$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa File: f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json) Hash identifier: T/Sig/elSbDyjnXul2WTPsq9jgW1KJBRMtsGPbiGq/Q= Subject key identifier: 99:AF:7F:4F:3E:36:99:CB:4C:B3:52:20:30:63:5C:6A:CC:3D:EA:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7B5889A325730514078 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396610 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:b5:88:9a:32:57:30:51:40:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1db142b0-4dd3-4969-b725-496a8296277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:93:bb:a4:6f:1f:c0:f9:ca:91:6a:d2:21: 07:25:f2:55:d5:d4:3e:b3:b1:34:2d:6c:10:7f:0e: af:cb:6f:4b:e6:7c:4f:4b:d8:cc:8d:43:78:9b:e1: 24:e0:ae:13:a9:d6:d7:b0:2f:25:f0:59:64:ad:e6: c9:66:bf:8a:ff:7f:c9:c4:6d:c6:5f:80:6a:85:cb: 50:10:24:be:ed:a4:fc:63:4d:db:85:13:3c:79:2f: f1:e2:1d:40:28:cd:09:5d:b4:73:64:2a:64:f0:82: 8d:f3:55:54:30:21:4e:05:94:b8:f5:0f:f7:43:3b: f5:08:d2:4a:ff:9e:1e:f2:9c:47:67:af:eb:48:9e: b3:d9:88:17:fc:5b:12:30:79:f9:be:81:d0:65:9a: bd:2c:84:c5:69:93:20:c1:56:4e:a5:95:c9:67:40: fe:4c:0c:c6:b9:0d:26:5e:a1:41:19:99:04:ee:32: cb:1b:33:6d:f7:93:24:f9:1a:47:9d:ea:fd:b7:c9: d7:39:ff:0a:ee:5a:4e:a3:5a:52:a1:00:82:7b:9e: 66:be:0f:13:7f:e9:6c:1e:99:e8:6c:82:0e:11:7c: 5b:de:8f:90:c7:05:93:ae:73:de:6c:6e:ab:62:43: c5:26:1f:b1:cc:36:6d:a7:6d:1f:90:ac:95:8c:3a: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:7F:4F:3E:36:99:CB:4C:B3:52:20:30:63:5C:6A:CC:3D:EA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:59:8e:69:8d:7e:7d:ab:8c:a2:1a:2e:14:80:0b:10:b9:85: 05:b4:94:eb:a1:ac:69:73:4a:7a:c4:42:47:70:fa:aa:5b:b2: 81:fe:0c:2c:67:2f:00:ec:ba:d0:c8:fe:1f:15:1a:c2:b4:27: 9a:7f:c2:d1:33:ce:fa:86:b5:ac:85:6c:6d:55:b1:9e:8f:b6: 22:65:de:2f:97:18:72:e2:a0:31:63:80:ec:3f:5c:b0:8e:1a: 7c:cf:32:98:24:52:40:cb:b1:fc:59:21:c9:47:f2:ac:f4:39: 61:b6:ba:fa:df:24:ee:ba:a4:e8:b8:9a:f2:20:4d:5d:9e:6e: 07:25:f4:8a:62:0b:de:b0:4d:82:a8:07:d0:05:63:ec:0d:34: 1c:8e:66:0a:b0:8b:04:e3:65:e8:13:74:c3:56:b8:04:b0:a9: fd:02:ac:84:0c:0e:21:bc:33:b4:df:60:5b:26:3f:7b:9c:a8: 74:ff:8a:ca:6c:a3:d0:41:ed:7e:05:fd:6e:8e:4a:ba:3e:bc: e9:79:b6:40:1a:6f:e8:03:6e:92:c6:9c:34:1f:3e:9f:53:e9: c7:96:26:87:c9:1d:dd:a1:eb:32:04:90:d8:7e:dc:a8:a4:87: d3:84:63:60:48:78:59:f6:23:2e:f0:55:37:9a:f8:13:54:38: b3:e9:05:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPe1iJoyVzBRQHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWRiMTQyYjAtNGRkMy00OTY5LWI3MjUtNDk2YTgyOTYyNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8GTu6RvH8D5ypFq0iEHJfJV1dQ+s7E0LWwQ fw6vy29L5nxPS9jMjUN4m+Ek4K4TqdbXsC8l8FlkrebJZr+K/3/JxG3GX4BqhctQ ECS+7aT8Y03bhRM8eS/x4h1AKM0JXbRzZCpk8IKN81VUMCFOBZS49Q/3Qzv1CNJK /54e8pxHZ6/rSJ6z2YgX/FsSMHn5voHQZZq9LITFaZMgwVZOpZXJZ0D+TAzGuQ0m XqFBGZkE7jLLGzNt95Mk+RpHner9t8nXOf8K7lpOo1pSoQCCe55mvg8Tf+lsHpno bIIOEXxb3o+QxwWTrnPebG6rYkPFJh+xzDZtp20fkKyVjDrWlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJmvf08+NpnLTLNSIDBjXGrMPepyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE2NmQzM2UtMGJlOC0z ODdkLThhOTAtZWM5YTVkMjRhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxWY5pjX59q4yiGi4UgAsQuYUFtJTroaxpc0p6xEJHcPqqW7KB/gws Zy8A7LrQyP4fFRrCtCeaf8LRM876hrWshWxtVbGej7YiZd4vlxhy4qAxY4DsP1yw jhp8zzKYJFJAy7H8WSHJR/Ks9Dlhtrr63yTuuqTouJryIE1dnm4HJfSKYgvesE2C qAfQBWPsDTQcjmYKsIsE42XoE3TDVrgEsKn9AqyEDA4hvDO032BbJj97nKh0/4rK bKPQQe1+Bf1ujkq6PrzpebZAGm/oA26Sxpw0Hz6fU+nHliaHyR3doesyBJDYftyo pIfThGNgSHhZ9iMu8FU3mvgTVDiz6QXI -----END CERTIFICATE-----Generated at Sun May 11 05:30:32 2025 by rpki-client