$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd483d9f-95f6-3e5e-b616-d3052e2e74e1.roa File: cd483d9f-95f6-3e5e-b616-d3052e2e74e1.roa (raw, json) Hash identifier: jX+FmnNR8mIabG3DE2mQX7FBoLEfM29qZ+yH0d5MbaQ= Subject key identifier: 75:F5:F2:A1:0E:9C:E3:14:61:5F:6A:50:77:B9:07:C4:92:A3:C2:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F90EE66EF6522E474B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd483d9f-95f6-3e5e-b616-d3052e2e74e1.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396579 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f9:0e:e6:6e:f6:52:2e:47:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=dcdc99e0-4ab8-4d25-92f1-7303a5373206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:77:78:c5:a1:b3:21:cd:b9:c0:0f:fa:c0: ea:0a:16:7a:e5:bb:d7:cf:f3:9e:c2:60:6f:b3:69: 6e:81:13:00:08:e0:45:37:ab:5e:75:a6:8c:ab:23: 88:01:ca:9e:59:15:7c:d5:4a:f2:55:fb:7f:57:ad: e1:63:ed:fb:7a:b6:a5:c0:a3:c2:da:68:e0:f2:e7: 5c:ab:ab:83:90:95:4c:87:63:98:46:46:fa:3d:e7: 30:b8:13:a9:12:2b:19:2e:1b:b7:27:8a:c6:98:93: a5:01:e7:66:ed:57:93:7c:0f:8d:f9:f6:e8:ac:c2: 81:55:62:da:03:86:fe:c7:63:16:70:58:36:92:48: 3f:f0:f4:cc:9f:bd:28:7a:d0:d1:0c:d9:82:19:9d: 92:bd:0c:21:c5:12:ab:f9:d9:3c:0c:51:96:63:42: 84:21:fb:94:b3:7b:e5:de:5b:73:b7:8d:2c:31:93: 68:37:13:69:63:c0:4f:c3:c1:b4:65:cf:58:e8:db: 1c:58:fc:53:ec:76:a3:70:a6:ea:13:27:6b:18:a1: cd:3b:71:3d:17:8f:96:14:43:66:ec:57:97:a0:a6: 51:f5:4f:fc:e7:fb:a4:97:33:20:0c:c8:7a:98:fe: b2:5b:e1:4f:a6:a3:83:d4:10:90:a4:04:90:7f:39: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F5:F2:A1:0E:9C:E3:14:61:5F:6A:50:77:B9:07:C4:92:A3:C2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd483d9f-95f6-3e5e-b616-d3052e2e74e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c6:cc:37:91:ce:85:ad:83:de:dd:64:fc:3e:26:24:f8:1d: a5:15:4e:e6:1c:0b:d6:12:44:4a:18:cc:09:8d:c9:db:6e:33: bf:da:84:57:ca:04:b2:db:b7:ff:13:89:7e:0e:54:b7:62:cb: 0f:08:80:82:58:47:b6:07:66:4d:5b:89:0f:25:e9:4a:13:20: 3e:df:95:1b:7d:12:e9:60:c4:24:1e:3b:56:a8:e6:1a:10:74: 2b:df:ed:8c:5d:41:1d:50:c9:15:d8:92:e3:54:ba:0f:73:c9: e5:2f:9f:f0:bf:a5:3c:f5:4e:79:1f:5c:23:4b:7c:26:1e:db: 92:00:45:d4:ce:29:df:6e:7f:6c:a1:0c:a8:3e:be:d2:c7:b6: ba:38:52:c2:77:73:93:7e:8a:33:53:a5:9c:a0:da:90:6f:f9: 0e:bf:5b:83:44:9b:e0:1b:9c:27:04:8d:5d:3a:86:33:66:11: 4e:ed:c3:98:30:cb:c3:65:43:0f:ed:44:dc:7b:63:96:41:23: 47:1d:b3:8c:6a:65:ab:1e:5f:42:5d:2f:b9:8b:18:3c:d8:7d: 4f:37:52:32:d9:c6:3d:d2:5e:55:19:9a:98:59:df:70:98:62: 31:30:60:98:d2:c1:0e:c7:fb:d3:ee:f6:a9:c0:cc:e9:f9:09: 5d:c9:22:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPkO5m72Ui5HS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGNkYzk5ZTAtNGFiOC00ZDI1LTkyZjEtNzMwM2E1MzczMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbd3eMWhsyHNucAP+sDqChZ65bvXz/OewmBv s2lugRMACOBFN6tedaaMqyOIAcqeWRV81UryVft/V63hY+37eralwKPC2mjg8udc q6uDkJVMh2OYRkb6PecwuBOpEisZLhu3J4rGmJOlAedm7VeTfA+N+fborMKBVWLa A4b+x2MWcFg2kkg/8PTMn70oetDRDNmCGZ2SvQwhxRKr+dk8DFGWY0KEIfuUs3vl 3ltzt40sMZNoNxNpY8BPw8G0Zc9Y6NscWPxT7HajcKbqEydrGKHNO3E9F4+WFENm 7FeXoKZR9U/85/uklzMgDMh6mP6yW+FPpqOD1BCQpASQfzlQrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHX18qEOnOMUYV9qUHe5B8SSo8KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q0ODNkOWYtOTVmNi0z ZTVlLWI2MTYtZDMwNTJlMmU3NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrxsw3kc6FrYPe3WT8PiYk+B2lFU7mHAvWEkRKGMwJjcnbbjO/2oRX ygSy27f/E4l+DlS3YssPCICCWEe2B2ZNW4kPJelKEyA+35UbfRLpYMQkHjtWqOYa EHQr3+2MXUEdUMkV2JLjVLoPc8nlL5/wv6U89U55H1wjS3wmHtuSAEXUzinfbn9s oQyoPr7Sx7a6OFLCd3OTfoozU6WcoNqQb/kOv1uDRJvgG5wnBI1dOoYzZhFO7cOY MMvDZUMP7UTce2OWQSNHHbOMamWrHl9CXS+5ixg82H1PN1Iy2cY90l5VGZqYWd9w mGIxMGCY0sEOx/vT7vapwMzp+QldySLz -----END CERTIFICATE-----Generated at Sun May 11 05:33:45 2025 by rpki-client