$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json) Hash identifier: wASqItpmL6zxT6pVzZ0INVWvj148hqUXTrya6HKtfGw= Subject key identifier: 6D:61:9A:F6:88:58:11:A1:03:95:11:E0:4F:FD:6C:20:A9:1C:9B:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849CE9A724E494A1524FB956B98 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 216.87.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:72:4e:49:4a:15:24:fb:95:6b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e19a587c-f829-4a72-b0ab-adf60f463c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:7d:8e:d0:9b:c0:6e:ab:c6:20:06:44:52: e6:8d:8f:c0:27:3d:79:00:ce:13:7e:b5:65:8f:60: 11:f7:37:b9:72:92:14:f6:1f:07:e4:66:83:98:9a: b1:7a:02:63:e7:e2:23:82:3d:c4:2f:3e:b1:a0:56: 3e:17:dd:24:c6:94:c6:22:5c:dc:04:cf:22:21:5a: cf:69:74:2e:55:42:65:58:7d:6f:e8:66:b4:ab:2b: ac:e2:93:36:7b:27:f9:b8:a7:ca:4e:50:b9:fe:05: 58:da:7d:29:78:c7:bc:2c:01:d9:31:0a:9c:fb:c7: 2a:64:f9:34:91:df:35:7c:68:88:f7:88:c0:b0:1f: b7:28:f8:80:c1:a8:ee:6b:49:45:e2:cf:83:8c:93: 41:39:a0:46:cd:10:c2:95:f2:57:f7:9c:6a:3d:0d: 4a:b2:bc:a4:1f:b6:62:c5:99:bb:63:e8:ce:6e:b9: eb:47:e9:e6:a0:11:3c:3b:52:30:c4:52:6c:55:08: 65:9e:0b:8b:c1:3d:a8:c7:53:53:f8:b8:8e:30:b7: f4:cf:ad:9d:aa:8c:7f:96:ea:15:f0:db:80:77:05: ed:14:40:88:50:26:d3:03:dd:87:0d:26:9c:73:55: 7f:ac:b6:fd:39:d5:83:5a:55:8d:d0:1c:44:ae:51: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:9A:F6:88:58:11:A1:03:95:11:E0:4F:FD:6C:20:A9:1C:9B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bf:28:08:78:7c:f4:8a:5a:bc:4d:9a:ed:42:0d:5d:07:b5: 05:7e:94:b5:2e:44:f3:81:81:4e:4a:90:6f:25:67:d2:65:af: fe:98:b7:25:e5:73:20:f1:4f:86:40:43:de:51:3f:b6:f2:9e: ac:ba:0c:d0:ae:d4:fc:f9:16:49:aa:6b:6b:a0:21:a6:87:3e: 0b:15:70:db:1c:bb:d6:26:b4:f6:bd:a8:fe:72:d4:80:83:4f: 7f:5f:56:bf:94:ab:d0:1b:4b:bd:be:09:15:15:e4:7d:bb:67: ae:8a:bb:ea:74:c1:57:8d:a3:b2:49:4a:f3:b0:e1:48:ba:96: 7a:14:04:1f:44:a2:29:06:08:06:1e:44:9c:0c:a3:1c:98:45: a5:d0:9f:54:d4:3b:49:73:c0:98:a0:27:e8:9c:fd:7e:2d:57: ee:67:2d:1e:60:96:c3:40:6b:07:90:f8:ff:1d:51:e4:8f:ca: cc:d1:c2:a9:45:a9:e0:cb:d1:7c:21:c7:3d:6c:92:8c:37:bd: 81:b1:a9:cb:4c:40:63:9b:bb:7e:b4:2a:8a:97:ee:81:b3:e5: f6:0b:b1:a0:a5:55:cc:05:51:8a:1e:6a:84:61:f9:26:99:d4: 32:a3:36:90:1a:21:5b:30:4c:7d:d4:7a:cd:7e:c5:ea:2a:1d: c9:f8:c9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnJOSUoVJPuVa5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTE5YTU4N2MtZjgyOS00YTcyLWIwYWItYWRmNjBmNDYzYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI59jtCbwG6rxiAGRFLmjY/AJz15AM4TfrVl j2AR9ze5cpIU9h8H5GaDmJqxegJj5+Ijgj3ELz6xoFY+F90kxpTGIlzcBM8iIVrP aXQuVUJlWH1v6Ga0qyus4pM2eyf5uKfKTlC5/gVY2n0peMe8LAHZMQqc+8cqZPk0 kd81fGiI94jAsB+3KPiAwajua0lF4s+DjJNBOaBGzRDClfJX95xqPQ1KsrykH7Zi xZm7Y+jObrnrR+nmoBE8O1IwxFJsVQhlnguLwT2ox1NT+LiOMLf0z62dqox/luoV 8NuAdwXtFECIUCbTA92HDSacc1V/rLb9OdWDWlWN0BxErlG2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1hmvaIWBGhA5UR4E/9bCCpHJvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI1YzJlZmMtZTAyMS0z MjE3LTgwZTgtMjZmZTZiMjk3NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG/KAh4fPSKWrxNmu1CDV0HtQV+lLUuRPOBgU5KkG8lZ9Jlr/6YtyXl cyDxT4ZAQ95RP7bynqy6DNCu1Pz5Fkmqa2ugIaaHPgsVcNscu9YmtPa9qP5y1ICD T39fVr+Uq9AbS72+CRUV5H27Z66Ku+p0wVeNo7JJSvOw4Ui6lnoUBB9EoikGCAYe RJwMoxyYRaXQn1TUO0lzwJigJ+ic/X4tV+5nLR5glsNAaweQ+P8dUeSPyszRwqlF qeDL0Xwhxz1skow3vYGxqctMQGObu360KoqX7oGz5fYLsaClVcwFUYoeaoRh+SaZ 1DKjNpAaIVswTH3Ues1+xeoqHcn4yas= -----END CERTIFICATE-----Generated at Sun May 11 05:34:55 2025 by rpki-client