$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa File: fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa (raw, json) Hash identifier: 39guKZIIoeq1NAVecpVTXQwW/C84mKVB6/3M6+qTsLY= Subject key identifier: 4B:FB:C4:E0:A1:F3:9D:EB:4D:22:76:E8:AD:8B:F3:1E:A5:64:B0:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F7514C1A1B61686B9100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396573 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:51:4c:1a:1b:61:68:6b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=76064a79-8fc6-47ec-9fbb-eeaa42040989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:6e:4e:fe:2f:57:07:5f:09:1b:9c:c6:b9: 60:98:16:6f:9d:a7:2c:a0:8e:38:c1:40:3c:4a:63: f7:d9:73:05:4d:fd:bd:6f:b6:06:95:de:54:d1:3c: 57:d7:13:00:67:9b:2e:32:2d:e2:22:ea:2a:86:5d: b6:20:b0:9d:aa:0b:fc:f0:70:0f:e1:28:85:b0:68: ba:6f:cb:55:e6:42:d1:93:74:78:87:2b:ed:06:91: 0a:b7:47:e4:8f:92:99:87:24:81:b9:78:5c:9d:2b: 67:5d:c8:16:63:45:cb:7d:bf:10:42:34:29:06:48: f8:48:08:80:5e:a9:0d:68:6f:12:0d:b7:b1:e9:10: 95:cf:20:ac:f3:55:1e:60:52:40:ab:21:c6:dd:b5: 65:05:00:f9:b7:a5:11:ba:8e:c9:df:9b:c8:9a:86: 8e:1b:9d:e9:fe:9c:8e:89:5c:2f:2f:d5:c6:4e:a9: 2c:6c:11:f1:ab:a2:81:d4:aa:63:07:04:0b:93:34: 29:09:67:83:1f:5b:10:fd:a1:5e:40:be:f2:0c:f2: ee:d7:ea:41:6d:79:d2:b7:f9:6d:d9:50:be:58:d2: 69:8a:3f:7c:e7:07:ec:2b:e0:88:b4:2b:63:be:c4: 06:c6:b0:15:6b:38:d8:3f:71:f1:d3:51:ce:b1:84: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:C4:E0:A1:F3:9D:EB:4D:22:76:E8:AD:8B:F3:1E:A5:64:B0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:80:5e:66:bb:5a:8d:5c:b7:78:0a:8c:08:42:18:3b:98:23: 85:28:72:7b:fb:2f:13:74:f1:46:a2:78:12:cb:c7:7f:db:05: 6d:6b:ce:61:e7:c1:4c:87:45:4c:fb:de:8d:67:d4:85:5b:fe: 3a:51:4d:fb:1a:45:84:37:8f:e0:f3:5a:82:74:f5:2e:ed:bf: 54:6d:4a:55:1a:15:33:64:c5:8c:02:13:bf:17:2b:d6:d3:d3: 48:d4:40:f9:27:81:cb:24:da:19:82:84:94:49:bf:8e:b0:71: 09:b1:9d:99:fc:32:bd:84:f0:aa:10:79:39:e7:4e:86:24:22: 00:8c:07:6c:c6:83:bd:7b:50:eb:f3:be:c4:e0:21:5f:0d:8b: 57:ca:83:e9:a2:50:95:46:57:49:fd:0f:a9:98:0f:7c:bf:be: 0b:c9:49:9c:69:04:92:de:2a:94:ca:c9:f2:16:da:db:28:93: 72:a1:8f:1b:28:12:76:20:85:9b:33:ca:3a:49:cc:cc:76:f3: d9:8b:51:2a:74:2f:93:69:f9:66:60:eb:d8:58:6a:3b:92:2e: 0b:83:99:39:ee:81:03:0a:12:39:d8:b5:2a:21:a4:1f:4c:2c: 82:9a:71:28:4d:ec:05:a3:a7:cb:46:70:f5:f2:ac:0e:97:d1: c3:db:76:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPdRTBobYWhrkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NzYwNjRhNzktOGZjNi00N2VjLTlmYmItZWVhYTQyMDQwOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA5uTv4vVwdfCRucxrlgmBZvnacsoI44wUA8 SmP32XMFTf29b7YGld5U0TxX1xMAZ5suMi3iIuoqhl22ILCdqgv88HAP4SiFsGi6 b8tV5kLRk3R4hyvtBpEKt0fkj5KZhySBuXhcnStnXcgWY0XLfb8QQjQpBkj4SAiA XqkNaG8SDbex6RCVzyCs81UeYFJAqyHG3bVlBQD5t6URuo7J35vImoaOG53p/pyO iVwvL9XGTqksbBHxq6KB1KpjBwQLkzQpCWeDH1sQ/aFeQL7yDPLu1+pBbXnSt/lt 2VC+WNJpij985wfsK+CItCtjvsQGxrAVazjYP3Hx01HOsYQ4RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEv7xOCh853rTSJ26K2L8x6lZLDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmU0ZmExYTAtZDI5Ny0z Mzg5LWJhZDMtMGU5YTBkYWNjYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAggF5mu1qNXLd4CowIQhg7mCOFKHJ7+y8TdPFGongSy8d/2wVta85h 58FMh0VM+96NZ9SFW/46UU37GkWEN4/g81qCdPUu7b9UbUpVGhUzZMWMAhO/FyvW 09NI1ED5J4HLJNoZgoSUSb+OsHEJsZ2Z/DK9hPCqEHk5506GJCIAjAdsxoO9e1Dr 877E4CFfDYtXyoPpolCVRldJ/Q+pmA98v74LyUmcaQSS3iqUysnyFtrbKJNyoY8b KBJ2IIWbM8o6SczMdvPZi1EqdC+TaflmYOvYWGo7ki4Lg5k57oEDChI52LUqIaQf TCyCmnEoTewFo6fLRnD18qwOl9HD23aK -----END CERTIFICATE-----Generated at Sun May 11 06:14:03 2025 by rpki-client