$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa File: c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa (raw, json) Hash identifier: H2nbKz4GM0ybh+LWFRSEEAT+QZQkRHghXZa+bo6rHPI= Subject key identifier: 3F:FD:F0:1F:83:21:C0:9A:BF:40:47:D8:63:14:6A:30:91:CB:B1:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F5FA19BB851B81AE79B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36623 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f5:fa:19:bb:85:1b:81:ae:79:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=86a5c87e-f147-4fe1-94bd-8322582ad743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:30:c2:ee:45:89:74:51:c1:1f:92:5b:89: 0d:2f:fb:34:d6:02:bc:85:36:8c:a1:e3:7a:ff:f8: b6:bc:10:b2:21:ea:fa:54:e3:5e:71:90:e9:dd:a7: b8:1a:0d:bc:c9:2b:72:fe:1d:fd:95:1c:e8:71:77: 25:fb:7b:88:0f:cf:fa:93:38:9b:18:cf:a9:ad:77: 4b:39:17:72:65:ce:3e:66:79:75:a8:6b:85:88:24: e8:b6:8f:71:8b:4d:e8:89:63:ab:e8:d4:b9:a1:a9: 40:02:2f:61:c5:b5:0d:9a:77:f1:9a:8c:ab:2e:0d: 9b:fe:2a:f4:8e:6f:ea:30:5f:ba:d2:f6:1b:1f:10: 4d:68:b4:40:71:59:e0:e4:47:bd:eb:29:37:7b:30: d8:a2:ef:c4:f0:2a:28:05:41:c4:4f:d5:3c:5c:50: 6a:9e:72:56:4d:b5:80:ab:db:35:f9:39:22:58:5e: 33:6f:4c:6c:be:0f:d9:3d:b1:c8:2f:84:f7:74:9b: 93:af:53:09:9c:de:57:80:ab:c8:4c:97:a5:5c:a0: b4:bf:ef:97:0d:5a:e4:8a:43:ed:24:12:08:20:50: 42:85:3a:b3:5c:d5:f7:f7:ea:3c:60:c7:66:97:11: 61:0f:e7:02:82:c2:d2:9a:dd:be:c9:b0:92:fa:f2: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:F0:1F:83:21:C0:9A:BF:40:47:D8:63:14:6A:30:91:CB:B1:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:93:6a:ed:b0:eb:fe:55:2a:69:ed:40:b4:6d:a9:1e:d1: d7:6b:37:63:67:b4:05:6a:ef:71:30:7a:07:d1:79:a2:f2:75: c6:61:98:65:62:e5:58:ca:c1:0c:ef:88:60:db:e0:6d:4e:fa: a8:0e:c6:1e:45:20:70:e6:9e:5d:d8:4f:9a:9f:46:9e:4d:71: d8:5c:4a:cf:87:56:b8:d1:e7:e9:0b:b7:08:3d:61:be:00:ba: e7:ae:bc:86:b0:b0:7c:b4:ac:7f:98:6d:c4:c8:c6:0d:8c:3a: c0:25:9b:94:9b:33:fb:10:cc:ac:b2:d6:be:e9:2f:2c:4a:46: 44:ae:6c:c4:bc:1a:bd:37:85:48:cb:b6:c3:82:c2:98:36:cb: 9e:e6:98:73:11:72:fe:a9:d1:20:30:2a:83:cc:0f:dd:a4:f9: 6f:7e:3d:5b:84:91:37:e8:7b:de:62:d0:fd:4a:6a:e9:af:68: cc:50:db:6e:0b:c0:79:51:05:c4:54:30:c3:f7:d9:16:fe:77: 4d:00:6f:f2:1c:32:c2:7d:c5:a8:e6:30:34:eb:53:04:ac:6d: 4e:a6:86:56:cb:34:26:d4:18:f1:d4:09:e1:65:7d:ae:4e:a6: 96:9b:fe:ae:e0:9f:c0:2a:4d:f5:d3:7d:83:a3:12:f2:d0:37: 6c:eb:be:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPX6GbuFG4GuebAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ODZhNWM4N2UtZjE0Ny00ZmUxLTk0YmQtODMyMjU4MmFkNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0wwu5FiXRRwR+SW4kNL/s01gK8hTaMoeN6 //i2vBCyIer6VONecZDp3ae4Gg28ySty/h39lRzocXcl+3uID8/6kzibGM+prXdL ORdyZc4+Znl1qGuFiCToto9xi03oiWOr6NS5oalAAi9hxbUNmnfxmoyrLg2b/ir0 jm/qMF+60vYbHxBNaLRAcVng5Ee96yk3ezDYou/E8CooBUHET9U8XFBqnnJWTbWA q9s1+TkiWF4zb0xsvg/ZPbHIL4T3dJuTr1MJnN5XgKvITJelXKC0v++XDVrkikPt JBIIIFBChTqzXNX39+o8YMdmlxFhD+cCgsLSmt2+ybCS+vJ1swIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/98B+DIcCav0BH2GMUajCRy7EVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzcyM2UxYjctOWZiOC0z MGNjLThiNWUtMWJiZjNkYTZlNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFk5Nq7bDr/lUqae1AtG2pHtHXazdjZ7QFau9xMHoH0Xmi8nXGYZhl YuVYysEM74hg2+BtTvqoDsYeRSBw5p5d2E+an0aeTXHYXErPh1a40efpC7cIPWG+ ALrnrryGsLB8tKx/mG3EyMYNjDrAJZuUmzP7EMyssta+6S8sSkZErmzEvBq9N4VI y7bDgsKYNsue5phzEXL+qdEgMCqDzA/dpPlvfj1bhJE36HveYtD9Smrpr2jMUNtu C8B5UQXEVDDD99kW/ndNAG/yHDLCfcWo5jA061MErG1OpoZWyzQm1Bjx1AnhZX2u TqaWm/6u4J/AKk31032DoxLy0Dds675l -----END CERTIFICATE-----Generated at Sun May 11 05:16:20 2025 by rpki-client