$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa File: fa1e13ce-9970-30d6-aad3-dea1431848fe.roa (raw, json) Hash identifier: yL6eSm7JdI4uW53qlZAQSX1Ufv4nVd/nzfX+Y9uZQfk= Subject key identifier: 16:C2:E5:44:F2:E6:C4:F7:E1:12:59:AD:CB:0A:CA:90:48:86:E4:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F292662EA4032F6DBC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396595 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f2:92:66:2e:a4:03:2f:6d:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=2e736042-7b70-4299-8c99-eaf16e8c00a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:51:bc:01:e2:20:0d:e3:ed:9a:56:8f:f4:db: b9:9e:62:14:6a:cc:44:b4:5a:bd:8a:0c:c9:74:c8: 3b:05:1f:7d:ab:25:f9:49:81:d4:11:28:45:d4:5d: 16:dd:8b:3d:b6:f0:65:74:50:d0:d9:b0:26:61:31: 5e:89:e8:1c:0d:14:3e:bf:91:e7:24:51:08:f9:eb: 91:7b:64:cc:63:64:67:5b:c6:e3:77:38:cc:d1:aa: e4:c2:9e:b3:79:fe:53:0f:6d:8c:0d:51:2e:99:0f: 5f:e0:f7:f8:4b:af:f4:72:ae:5d:d1:39:3f:02:77: bf:97:7e:1b:2b:f7:bb:13:89:5a:42:da:6a:e7:af: 28:0a:f1:cc:d8:36:1a:ef:67:1c:7e:4e:d3:df:86: 24:1c:58:3c:63:91:7c:1b:e6:c6:fa:41:c9:ba:99: 3e:f9:5e:a3:eb:ab:a7:53:02:42:8e:34:7c:60:5d: 11:f1:6b:e4:33:06:f1:5c:cb:46:f4:62:8d:95:8a: ce:a2:e6:c5:d0:ce:23:8f:62:72:d0:66:32:90:34: 0e:0b:07:5e:92:d7:21:00:a0:8d:11:aa:05:aa:77: 0b:7d:ae:bc:4a:a9:5d:b8:c1:43:dc:95:48:6b:af: 57:33:7d:d7:51:cc:f1:00:06:3d:e8:2e:dd:70:fe: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:E5:44:F2:E6:C4:F7:E1:12:59:AD:CB:0A:CA:90:48:86:E4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ba:e0:6e:5c:4a:0b:29:d6:07:8c:72:05:2f:53:26:c3:d4: 86:72:a5:c0:4e:01:be:27:a7:99:28:67:0b:d4:e2:f0:82:f0: 76:79:4b:8f:03:e2:d5:6e:16:52:8e:5d:74:72:05:78:bd:ca: 89:02:a1:fb:85:68:af:b7:57:73:6f:3d:40:b9:ec:5c:cb:70: a5:5d:5f:1c:02:33:59:a7:08:b4:ac:a9:76:01:08:e9:b6:3a: e2:f9:cc:c7:95:8f:bd:9f:fe:99:f7:6b:34:de:d1:3f:37:a7: cd:5c:6e:f0:c1:b7:a4:76:f4:29:b8:74:6c:b0:e8:1a:64:4d: 4d:72:02:58:d1:f4:09:07:b2:15:92:1e:a6:9d:f1:35:02:57: 0a:c8:de:91:86:a4:23:f8:cd:9f:3f:db:02:99:28:f6:a0:76: 78:44:91:da:35:f7:0c:17:55:89:06:62:5d:84:d9:b8:8c:f6: 48:2b:7f:19:56:2b:4c:93:a0:df:90:df:4a:b4:cc:18:f0:b4: 30:b7:cd:67:2f:1a:85:1a:7d:44:e1:7c:09:be:3c:a2:5a:13: a5:17:92:78:81:b1:9e:93:b8:6f:c7:1d:24:99:d9:28:00:c2: d3:85:ed:7d:94:1d:ee:3e:64:c2:32:23:7b:02:79:83:9b:de: 19:15:12:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPKSZi6kAy9tvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MmU3MzYwNDItN2I3MC00Mjk5LThjOTktZWFmMTZlOGMwMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71G8AeIgDePtmlaP9Nu5nmIUasxEtFq9igzJ dMg7BR99qyX5SYHUEShF1F0W3Ys9tvBldFDQ2bAmYTFeiegcDRQ+v5HnJFEI+euR e2TMY2RnW8bjdzjM0arkwp6zef5TD22MDVEumQ9f4Pf4S6/0cq5d0Tk/Ane/l34b K/e7E4laQtpq568oCvHM2DYa72ccfk7T34YkHFg8Y5F8G+bG+kHJupk++V6j66un UwJCjjR8YF0R8WvkMwbxXMtG9GKNlYrOoubF0M4jj2Jy0GYykDQOCwdektchAKCN EaoFqncLfa68SqlduMFD3JVIa69XM33XUczxAAY96C7dcP5jPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBbC5UTy5sT34RJZrcsKypBIhuS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmExZTEzY2UtOTk3MC0z MGQ2LWFhZDMtZGVhMTQzMTg0OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRuuBuXEoLKdYHjHIFL1Mmw9SGcqXATgG+J6eZKGcL1OLwgvB2eUuP A+LVbhZSjl10cgV4vcqJAqH7hWivt1dzbz1Auexcy3ClXV8cAjNZpwi0rKl2AQjp tjri+czHlY+9n/6Z92s03tE/N6fNXG7wwbekdvQpuHRssOgaZE1NcgJY0fQJB7IV kh6mnfE1AlcKyN6RhqQj+M2fP9sCmSj2oHZ4RJHaNfcMF1WJBmJdhNm4jPZIK38Z VitMk6DfkN9KtMwY8LQwt81nLxqFGn1E4XwJvjyiWhOlF5J4gbGek7hvxx0kmdko AMLThe19lB3uPmTCMiN7AnmDm94ZFRL9 -----END CERTIFICATE-----Generated at Sun May 11 05:38:50 2025 by rpki-client