$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa File: bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa (raw, json) Hash identifier: JrOPfCJ56bmCsclIG8EoKi9+2YjdXhtDmBuArLXJ0h4= Subject key identifier: D2:BB:7A:5E:1A:0A:9F:16:0E:B0:3E:1C:1D:1C:9C:C0:4C:F6:21:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F6BCBD9421CCD223E600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396608 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:bc:bd:94:21:cc:d2:23:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=fe04acc6-0171-493c-a6b3-1473e111bc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:68:b3:24:c4:8f:57:95:80:ca:67:d1:7d: cd:9d:a6:8f:72:4c:01:8f:be:f4:88:33:3c:53:67: d2:9b:dd:b2:bb:33:29:7b:21:d4:4b:4b:00:62:bd: 34:ba:eb:d0:72:4f:55:79:19:00:39:48:4c:cf:dc: 21:7f:44:1a:be:a5:a2:ae:96:cb:50:84:49:3e:2b: b3:1d:b7:75:df:95:62:48:99:e2:06:67:88:be:47: ee:b2:f0:21:32:9e:3c:03:b8:57:d7:ae:34:e9:fb: 98:ac:c0:dd:0c:a6:ea:08:43:43:23:a7:a9:8b:82: 4d:50:a7:58:da:56:90:0c:de:33:dd:da:e7:54:85: dc:94:bc:fa:84:10:76:14:06:32:6e:16:62:62:66: 21:6d:8c:5b:b7:b0:66:27:23:6c:80:f8:82:4d:29: 83:80:06:71:9b:b6:34:73:f9:db:4c:5e:8a:e5:3d: a4:63:fd:68:cd:cd:c3:9a:74:bd:28:ed:4c:02:d7: 33:73:86:4a:a5:fb:6a:90:ce:a7:df:b4:de:aa:5e: a2:8e:e8:92:a1:48:08:fb:79:f3:2a:cd:43:4d:68: d4:f6:60:8b:48:a3:df:10:73:a8:78:0f:b1:75:e2: 9d:28:7a:a5:d6:34:dc:8f:d4:dd:3c:c9:8a:93:69: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:7A:5E:1A:0A:9F:16:0E:B0:3E:1C:1D:1C:9C:C0:4C:F6:21:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c9:d0:4d:6a:0e:da:31:91:c0:2c:72:4d:0f:0d:03:89:5d: e3:cf:a2:ce:2b:b8:97:25:f2:d1:75:35:7f:f8:a2:8c:22:07: 68:ff:9b:56:b7:d7:57:ac:bf:5e:57:35:00:d1:53:b2:ec:0d: 3c:f0:59:40:12:8d:e6:91:7f:13:2b:ba:81:59:b0:3d:9b:13: 70:22:db:74:00:63:a1:20:dc:2c:1f:bf:30:6d:7b:9d:21:f6: bb:c8:42:61:1a:42:85:73:8e:22:2b:31:46:af:e0:6d:c0:5b: c1:99:63:7c:7a:96:e5:c4:17:0b:0c:e0:33:24:b5:00:4c:4f: 03:e5:3c:93:0a:50:99:88:09:84:e6:b8:9c:9e:0b:8f:63:b5: 71:cc:7b:f5:1f:5a:3d:1b:6a:74:49:b6:1e:ce:7e:85:0d:a5: cc:3d:d1:ab:70:ec:2e:3e:50:f4:bb:85:8c:f1:ad:6e:65:3b: 53:a5:0c:39:45:7f:d8:83:01:d0:25:ca:20:f2:25:24:68:b8: 77:c4:ea:24:15:4d:b4:ff:13:c1:13:ff:73:16:45:f4:b6:e7: 68:fa:12:69:80:9d:95:3e:b5:9a:49:4f:5a:d2:a5:fc:f7:95: 5f:30:59:3e:ab:71:5a:42:21:81:2f:87:7d:4c:52:53:98:a2: 45:3d:52:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPa8vZQhzNIj5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmUwNGFjYzYtMDE3MS00OTNjLWE2YjMtMTQ3M2UxMTFiYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5osyTEj1eVgMpn0X3NnaaPckwBj770iDM8 U2fSm92yuzMpeyHUS0sAYr00uuvQck9VeRkAOUhMz9whf0QavqWirpbLUIRJPiuz Hbd135ViSJniBmeIvkfusvAhMp48A7hX16406fuYrMDdDKbqCENDI6epi4JNUKdY 2laQDN4z3drnVIXclLz6hBB2FAYybhZiYmYhbYxbt7BmJyNsgPiCTSmDgAZxm7Y0 c/nbTF6K5T2kY/1ozc3DmnS9KO1MAtczc4ZKpftqkM6n37Teql6ijuiSoUgI+3nz Ks1DTWjU9mCLSKPfEHOoeA+xdeKdKHql1jTcj9TdPMmKk2kgnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNK7el4aCp8WDrA+HB0cnMBM9iECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0MzM5YzItYWI1ZC0z YWQ5LTk4MDQtODdhMTQ4ZGZiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPydBNag7aMZHALHJNDw0DiV3jz6LOK7iXJfLRdTV/+KKMIgdo/5tW t9dXrL9eVzUA0VOy7A088FlAEo3mkX8TK7qBWbA9mxNwItt0AGOhINwsH78wbXud Ifa7yEJhGkKFc44iKzFGr+BtwFvBmWN8epblxBcLDOAzJLUATE8D5TyTClCZiAmE 5ricnguPY7VxzHv1H1o9G2p0SbYezn6FDaXMPdGrcOwuPlD0u4WM8a1uZTtTpQw5 RX/YgwHQJcog8iUkaLh3xOokFU20/xPBE/9zFkX0tudo+hJpgJ2VPrWaSU9a0qX8 95VfMFk+q3FaQiGBL4d9TFJTmKJFPVKi -----END CERTIFICATE-----Generated at Sun May 11 08:18:05 2025 by rpki-client