$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1890d0f-4b75-37d5-b336-1f4b9ba800ed.roa File: f1890d0f-4b75-37d5-b336-1f4b9ba800ed.roa (raw, json) Hash identifier: voeXGESCeuYdYUkG82ACcezZ9MeVqkYvc4FvsimGesg= Subject key identifier: DA:73:F1:73:BA:85:30:26:6D:37:75:18:FB:54:00:CC:B7:93:C3:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7D731053480424AF000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1890d0f-4b75-37d5-b336-1f4b9ba800ed.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396593 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:d7:31:05:34:80:42:4a:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=d6280e4b-72ff-4ff4-ae02-cbf402281bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:8d:6b:3f:c3:e0:fb:40:28:0c:22:5e:83: eb:94:a9:86:8b:3e:8f:fe:b7:41:f3:94:1c:4b:db: 86:43:a7:9a:9b:e6:97:65:be:70:0a:6b:31:62:9b: 02:f7:40:81:fb:09:84:5c:b7:fd:cc:2e:62:8d:a4: 75:4a:05:0d:04:0e:e5:aa:1f:55:40:5d:7e:73:91: 14:66:ab:96:6b:66:42:df:54:45:93:ec:90:85:47: ea:66:0d:8e:d9:0b:7b:8a:b6:f8:10:df:11:1c:26: d6:1d:5e:ec:61:c9:72:cf:18:af:b6:19:d6:ea:43: 0b:c5:e3:f5:21:f4:1c:80:bc:8a:87:1d:f3:6f:dd: 53:d9:a8:2b:49:82:d1:5c:2c:6f:cc:03:85:e0:d8: 3a:3f:af:55:3f:0f:f0:b7:ca:24:91:4e:cf:96:cd: fa:d4:45:97:5f:1e:5a:f5:d1:c8:0e:8a:6c:e9:5f: be:89:45:98:1a:0f:55:ea:58:0b:0b:91:74:47:87: 5e:23:61:c1:d7:31:6d:ea:21:5b:ab:7a:e6:c4:c7: 17:3a:65:22:b8:3a:33:59:16:c0:ea:d0:a3:72:c5: cb:72:f4:77:e2:c8:de:b5:77:92:02:d1:b2:29:c3: 66:1f:9b:81:c0:83:ae:4e:39:69:30:03:cd:63:23: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:73:F1:73:BA:85:30:26:6D:37:75:18:FB:54:00:CC:B7:93:C3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1890d0f-4b75-37d5-b336-1f4b9ba800ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0c:0f:38:45:21:76:d7:a8:e1:58:d6:44:96:24:cc:17:60: 92:df:d9:6d:3d:6a:34:d5:50:8d:66:49:e1:73:20:55:c6:f0: de:1f:5d:ac:4a:d9:23:fe:a0:05:36:f6:e1:47:57:40:ab:5a: 53:b8:29:6e:2b:06:70:02:20:a6:8a:8b:08:a8:4b:9d:e3:cb: 1a:9a:b2:09:87:94:06:10:1a:bf:ab:1e:b7:70:8f:bb:c8:a8: f4:3d:6f:63:e1:35:55:fd:47:5a:db:7a:50:b6:ad:fa:cf:1d: 09:fc:13:22:22:f1:31:d1:a3:0a:03:74:63:05:f1:e0:24:83: c5:9e:37:50:6a:27:c5:e4:ab:db:01:d7:5b:c2:20:53:30:86: 5f:1d:45:b3:3a:ba:12:38:3d:b7:e3:44:ca:79:f4:59:a5:2c: 8a:b4:01:4b:63:35:d8:57:ca:a9:5f:9a:71:7b:54:42:fc:31: 45:65:4b:b1:09:41:1a:bc:71:f6:9b:5b:c2:3e:a5:c1:9b:20: d5:a4:e7:52:14:3f:70:d2:77:ec:85:83:32:e0:4d:ac:ef:d0: 59:9c:9c:38:67:c0:8a:1f:f8:a6:13:b5:af:d8:2a:b5:97:d3: cb:d5:aa:11:cc:95:dd:33:42:e0:71:6a:4d:28:52:28:6d:4a: d3:8c:94:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPfXMQU0gEJK8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDYyODBlNGItNzJmZi00ZmY0LWFlMDItY2JmNDAyMjgxYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yNaz/D4PtAKAwiXoPrlKmGiz6P/rdB85Qc S9uGQ6eam+aXZb5wCmsxYpsC90CB+wmEXLf9zC5ijaR1SgUNBA7lqh9VQF1+c5EU ZquWa2ZC31RFk+yQhUfqZg2O2Qt7irb4EN8RHCbWHV7sYclyzxivthnW6kMLxeP1 IfQcgLyKhx3zb91T2agrSYLRXCxvzAOF4Ng6P69VPw/wt8okkU7Pls361EWXXx5a 9dHIDops6V++iUWYGg9V6lgLC5F0R4deI2HB1zFt6iFbq3rmxMcXOmUiuDozWRbA 6tCjcsXLcvR34sjetXeSAtGyKcNmH5uBwIOuTjlpMAPNYyPPywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNpz8XO6hTAmbTd1GPtUAMy3k8OiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE4OTBkMGYtNGI3NS0z N2Q1LWIzMzYtMWY0YjliYTgwMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuDA84RSF216jhWNZEliTMF2CS39ltPWo01VCNZknhcyBVxvDeH12s Stkj/qAFNvbhR1dAq1pTuCluKwZwAiCmiosIqEud48samrIJh5QGEBq/qx63cI+7 yKj0PW9j4TVV/Uda23pQtq36zx0J/BMiIvEx0aMKA3RjBfHgJIPFnjdQaifF5Kvb AddbwiBTMIZfHUWzOroSOD2340TKefRZpSyKtAFLYzXYV8qpX5pxe1RC/DFFZUux CUEavHH2m1vCPqXBmyDVpOdSFD9w0nfshYMy4E2s79BZnJw4Z8CKH/imE7Wv2Cq1 l9PL1aoRzJXdM0LgcWpNKFIobUrTjJQU -----END CERTIFICATE-----Generated at Sun May 11 08:17:55 2025 by rpki-client