:9b:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=c17ff015-132d-4c6c-8da4-166360bcfaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ac:24:bb:72:2c:86:bd:e0:d5:b1:e9:fb:d3: 49:5a:67:ef:8e:42:18:f8:84:1c:5d:7e:a7:c3:a4: 34:24:7e:94:bc:88:0b:94:fe:6a:45:45:be:5b:45: 1b:fb:66:2f:34:f1:b5:4e:c3:8f:7e:1b:ea:db:c4: d3:8f:30:2a:af:3a:55:05:90:5e:4f:bf:36:17:d2: 71:23:aa:dd:43:81:e6:66:5a:67:c2:86:07:73:86: 9e:5c:ac:ce:a7:b0:a2:a9:4c:98:66:6b:4f:ab:bb: b1:9f:f6:a3:4d:cf:57:05:4d:04:99:67:28:f1:22: 70:21:b3:b0:49:b2:ac:7d:48:1a:f4:4e:71:87:27: 0c:e0:57:05:57:20:1d:d5:34:f7:1c:6f:fe:7c:cc: 46:e9:20:4e:e5:26:14:05:c4:05:94:43:10:63:0c: c1:5d:a1:1f:22:96:87:99:31:3a:91:f5:25:6a:85: 4f:9c:ee:65:4e:e5:8f:e3:16:9a:d2:03:9d:bd:cf: c5:11:69:3e:83:36:53:66:9e:b5:cd:9c:86:10:3c: 00:13:ba:fb:d8:95:e9:55:38:cf:7e:fe:48:94:8a: 72:0e:7d:4c:5d:29:64:c7:54:18:e4:ad:13:28:c7: 7b:60:d5:ac:58:6b:1c:03:41:e1:83:c3:86:e0:2a: 35:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:FC:33:E6:8B:8C:4F:65:A4:FC:42:E4:BA:36:3C:1A:6C:77:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1b:d0:91:dc:32:79:70:c4:c7:e2:a0:51:78:01:db:90:a6: 19:fa:76:52:0f:55:31:ad:29:20:ac:20:8e:86:32:82:7a:e0: b5:79:eb:69:1f:86:bf:0d:cc:13:02:c2:ec:ad:9b:b5:a4:73: 6c:a6:72:83:d1:da:20:6b:ed:09:1e:8e:fb:f6:96:3f:34:7d: a8:1e:ea:41:bc:b0:2c:ea:74:9c:29:0e:6e:a2:66:00:16:28: 4e:31:c7:73:4b:80:dc:be:ab:5f:58:02:ba:40:e9:34:d8:ee: 53:8f:0b:60:c5:df:39:5e:1a:a9:cf:8c:8e:b4:8c:f1:b0:69: 39:98:c4:d2:7f:62:d9:5e:6d:36:d2:33:76:ac:f7:a5:dc:bc: 94:6b:12:fb:73:7c:eb:fb:25:19:84:00:52:c1:05:b7:4e:f7: 9c:cd:40:78:b2:9f:0c:3e:10:b5:1d:b9:b8:3d:fb:3b:54:9d: 49:4b:ad:e8:c5:99:95:50:99:2d:1c:13:26:0c:c3:87:5d:5b: 75:94:77:ec:f8:56:45:26:25:9d:17:cd:73:9c:70:92:9d:73: a9:af:0a:7d:57:8d:ec:db:a0:83:86:01:c4:c3:7f:73:34:c3: 52:dc:d7:bf:e6:f0:a3:8d:71:e9:1a:dd:e5:07:63:9f:2a:cf: cd:bf:12:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPLlY54YbG6b+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YzE3ZmYwMTUtMTMyZC00YzZjLThkYTQtMTY2MzYwYmNmYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqwku3Ishr3g1bHp+9NJWmfvjkIY+IQcXX6n w6Q0JH6UvIgLlP5qRUW+W0Ub+2YvNPG1TsOPfhvq28TTjzAqrzpVBZBeT782F9Jx I6rdQ4HmZlpnwoYHc4aeXKzOp7CiqUyYZmtPq7uxn/ajTc9XBU0EmWco8SJwIbOw SbKsfUga9E5xhycM4FcFVyAd1TT3HG/+fMxG6SBO5SYUBcQFlEMQYwzBXaEfIpaH mTE6kfUlaoVPnO5lTuWP4xaa0gOdvc/FEWk+gzZTZp61zZyGEDwAE7r72JXpVTjP fv5IlIpyDn1MXSlkx1QY5K0TKMd7YNWsWGscA0Hhg8OG4Co1qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH0O/DPmi4xPZaT8QuS6NjwabHehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM1MGJiYTEtYjQxMC0z NTVlLTlkODAtZjUzMjVlNDY1OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsG9CR3DJ5cMTH4qBReAHbkKYZ+nZSD1UxrSkgrCCOhjKCeuC1eetp H4a/DcwTAsLsrZu1pHNspnKD0doga+0JHo779pY/NH2oHupBvLAs6nScKQ5uomYA FihOMcdzS4DcvqtfWAK6QOk02O5Tjwtgxd85Xhqpz4yOtIzxsGk5mMTSf2LZXm02 0jN2rPel3LyUaxL7c3zr+yUZhABSwQW3TveczUB4sp8MPhC1Hbm4Pfs7VJ1JS63o xZmVUJktHBMmDMOHXVt1lHfs+FZFJiWdF81znHCSnXOprwp9V43s26CDhgHEw39z NMNS3Ne/5vCjjXHpGt3lB2OfKs/NvxKp -----END CERTIFICATE-----Generated at Sun May 11 05:32:12 2025 by rpki-client