$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa File: b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa (raw, json) Hash identifier: f4nyGCoTrgYnso/knJc04eAlJkBd4HX5MRIOZnZQtU8= Subject key identifier: 28:50:14:E4:D5:09:39:9F:CB:E1:F1:CB:47:15:92:ED:CB:B1:CA:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F8ABA76E703BADF39DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396592 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f8:ab:a7:6e:70:3b:ad:f3:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1e1bbccf-6aa0-4ca9-a9c2-8e5a187f3e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:5f:a9:24:da:af:bc:9b:d1:e1:c6:17:11: e7:0d:8a:9f:c8:a9:8b:13:52:6c:d1:d8:96:c8:8f: d9:0e:3f:15:2f:24:06:57:e7:13:0a:7e:d1:ed:ff: cd:b7:a3:a1:ab:8a:89:6c:fa:49:3e:83:d9:65:2e: fb:23:64:ed:ca:71:f4:a7:10:2b:fc:3e:1c:66:12: 08:9f:92:97:b2:e5:10:1c:c6:b4:de:f0:17:3f:e8: 97:01:4e:41:65:14:a8:f4:ca:21:2e:3e:d3:cd:bf: 0c:11:45:9f:51:54:8d:f8:93:31:e0:01:20:24:d8: 59:33:d5:48:2c:e6:48:b8:6f:3a:e9:bd:f1:1e:8f: 05:34:1e:93:ab:3d:7c:41:e4:4a:19:37:79:ee:5b: 60:f0:68:eb:45:3e:75:2e:87:f3:d8:65:73:0e:62: 3e:1f:b5:81:ae:03:0f:cf:38:54:23:c6:c1:48:f1: 07:03:5a:76:00:a8:cb:20:a6:5e:8e:84:83:e1:14: 8a:ed:d2:0f:b3:51:c8:81:1c:48:55:4b:87:a5:ce: 0d:64:c9:41:ca:8c:a0:ce:70:65:d5:86:ea:6a:35: 77:b2:9c:20:3d:5c:14:c2:e4:bf:39:78:f8:64:db: 4d:e8:66:69:d7:4e:56:1a:62:48:73:4b:5f:e7:f0: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:14:E4:D5:09:39:9F:CB:E1:F1:CB:47:15:92:ED:CB:B1:CA:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3b:6f:c0:76:13:41:86:7b:4d:ca:43:84:42:2e:09:df:4e: dc:98:0c:c0:da:2a:15:a0:cb:ba:ee:9d:45:69:42:7f:7b:78: 99:2c:bc:24:1b:65:65:67:de:62:33:67:20:68:aa:2f:6f:3f: d2:5e:90:83:67:b8:a8:16:eb:f4:ee:03:98:8c:81:51:f8:96: bb:95:83:7b:80:c6:58:ec:d1:57:19:a8:68:83:23:4e:dc:50: 99:b8:1a:9a:cf:8c:67:54:9e:8b:73:5c:af:f7:d9:c0:7e:3e: 46:cc:01:a7:ef:49:19:df:94:e2:cc:af:8e:21:06:6c:4a:ec: c0:4e:df:41:d2:a4:7a:b7:9e:f0:44:77:17:21:3d:78:9d:c2: cd:09:2b:2a:8b:c4:a9:98:da:26:24:94:27:96:36:be:a5:4f: 47:a1:9c:71:b9:75:bd:36:64:02:ee:1f:fa:38:b2:0b:73:cb: f7:94:c9:6a:20:bd:9e:6b:ef:91:5b:da:c7:70:45:70:ac:33: be:53:f4:dc:d0:26:21:4e:04:bb:ca:e7:d4:b7:ff:99:aa:62: d8:34:29:81:f9:16:3e:b1:0b:00:43:7d:df:e5:6d:93:b5:a5: 19:5b:bc:1d:0d:87:40:e6:b3:d9:ac:ce:08:fd:75:5a:31:45: 64:57:f5:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPirp25wO63zneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWUxYmJjY2YtNmFhMC00Y2E5LWE5YzItOGU1YTE4N2YzZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixdfqSTar7yb0eHGFxHnDYqfyKmLE1Js0diW yI/ZDj8VLyQGV+cTCn7R7f/Nt6Ohq4qJbPpJPoPZZS77I2TtynH0pxAr/D4cZhII n5KXsuUQHMa03vAXP+iXAU5BZRSo9MohLj7Tzb8MEUWfUVSN+JMx4AEgJNhZM9VI LOZIuG866b3xHo8FNB6Tqz18QeRKGTd57ltg8GjrRT51Lofz2GVzDmI+H7WBrgMP zzhUI8bBSPEHA1p2AKjLIKZejoSD4RSK7dIPs1HIgRxIVUuHpc4NZMlByoygznBl 1YbqajV3spwgPVwUwuS/OXj4ZNtN6GZp105WGmJIc0tf5/C1GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChQFOTVCTmfy+Hxy0cVku3LscrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU1MDQxZTUtY2U0Yi0z Nzk0LTk5YTEtODgwNTRmYzNjOWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIO2/AdhNBhntNykOEQi4J307cmAzA2ioVoMu67p1FaUJ/e3iZLLwk G2VlZ95iM2cgaKovbz/SXpCDZ7ioFuv07gOYjIFR+Ja7lYN7gMZY7NFXGahogyNO 3FCZuBqaz4xnVJ6Lc1yv99nAfj5GzAGn70kZ35TizK+OIQZsSuzATt9B0qR6t57w RHcXIT14ncLNCSsqi8SpmNomJJQnlja+pU9HoZxxuXW9NmQC7h/6OLILc8v3lMlq IL2ea++RW9rHcEVwrDO+U/Tc0CYhTgS7yufUt/+ZqmLYNCmB+RY+sQsAQ33f5W2T taUZW7wdDYdA5rPZrM4I/XVaMUVkV/UW -----END CERTIFICATE-----Generated at Sun May 11 06:37:19 2025 by rpki-client