$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa File: c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa (raw, json) Hash identifier: BdwU2YgRPU6QyRWJEdOVBTfp/3qAohnObjJNAUfbQMw= Subject key identifier: 83:E4:AA:BF:9D:10:1D:8A:68:61:BC:F1:B7:7F:E9:C1:1C:25:6A:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F6504DA4214993A0F880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396563 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:50:4d:a4:21:49:93:a0:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=d9a3e4c6-e0b3-4bf6-804d-0824db5c0221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:34:9a:89:ae:84:6d:3e:f0:50:81:33:49: 6b:6e:ba:04:53:ce:cb:ec:12:73:62:88:f4:17:60: 09:d4:4a:20:30:3e:c7:3e:53:0f:3e:1d:d7:ba:15: 6b:a2:5a:bc:1a:7b:e7:09:60:26:8f:05:b1:61:59: 56:6f:29:e6:41:e5:e0:3b:39:87:b9:f5:85:93:b5: 41:62:66:3b:4c:29:63:73:f5:e8:02:fc:f3:96:46: 49:34:a2:ef:65:dc:6f:2b:7f:7a:b3:c0:43:1d:55: 31:fe:96:7c:84:0f:e2:1d:c5:70:83:b4:57:0e:97: da:87:b3:60:fa:16:96:96:19:81:c6:ee:02:04:ac: f5:4b:86:78:7e:03:97:aa:11:2b:12:1f:a5:b4:03: ae:00:5c:22:65:69:27:4d:cf:c1:f4:15:fc:a9:e7: f4:2c:13:97:67:8b:0c:f9:0e:2a:b6:e4:90:e2:2a: 7e:e4:cf:b1:96:55:f0:a0:2e:a4:58:3c:0e:cd:bb: 48:c2:7f:04:ce:6d:43:a3:df:c0:ee:ff:a8:fc:94: 46:ae:0f:bf:15:7b:8b:c8:8b:54:8a:d2:b9:ba:f0: 58:a7:43:28:11:06:e8:a8:a4:39:6e:72:2e:6d:52: 0f:ea:18:09:02:a6:c2:60:2b:1f:ca:e7:b2:55:ab: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:AA:BF:9D:10:1D:8A:68:61:BC:F1:B7:7F:E9:C1:1C:25:6A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cb:9e:07:c5:21:71:7d:33:7c:b5:92:01:1e:11:de:67:48: c6:bb:11:cf:51:43:96:f3:13:4d:a6:57:94:fd:5f:65:ce:f3: eb:11:86:45:bb:e5:49:b7:8c:0f:ae:85:a4:42:7e:0c:cd:72: 0d:7a:f6:12:43:3c:93:9b:98:91:5a:46:72:53:42:1c:1b:be: ed:55:26:43:77:5b:9b:0e:4b:fe:e9:36:d3:9d:ed:57:1a:74: 78:68:48:49:62:fc:89:bf:96:d7:0a:8d:f7:6e:2f:e8:d9:b7: 12:3e:47:99:3f:3f:27:d7:db:dc:6a:44:a3:8b:00:36:01:74: 1f:e3:c9:fc:17:49:93:48:5a:e4:ae:2f:4d:5c:e5:f6:26:6d: c0:9e:e0:b1:01:2a:c6:ac:77:2a:db:a5:d0:e9:4c:a2:16:aa: fe:6e:35:0a:c5:77:ba:b4:94:37:c1:f7:ba:33:51:71:69:4d: e0:b0:2d:f4:fc:5e:0f:10:23:28:ea:8d:38:41:d3:e4:53:76: cb:eb:8d:de:7a:34:04:ef:07:b8:26:db:0f:e6:b7:a8:0b:fe: 2e:cd:db:15:55:83:87:31:4d:07:14:65:ba:e3:98:06:8b:4d: 69:b9:0a:b5:f6:f4:47:62:1e:62:ce:0e:47:70:46:69:92:61: e8:e2:d0:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPZQTaQhSZOg+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDlhM2U0YzYtZTBiMy00YmY2LTgwNGQtMDgyNGRiNWMwMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4w0momuhG0+8FCBM0lrbroEU87L7BJzYoj0 F2AJ1EogMD7HPlMPPh3XuhVrolq8GnvnCWAmjwWxYVlWbynmQeXgOzmHufWFk7VB YmY7TCljc/XoAvzzlkZJNKLvZdxvK396s8BDHVUx/pZ8hA/iHcVwg7RXDpfah7Ng +haWlhmBxu4CBKz1S4Z4fgOXqhErEh+ltAOuAFwiZWknTc/B9BX8qef0LBOXZ4sM +Q4qtuSQ4ip+5M+xllXwoC6kWDwOzbtIwn8Ezm1Do9/A7v+o/JRGrg+/FXuLyItU itK5uvBYp0MoEQboqKQ5bnIubVIP6hgJAqbCYCsfyueyVat+EwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIPkqr+dEB2KaGG88bd/6cEcJWo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhhMWFlOWQtZmRmZS0z OGEzLWFlM2MtYjMxZjFmNzVlNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWy54HxSFxfTN8tZIBHhHeZ0jGuxHPUUOW8xNNpleU/V9lzvPrEYZF u+VJt4wProWkQn4MzXINevYSQzyTm5iRWkZyU0IcG77tVSZDd1ubDkv+6TbTne1X GnR4aEhJYvyJv5bXCo33bi/o2bcSPkeZPz8n19vcakSjiwA2AXQf48n8F0mTSFrk ri9NXOX2Jm3AnuCxASrGrHcq26XQ6UyiFqr+bjUKxXe6tJQ3wfe6M1FxaU3gsC30 /F4PECMo6o04QdPkU3bL643eejQE7we4JtsP5reoC/4uzdsVVYOHMU0HFGW645gG i01puQq19vRHYh5izg5HcEZpkmHo4tB8 -----END CERTIFICATE-----Generated at Sun May 11 05:22:43 2025 by rpki-client