$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa File: f8572b75-cff9-35aa-b031-036f8f47dec8.roa (raw, json) Hash identifier: nvltE4r5hNV13l+7bPEVecNPAnZp82vrvzH9/l0YdmI= Subject key identifier: B8:8B:37:78:3C:FE:36:2D:51:45:5D:E5:78:21:E3:D1:E5:02:BF:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F2175A4DC2AD85C9B060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396590 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:17:5a:4d:c2:ad:85:c9:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=cc52124b-8f40-4731-b4e9-54c12cffceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:e3:5c:3c:76:77:76:50:da:fb:bf:5d:55: 8b:e5:66:cc:f3:e3:4e:4e:b3:26:36:65:c2:00:b0: 5e:f7:21:d0:6c:a9:ab:75:6e:4f:d2:f2:39:39:42: 07:b0:d5:ce:e9:72:21:70:43:5c:35:f1:29:ea:73: dd:3c:e0:94:0e:af:c0:ce:2d:ff:4f:ca:6e:8b:40: c6:f3:65:8a:6c:2c:c9:12:34:93:e6:e8:66:0f:29: ec:7e:cf:7f:ba:bf:cb:39:cc:e3:b0:53:56:e9:d8: 9d:9e:8a:fc:1f:cc:46:41:81:1f:65:af:13:d8:79: 5a:11:84:92:c5:2b:42:de:dd:b0:7d:30:ec:ea:cc: 85:13:83:c9:f6:3b:9a:a0:fe:c3:23:68:bf:4f:b0: 65:67:d7:ff:bc:17:57:08:f6:c4:25:94:47:f8:cb: 8f:4f:9a:cc:e3:e7:1e:a5:7e:11:1f:5d:fb:ff:36: af:9a:0b:73:8e:d0:26:20:c1:b3:dd:f1:44:d0:53: 75:66:a8:04:ad:68:b3:11:b5:b5:23:4f:97:ea:cf: 04:17:d7:1b:96:20:a2:68:b7:df:e8:ce:86:58:d4: a6:b5:63:fb:fe:59:86:2e:98:5d:b5:d6:e6:88:db: 56:f9:00:02:c1:00:aa:d4:df:63:ca:12:1c:8d:2a: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:37:78:3C:FE:36:2D:51:45:5D:E5:78:21:E3:D1:E5:02:BF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8b:d7:2e:2f:e8:f8:79:f4:e9:99:a4:04:7c:81:ed:b7:28: 87:cc:d4:6c:7a:03:97:a1:12:1b:d2:84:2f:52:8f:14:12:31: 16:f4:d1:5c:f0:20:7d:6b:2b:ae:8e:e9:e8:ed:1a:e9:a9:40: fa:1b:3a:11:21:68:ce:72:74:89:5b:ab:ee:a3:4f:e6:2f:49: 23:76:aa:a7:57:e8:c6:10:22:8f:d1:dd:f7:1e:2c:ab:99:a0: 94:d3:74:61:cf:b7:38:76:ae:f2:cb:32:f3:90:c6:a5:66:9e: 02:5d:a1:64:b5:d9:f7:53:50:0a:bf:08:d3:fe:75:20:e6:59: df:bd:b0:24:44:19:c8:09:9a:a6:10:51:58:4c:49:a5:d2:f8: aa:01:1d:5f:97:28:f2:b5:1f:56:2b:ac:a5:89:57:7f:6c:91: c2:04:1f:f2:16:a4:87:40:e5:96:cb:2e:1a:4b:4e:8b:b2:4c: 92:ee:e6:dd:69:9a:e3:19:e5:15:20:d2:be:da:0e:ee:10:10: 75:cb:81:5a:01:25:49:86:ef:7e:1f:cf:cf:3a:c5:ea:ba:e0: 9d:58:f0:56:4a:d2:57:d9:e4:96:64:92:41:33:bd:29:24:62: ca:f1:10:22:db:20:7a:35:42:96:20:aa:38:a6:da:a2:3c:2d: 05:91:b2:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPIXWk3CrYXJsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2M1MjEyNGItOGY0MC00NzMxLWI0ZTktNTRjMTJjZmZjZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl47jXDx2d3ZQ2vu/XVWL5WbM8+NOTrMmNmXC ALBe9yHQbKmrdW5P0vI5OUIHsNXO6XIhcENcNfEp6nPdPOCUDq/Azi3/T8pui0DG 82WKbCzJEjST5uhmDynsfs9/ur/LOczjsFNW6didnor8H8xGQYEfZa8T2HlaEYSS xStC3t2wfTDs6syFE4PJ9juaoP7DI2i/T7BlZ9f/vBdXCPbEJZRH+MuPT5rM4+ce pX4RH137/zavmgtzjtAmIMGz3fFE0FN1ZqgErWizEbW1I0+X6s8EF9cbliCiaLff 6M6GWNSmtWP7/lmGLphdtdbmiNtW+QACwQCq1N9jyhIcjSpObQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLiLN3g8/jYtUUVd5Xgh49HlAr+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg1NzJiNzUtY2ZmOS0z NWFhLWIwMzEtMDM2ZjhmNDdkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7i9cuL+j4efTpmaQEfIHttyiHzNRsegOXoRIb0oQvUo8UEjEW9NFc 8CB9ayuujuno7RrpqUD6GzoRIWjOcnSJW6vuo0/mL0kjdqqnV+jGECKP0d33Hiyr maCU03Rhz7c4dq7yyzLzkMalZp4CXaFktdn3U1AKvwjT/nUg5lnfvbAkRBnICZqm EFFYTEml0viqAR1flyjytR9WK6yliVd/bJHCBB/yFqSHQOWWyy4aS06LskyS7ubd aZrjGeUVINK+2g7uEBB1y4FaASVJhu9+H8/POsXquuCdWPBWStJX2eSWZJJBM70p JGLK8RAi2yB6NUKWIKo4ptqiPC0FkbIP -----END CERTIFICATE-----Generated at Sun May 11 06:18:29 2025 by rpki-client