$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa File: cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa (raw, json) Hash identifier: rdLNowkAwulNlwN6hS34S9lOT8Er1O+z6exFEDcvdo4= Subject key identifier: 0A:CD:4E:E3:0A:91:89:6E:D0:C5:A2:98:A7:F3:49:50:8F:71:8C:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F2F48E88B2D8D73AD380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396615 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:f4:8e:88:b2:d8:d7:3a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=7bc80454-8b64-443b-a00a-fc0f2c931336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:26:c2:7e:57:72:81:3a:1e:e3:a8:29:d7: 2c:32:01:44:9e:00:8f:23:3f:cb:53:c8:9e:5f:23: 60:39:c6:df:77:9e:c2:e9:70:cb:70:bc:77:a2:82: 3c:2b:84:ae:68:40:89:7d:72:20:16:5f:f8:57:e3: 06:f9:ad:41:48:95:85:35:00:f1:f7:dd:4b:07:4f: 78:d7:54:a7:66:3e:af:79:d6:24:d0:c5:fe:a1:6a: da:52:37:fc:38:0a:49:d1:22:e7:4c:97:89:ab:c5: 90:af:2b:f5:43:79:b5:f3:fc:b9:df:46:56:d4:ed: 92:44:85:23:bf:f7:15:17:e2:6c:aa:23:e5:a6:08: ec:45:be:02:d8:94:d0:fc:92:bc:0a:e9:2e:cd:16: da:e1:d6:8e:b5:cc:eb:48:09:05:40:90:bb:64:02: 2a:b6:96:9a:50:a5:9e:75:d6:0e:68:70:24:8e:b1: 29:b5:b2:3f:f0:98:6a:f8:1f:4b:25:c8:aa:cb:b9: 04:20:4d:fc:5b:c7:67:e3:14:3b:94:18:bf:29:86: f2:12:b1:f2:80:a8:9d:23:ec:52:e9:d0:f3:9a:6f: e1:67:1e:b4:39:9d:a3:ee:35:35:72:dd:11:3e:4c: 1f:3e:b6:b0:4f:98:5f:00:ff:2b:8b:fb:87:14:a7: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CD:4E:E3:0A:91:89:6E:D0:C5:A2:98:A7:F3:49:50:8F:71:8C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e1:a4:a0:8a:e7:96:11:96:ad:a4:71:67:51:39:9a:21:7b: e3:da:9a:b0:21:9a:7d:4a:b2:f8:32:6a:21:29:ab:5b:57:c4: 47:e5:0c:2e:cc:1e:7c:72:72:b5:70:70:80:64:48:17:04:02: f0:bc:23:fc:6c:59:e8:40:e0:3d:18:06:4c:e9:b4:fa:e6:1a: 05:a0:0e:54:06:59:19:c2:fb:6d:d1:a2:9a:31:9f:f5:48:7f: 21:4e:64:30:8e:15:11:11:81:df:d0:23:17:29:23:11:e9:3b: 94:7e:d4:59:e4:3e:50:ca:d8:a6:19:a3:80:86:c8:56:55:f8: b1:31:d6:e9:21:ad:fa:02:80:d3:80:a8:77:3a:bb:09:a5:b2: 9e:16:39:bf:53:49:9d:15:ff:ed:a0:76:57:00:32:da:88:7b: 2c:4c:00:ac:31:ca:4d:56:54:21:31:41:86:c2:f5:20:a7:90: 70:47:3b:6b:47:c5:4e:47:8d:a2:6f:f0:fc:4c:a6:c5:dc:eb: 36:95:22:ea:39:48:60:24:c1:fe:ba:6e:fd:b2:a9:76:7e:e5: 2a:05:45:ed:28:d3:5d:46:c6:40:e5:73:49:4e:48:0b:73:c1: 6f:93:24:ea:75:8b:68:0d:83:74:a4:ef:29:c9:69:80:26:b8: 77:02:a0:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPL0joiy2Nc604AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk N2JjODA0NTQtOGI2NC00NDNiLWEwMGEtZmMwZjJjOTMxMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW8mwn5XcoE6HuOoKdcsMgFEngCPIz/LU8ie XyNgOcbfd57C6XDLcLx3ooI8K4SuaECJfXIgFl/4V+MG+a1BSJWFNQDx991LB094 11SnZj6vedYk0MX+oWraUjf8OApJ0SLnTJeJq8WQryv1Q3m18/y530ZW1O2SRIUj v/cVF+JsqiPlpgjsRb4C2JTQ/JK8CukuzRba4daOtczrSAkFQJC7ZAIqtpaaUKWe ddYOaHAkjrEptbI/8Jhq+B9LJciqy7kEIE38W8dn4xQ7lBi/KYbyErHygKidI+xS 6dDzmm/hZx60OZ2j7jU1ct0RPkwfPrawT5hfAP8ri/uHFKdvYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFArNTuMKkYlu0MWimKfzSVCPcYyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxZWFiMzctNGMwYy0z MzIwLWJmZTEtOThiZmJjN2NiMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBN4aSgiueWEZatpHFnUTmaIXvj2pqwIZp9SrL4MmohKatbV8RH5Qwu zB58cnK1cHCAZEgXBALwvCP8bFnoQOA9GAZM6bT65hoFoA5UBlkZwvtt0aKaMZ/1 SH8hTmQwjhUREYHf0CMXKSMR6TuUftRZ5D5QytimGaOAhshWVfixMdbpIa36AoDT gKh3OrsJpbKeFjm/U0mdFf/toHZXADLaiHssTACsMcpNVlQhMUGGwvUgp5BwRztr R8VOR42ib/D8TKbF3Os2lSLqOUhgJMH+um79sql2fuUqBUXtKNNdRsZA5XNJTkgL c8FvkyTqdYtoDYN0pO8pyWmAJrh3AqAa -----END CERTIFICATE-----Generated at Sun May 11 05:25:41 2025 by rpki-client