$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa File: b688fb27-59e5-374c-8e3c-13d611990324.roa (raw, json) Hash identifier: kfLw3KE1wLpGabQl53ml4vkEdkA56O77B5e071htM20= Subject key identifier: E0:79:C3:48:C0:41:35:BB:30:1A:70:6A:D0:AC:A9:6A:B2:31:30:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F245FAE0EC636535A280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396574 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:45:fa:e0:ec:63:65:35:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=19f58a68-a300-494b-9c6a-8af32552e0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:23:e5:18:1a:b5:c6:37:95:ba:e1:6c:6a: bb:29:79:d7:c8:f4:a4:76:76:24:9a:22:19:15:e1: 34:d8:c6:40:2c:82:af:4d:3f:41:d0:78:bb:41:1f: 5b:f9:cc:5e:05:2d:ef:b1:c8:8b:9f:a8:85:5e:af: 33:7b:66:7a:f0:41:60:93:d1:9b:55:c1:e2:bb:59: f6:c0:42:37:9e:22:17:89:7e:05:17:38:74:c6:f1: 7b:48:70:96:c2:11:f2:5f:b1:2a:45:b2:1d:ae:a5: a1:14:cf:96:72:55:4c:37:47:1b:9d:72:b1:ba:d1: 1d:ed:f5:b1:3a:2b:e1:8c:d8:08:35:3d:8d:ab:a7: 8f:15:f0:d3:4e:95:42:f2:79:63:34:cd:95:97:3b: 05:61:83:4b:4a:a1:28:96:7c:ce:d7:d7:3e:87:8c: bd:91:26:c6:98:45:25:0c:2a:7c:86:1b:42:8a:38: 5c:02:43:10:43:6f:4b:4f:d2:b1:84:6e:a5:2a:53: 7f:97:b4:6a:be:36:ed:2d:8d:c8:9f:7b:0e:2d:51: bd:06:5d:13:70:df:ba:be:a1:73:30:35:d0:a5:30: cc:b8:fe:d6:c7:6d:8c:86:08:fd:33:bd:72:78:e1: ff:4e:12:1f:e6:b6:a6:09:a3:6f:5c:54:40:95:7a: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:C3:48:C0:41:35:BB:30:1A:70:6A:D0:AC:A9:6A:B2:31:30:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:39:b6:aa:41:67:48:6c:a1:29:51:34:7a:f1:30:c8:50:6a: c2:3b:58:a5:d1:74:14:48:ac:63:49:5b:b9:28:18:bb:36:02: a3:fb:64:58:8d:77:de:c1:61:11:b4:25:b4:c0:e7:93:2a:d9: 29:51:47:e9:e3:51:2e:59:ca:da:2b:0e:3d:ff:99:c8:fd:62: 58:3f:49:48:dd:c1:44:46:70:bc:ec:3a:6d:bd:73:71:c2:0b: b0:63:fc:bb:b4:22:f0:3f:12:21:fc:e0:d8:08:16:e1:2d:ff: d9:c4:06:10:7f:b1:26:08:d9:35:aa:f3:d7:23:5d:a4:05:09: e7:1f:49:ae:2c:aa:cc:e0:d5:51:66:e6:66:f9:ef:ca:52:c3: 84:e7:10:20:6a:8f:5b:7e:c6:d5:34:2d:a0:38:fc:38:05:a6: 38:73:fd:64:a5:0f:cb:d3:49:e5:c8:d1:83:0f:96:1f:d6:e1: 3e:bd:53:c5:7f:a4:47:48:58:71:c2:3e:ff:78:b1:50:f7:b7: 4c:62:dd:c7:52:0b:13:0f:64:fb:7a:dd:e0:94:77:b4:c0:53: 76:3d:a8:0c:3e:e4:a7:0e:ae:9e:ea:77:2c:ab:03:21:02:a8: 69:36:ff:22:23:b9:df:ad:36:8f:55:01:e0:b3:71:db:48:32: 8e:b8:ce:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPJF+uDsY2U1ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTlmNThhNjgtYTMwMC00OTRiLTljNmEtOGFmMzI1NTJlMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC4j5RgatcY3lbrhbGq7KXnXyPSkdnYkmiIZ FeE02MZALIKvTT9B0Hi7QR9b+cxeBS3vsciLn6iFXq8ze2Z68EFgk9GbVcHiu1n2 wEI3niIXiX4FFzh0xvF7SHCWwhHyX7EqRbIdrqWhFM+WclVMN0cbnXKxutEd7fWx OivhjNgINT2Nq6ePFfDTTpVC8nljNM2VlzsFYYNLSqEolnzO19c+h4y9kSbGmEUl DCp8hhtCijhcAkMQQ29LT9KxhG6lKlN/l7RqvjbtLY3In3sOLVG9Bl0TcN+6vqFz MDXQpTDMuP7Wx22Mhgj9M71yeOH/ThIf5ramCaNvXFRAlXrzYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOB5w0jAQTW7MBpwatCsqWqyMTDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY4OGZiMjctNTllNS0z NzRjLThlM2MtMTNkNjExOTkwMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVObaqQWdIbKEpUTR68TDIUGrCO1il0XQUSKxjSVu5KBi7NgKj+2RY jXfewWERtCW0wOeTKtkpUUfp41EuWcraKw49/5nI/WJYP0lI3cFERnC87DptvXNx wguwY/y7tCLwPxIh/ODYCBbhLf/ZxAYQf7EmCNk1qvPXI12kBQnnH0muLKrM4NVR ZuZm+e/KUsOE5xAgao9bfsbVNC2gOPw4BaY4c/1kpQ/L00nlyNGDD5Yf1uE+vVPF f6RHSFhxwj7/eLFQ97dMYt3HUgsTD2T7et3glHe0wFN2PagMPuSnDq6e6ncsqwMh AqhpNv8iI7nfrTaPVQHgs3HbSDKOuM5K -----END CERTIFICATE-----Generated at Sun May 11 08:20:26 2025 by rpki-client