$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: 0rFdId1bJbkoTpi2y3TWoZInBbAQD0up/Sdm6ypHgDI= Subject key identifier: AD:6E:F3:51:8F:80:4C:A0:12:BC:57:34:2B:37:34:EB:7A:18:C4:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7F249729ECB97FDAE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:f2:49:72:9e:cb:97:fd:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=bf288259-e896-40b7-a8c6-3e24210b0e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:53:4e:2c:dc:2a:17:04:45:a4:4c:63:e0: ab:8b:cb:2c:4c:87:d8:22:8f:8b:e4:44:d4:7c:64: 34:7f:dc:6c:98:fb:49:8c:a1:3c:cf:2a:49:24:71: 27:96:5e:2c:c7:e2:2f:4c:1a:55:70:05:a4:7b:65: 78:ed:f5:2b:bf:67:de:0e:20:b2:7e:95:6d:2b:45: 03:e1:88:a6:85:8e:d9:af:6a:b8:90:1b:3e:f3:17: ae:dd:9b:e7:4d:04:91:7a:5e:c9:72:72:da:8c:4a: b7:a6:4b:09:bc:ec:f1:e6:32:dd:ba:ab:95:36:86: e5:7d:4f:b4:af:31:0c:ab:50:b4:bc:12:68:9f:6f: 3d:b4:0e:fb:d2:80:ff:28:66:88:78:43:71:55:bf: b8:d2:b2:dc:2a:b9:a4:a5:f2:9a:8d:da:87:06:a1: 73:81:80:17:fa:aa:8e:c4:81:0d:8c:6d:7c:0e:37: 8e:28:77:0f:17:d5:93:52:72:34:bc:5f:1b:77:6c: af:e4:52:73:e9:d8:56:55:5a:09:95:f8:11:cf:32: b5:c4:65:df:45:03:e4:d2:19:0d:ff:c4:0d:6c:0d: 66:49:fe:62:56:bf:09:ea:46:08:48:eb:79:26:0d: 61:2b:72:6a:87:c4:2f:3b:a2:66:5d:63:6b:e1:4e: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:F3:51:8F:80:4C:A0:12:BC:57:34:2B:37:34:EB:7A:18:C4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:77:0d:d9:2d:8c:f0:08:cd:13:c3:c4:dd:46:59:9b:8c:94: 7b:4b:25:16:fe:9e:be:94:52:04:81:09:04:25:0c:11:8c:b9: 00:c5:ab:92:b5:a2:56:ce:e0:ad:0f:c9:d6:da:40:66:69:91: b1:5e:12:53:fb:bb:93:73:81:16:f3:07:f2:1e:71:79:3d:8e: 1c:0c:33:bf:ed:63:cf:a9:54:5a:dc:af:67:ec:15:d7:d6:46: 80:de:1f:e4:b2:71:9e:70:95:58:8d:8c:16:72:83:52:9e:82: 8c:11:8d:ee:cf:1c:53:23:ff:db:44:20:3c:8a:96:40:0b:fc: 50:59:76:0e:4b:45:ea:3f:f6:90:52:70:d8:32:0d:2a:98:98: 6a:5b:5a:2f:64:48:a8:c7:5d:1e:eb:53:c8:ef:e3:29:f6:86: 74:06:4b:7e:37:12:f8:d4:88:77:74:4e:e8:f8:73:c7:0e:64: f8:7d:6a:cf:e1:40:ed:f8:04:3e:d8:70:b6:d7:7d:c6:4b:9a: 28:e1:17:a6:37:ca:1c:7c:11:94:c0:8a:45:dc:c7:43:36:ed: 31:75:06:32:d1:f6:17:5e:d8:58:92:cd:0d:c8:59:78:dd:43: 32:ea:c7:1d:9c:3a:16:4f:a6:c8:01:44:35:6e:ea:35:fc:a7: f3:5c:91:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPfySXKey5f9roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YmYyODgyNTktZTg5Ni00MGI3LWE4YzYtM2UyNDIxMGIwZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pTTizcKhcERaRMY+Cri8ssTIfYIo+L5ETU fGQ0f9xsmPtJjKE8zypJJHEnll4sx+IvTBpVcAWke2V47fUrv2feDiCyfpVtK0UD 4YimhY7Zr2q4kBs+8xeu3ZvnTQSRel7JcnLajEq3pksJvOzx5jLduquVNoblfU+0 rzEMq1C0vBJon289tA770oD/KGaIeENxVb+40rLcKrmkpfKajdqHBqFzgYAX+qqO xIENjG18DjeOKHcPF9WTUnI0vF8bd2yv5FJz6dhWVVoJlfgRzzK1xGXfRQPk0hkN /8QNbA1mSf5iVr8J6kYISOt5Jg1hK3Jqh8QvO6JmXWNr4U6yawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK1u81GPgEygErxXNCs3NOt6GMQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHdw3ZLYzwCM0Tw8TdRlmbjJR7SyUW/p6+lFIEgQkEJQwRjLkAxauS taJWzuCtD8nW2kBmaZGxXhJT+7uTc4EW8wfyHnF5PY4cDDO/7WPPqVRa3K9n7BXX 1kaA3h/ksnGecJVYjYwWcoNSnoKMEY3uzxxTI//bRCA8ipZAC/xQWXYOS0XqP/aQ UnDYMg0qmJhqW1ovZEiox10e61PI7+Mp9oZ0Bkt+NxL41Ih3dE7o+HPHDmT4fWrP 4UDt+AQ+2HC2133GS5oo4RemN8ocfBGUwIpF3MdDNu0xdQYy0fYXXthYks0NyFl4 3UMy6scdnDoWT6bIAUQ1buo1/KfzXJHl -----END CERTIFICATE-----Generated at Sun May 11 08:16:49 2025 by rpki-client