$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa File: fba7842e-3f6e-33fc-9737-af36fba97972.roa (raw, json) Hash identifier: 8ONupKtU3aBu06ZYXQXhOQGnx5EMB/77yD0VSQy4nB4= Subject key identifier: 9B:BD:E3:58:AD:85:23:CC:6A:43:49:29:B2:A5:A8:2F:C6:BC:07:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F566240919264AE9A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396564 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f5:66:24:09:19:26:4a:e9:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=2e7a3d3a-9ee3-486a-adeb-bbfb5e922d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:72:f8:ba:67:32:55:1d:26:5f:bc:e4:2c: 96:d6:c9:0b:7b:1b:0b:03:67:32:67:b5:68:13:ad: a7:5f:0e:00:d1:43:40:89:5a:d5:bd:a9:c2:54:6c: ef:bb:db:44:ba:af:de:ef:6c:c5:bf:65:2b:25:81: 05:1d:f0:6d:cd:9c:ba:7d:ac:6b:33:39:18:f6:aa: 19:9d:80:19:53:65:dc:54:39:40:73:a1:a7:27:1d: 69:e5:59:4f:06:a5:0c:86:7d:28:f1:c2:26:9e:1d: 11:4b:b5:ab:84:fc:b4:80:f5:8c:a1:6d:45:60:39: 75:fe:04:e9:d2:b9:38:c1:4d:e9:6b:68:e3:a2:4a: de:5e:26:bc:57:47:eb:90:73:fb:40:33:a3:ef:d1: 76:35:a3:6f:6a:2d:15:a0:de:35:5b:82:47:46:03: 1a:b6:c3:c5:38:ef:f9:0a:8c:e2:2e:90:eb:4f:f1: 9a:41:2c:2e:bd:f7:9a:50:5a:3f:51:b4:37:fa:72: 50:c5:a7:6c:dd:0f:a5:68:f5:61:1b:db:40:95:22: b7:43:c8:61:8d:3a:fa:c0:1c:b9:fc:c5:86:3f:07: 29:22:38:4f:19:26:cd:f6:c4:48:14:1a:34:b0:fc: 7e:46:3c:37:0e:66:ef:a6:a1:1a:22:ed:3f:08:3b: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:E3:58:AD:85:23:CC:6A:43:49:29:B2:A5:A8:2F:C6:BC:07:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:62:48:4b:40:0f:8c:e2:8a:15:80:7f:48:bd:49:5d:2f:22: b5:73:0b:f6:23:c7:3b:99:2c:8c:d9:c6:31:38:40:99:0c:7f: 6e:01:84:c1:22:58:60:42:a1:b5:05:86:5b:64:37:f8:9a:50: 61:12:ba:d9:81:fd:b7:0c:ec:74:82:5a:1d:75:26:b2:c7:73: 68:56:90:f8:b9:96:70:0e:99:63:9f:62:d3:bc:19:e5:0f:ee: 75:78:84:e7:3b:00:64:c1:ec:92:58:7b:de:4f:1a:ab:96:0c: 15:f2:75:df:e6:e4:c7:93:06:74:2b:08:d6:11:8f:04:8a:30: dc:9e:01:72:d3:47:31:18:2c:9c:32:e0:3e:6d:97:4a:58:be: 4a:98:a6:7a:5e:b0:96:1d:f5:1a:62:64:21:2d:26:f6:e6:77: c8:4c:e3:3a:3d:7d:03:f5:74:29:5c:1b:56:81:cf:38:c3:c8: 74:cd:38:45:1b:de:ac:8f:8f:ee:6b:b8:59:92:6a:c3:1b:7d: 51:a9:4c:72:75:d8:d8:38:14:55:f9:96:f5:0f:b1:0e:d2:25: d7:d3:bf:db:6d:8e:82:19:82:f5:9b:5e:05:ec:2d:95:a2:b4: 69:e1:81:96:78:9e:4f:1e:37:71:d5:52:b4:5e:6f:96:bd:f5: 82:62:c7:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPVmJAkZJkrppgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MmU3YTNkM2EtOWVlMy00ODZhLWFkZWItYmJmYjVlOTIyZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tly+LpnMlUdJl+85CyW1skLexsLA2cyZ7Vo E62nXw4A0UNAiVrVvanCVGzvu9tEuq/e72zFv2UrJYEFHfBtzZy6faxrMzkY9qoZ nYAZU2XcVDlAc6GnJx1p5VlPBqUMhn0o8cImnh0RS7WrhPy0gPWMoW1FYDl1/gTp 0rk4wU3pa2jjokreXia8V0frkHP7QDOj79F2NaNvai0VoN41W4JHRgMatsPFOO/5 CoziLpDrT/GaQSwuvfeaUFo/UbQ3+nJQxads3Q+laPVhG9tAlSK3Q8hhjTr6wBy5 /MWGPwcpIjhPGSbN9sRIFBo0sPx+Rjw3DmbvpqEaIu0/CDtFMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJu941ithSPMakNJKbKlqC/GvAeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJhNzg0MmUtM2Y2ZS0z M2ZjLTk3MzctYWYzNmZiYTk3OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPYkhLQA+M4ooVgH9IvUldLyK1cwv2I8c7mSyM2cYxOECZDH9uAYTB IlhgQqG1BYZbZDf4mlBhErrZgf23DOx0gloddSayx3NoVpD4uZZwDpljn2LTvBnl D+51eITnOwBkweySWHveTxqrlgwV8nXf5uTHkwZ0KwjWEY8EijDcngFy00cxGCyc MuA+bZdKWL5KmKZ6XrCWHfUaYmQhLSb25nfITOM6PX0D9XQpXBtWgc84w8h0zThF G96sj4/ua7hZkmrDG31RqUxyddjYOBRV+Zb1D7EO0iXX07/bbY6CGYL1m14F7C2V orRp4YGWeJ5PHjdx1VK0Xm+WvfWCYscS -----END CERTIFICATE-----Generated at Sun May 11 05:38:46 2025 by rpki-client