$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa File: ded40ce0-4932-39e9-a836-18dddd32350f.roa (raw, json) Hash identifier: WDQ5GlLglzyH1wLSC+2tNkBqibhOKaqKphZWBAW8zBk= Subject key identifier: C7:5F:45:E3:A2:11:61:D7:2A:CB:A3:CF:0B:14:9A:F3:78:BA:DD:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F67C3BFCBF8DB7119D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396577 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f6:7c:3b:fc:bf:8d:b7:11:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1ad9855a-73bc-41c3-95ea-e17aebba1e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:aa:7a:ee:49:04:1c:34:dd:6e:90:bc:61: 09:7c:7b:97:c1:ad:1a:4c:a4:ef:c9:90:14:c4:b4: 1a:8b:fa:f8:73:1b:c7:43:82:53:cc:d5:34:1b:30: 4d:fa:1f:f3:75:75:e3:5f:c0:75:a0:0e:4e:cd:d9: 6d:39:27:4f:b5:6e:28:f5:38:e0:10:d6:0f:98:ba: 5e:24:d7:c5:68:01:d3:20:18:60:23:43:3f:57:48: 8b:ad:ba:46:af:c2:8f:fa:b6:f7:84:d5:11:f6:54: 60:31:27:58:32:95:36:36:a1:ff:e8:40:ae:bf:d2: 61:44:2b:b6:bb:da:fa:33:06:7c:0b:01:ff:cb:e7: 81:28:af:f1:a4:07:db:f9:c6:1a:91:3c:1c:c1:c9: 40:3b:eb:25:be:23:5b:a1:f0:f6:00:c1:62:e7:b0: 9a:b3:c9:fa:6a:f4:42:3b:3b:cf:ea:e2:22:3f:01: 60:2d:97:e3:6c:34:ba:5c:c7:93:1a:32:66:e2:a6: cf:20:e7:76:94:68:79:7e:1d:50:2f:12:23:cf:5e: ab:c8:9c:26:ab:7d:a8:65:6d:7a:c2:72:46:5c:6e: b2:3f:fb:0e:17:f1:d2:05:6a:46:61:82:66:61:f4: e3:04:5b:b2:86:b8:6d:2e:89:4d:79:de:f6:de:e5: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5F:45:E3:A2:11:61:D7:2A:CB:A3:CF:0B:14:9A:F3:78:BA:DD:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:12:b3:41:ac:57:4a:b4:c6:8b:e3:62:a1:a8:b1:d6:5d:85: 44:64:c2:8d:ed:48:24:10:86:cb:7a:0a:3b:fc:dd:14:73:64: ae:cc:05:cc:14:1d:1a:31:b3:90:16:39:59:22:60:61:dd:23: b1:fc:33:38:21:02:ce:0a:e1:40:89:f3:90:a1:16:60:4d:c1: e4:16:c6:d0:f9:47:48:92:c4:45:0e:83:91:d0:e4:57:ac:3f: df:00:7a:a7:75:32:4a:c3:b2:7a:3e:d7:6b:38:e8:ce:9f:ad: e2:68:3a:31:70:82:5f:03:9d:40:d7:d6:05:97:75:c0:62:df: 6f:12:c0:c3:62:9e:20:2b:c0:a1:3a:50:5b:ce:8a:c6:59:a9: 4e:27:46:98:e1:ef:47:8c:ee:85:17:a2:63:00:ad:b8:b3:5a: 31:06:cb:1c:e8:d3:44:2d:4d:75:8d:56:b2:0e:35:6e:b5:cd: 53:a1:d5:43:a8:9b:db:b0:9d:b3:c7:a9:47:1d:06:1c:bb:60: c5:86:d4:b3:27:47:fe:17:ac:47:22:22:74:90:40:51:3f:32: e9:cf:7a:48:06:8a:6f:a3:4c:1b:15:00:bb:71:05:75:05:cb: 20:49:8b:9d:b5:63:bd:28:ad:fa:04:a9:8f:a9:cf:26:bc:a0: a1:95:4f:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPZ8O/y/jbcRnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWFkOTg1NWEtNzNiYy00MWMzLTk1ZWEtZTE3YWViYmExZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmqeu5JBBw03W6QvGEJfHuXwa0aTKTvyZAU xLQai/r4cxvHQ4JTzNU0GzBN+h/zdXXjX8B1oA5OzdltOSdPtW4o9TjgENYPmLpe JNfFaAHTIBhgI0M/V0iLrbpGr8KP+rb3hNUR9lRgMSdYMpU2NqH/6ECuv9JhRCu2 u9r6MwZ8CwH/y+eBKK/xpAfb+cYakTwcwclAO+slviNbofD2AMFi57Cas8n6avRC OzvP6uIiPwFgLZfjbDS6XMeTGjJm4qbPIOd2lGh5fh1QLxIjz16ryJwmq32oZW16 wnJGXG6yP/sOF/HSBWpGYYJmYfTjBFuyhrhtLolNed723uVeNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMdfReOiEWHXKsujzwsUmvN4ut16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVkNDBjZTAtNDkzMi0z OWU5LWE4MzYtMThkZGRkMzIzNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXErNBrFdKtMaL42KhqLHWXYVEZMKN7UgkEIbLego7/N0Uc2SuzAXM FB0aMbOQFjlZImBh3SOx/DM4IQLOCuFAifOQoRZgTcHkFsbQ+UdIksRFDoOR0ORX rD/fAHqndTJKw7J6PtdrOOjOn63iaDoxcIJfA51A19YFl3XAYt9vEsDDYp4gK8Ch OlBbzorGWalOJ0aY4e9HjO6FF6JjAK24s1oxBssc6NNELU11jVayDjVutc1TodVD qJvbsJ2zx6lHHQYcu2DFhtSzJ0f+F6xHIiJ0kEBRPzLpz3pIBopvo0wbFQC7cQV1 BcsgSYudtWO9KK36BKmPqc8mvKChlU9C -----END CERTIFICATE-----Generated at Sun May 11 08:38:38 2025 by rpki-client