$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff4a6314-f360-3fca-a72b-ef76553d3645.roa File: ff4a6314-f360-3fca-a72b-ef76553d3645.roa (raw, json) Hash identifier: 76GvBhAkYN9GJYl/ShT8Pg0lQpmQK52ti259OAz8IVc= Subject key identifier: 2A:38:D9:3F:6B:A8:A3:FC:A1:A4:48:FF:BE:54:14:67:EA:48:03:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F438B3AE5F22CD0FB7A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff4a6314-f360-3fca-a72b-ef76553d3645.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396557 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f4:38:b3:ae:5f:22:cd:0f:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=550fedf9-e972-4db0-a9a9-c544bfa89e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:05:e6:72:28:f1:96:37:db:ed:44:7e:6e: fe:75:45:79:97:9a:c9:90:89:30:13:d6:59:8f:bd: 1b:9a:52:73:3f:71:97:ba:44:b7:54:e6:fd:bd:fe: 62:cf:a9:6d:c2:58:40:f0:ac:f9:5f:4f:7e:f3:77: 2d:9b:30:cc:47:e1:14:5c:ad:93:84:30:b9:e4:a2: 4b:9c:19:cd:c7:5e:2d:f8:38:0d:79:f7:45:4f:94: bc:92:76:40:f1:da:58:bb:d7:ca:d5:53:89:92:34: c8:6c:3b:a6:c5:68:66:0a:01:36:c4:dc:59:48:25: 10:6b:9c:ac:24:7e:52:17:f1:02:31:67:3a:84:1f: d7:4d:eb:4d:20:7b:c9:cb:ae:93:5f:f6:fe:2f:06: 23:5d:5f:0e:50:c6:b6:3a:ff:6c:14:68:0b:8e:e2: 3d:8f:8f:f0:63:90:d1:03:94:91:79:b1:96:c9:67: a2:47:2a:a9:b8:b1:86:a0:27:f5:76:a7:a4:34:c0: c9:92:f7:5d:01:d4:ba:c6:cd:fe:3c:6f:6d:4d:f5: bb:b6:c9:d5:bf:98:05:1a:db:07:77:2e:f5:eb:b5: 63:00:37:a1:71:58:06:62:78:78:6f:be:0a:af:39: 46:10:59:25:68:23:88:5c:3b:14:32:b2:17:a4:7e: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:D9:3F:6B:A8:A3:FC:A1:A4:48:FF:BE:54:14:67:EA:48:03:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff4a6314-f360-3fca-a72b-ef76553d3645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ab:5a:16:7f:bc:72:ca:cc:69:ba:8b:72:b3:54:db:56:da: c9:92:ca:3c:4d:3a:90:66:e7:a0:e4:a4:cf:c5:28:89:9f:22: d8:da:36:e7:c9:52:f8:ec:97:13:65:63:38:89:b5:88:07:2f: 64:35:f1:38:15:6f:1d:a1:56:da:58:55:67:2b:e7:d1:60:c5: d9:cd:79:0d:9b:21:75:e3:6f:58:8d:67:16:c9:fe:e1:18:bf: e6:6b:c6:26:e6:a1:74:4f:f7:ba:cd:56:d4:7d:c8:fd:d4:e7: f5:f5:04:01:e1:e6:b3:52:4c:83:29:5c:27:5a:f7:a2:ac:fb: fd:0a:9d:80:1c:36:2f:86:86:56:19:d8:94:24:7a:b9:48:c5: 5d:3e:4d:36:18:9e:53:a3:9f:01:05:ac:7c:34:0e:13:2b:f9: b7:35:64:bc:91:fc:62:5c:14:9e:28:1c:16:71:79:38:bf:cd: 6e:9d:74:c5:7c:8d:f7:ee:ec:8f:b2:9a:16:b5:30:63:fb:ad: 51:9c:81:f2:e3:75:d4:4b:95:1e:1c:bc:9c:1f:43:67:37:4c: d1:dd:74:c7:df:91:2e:1b:75:0d:58:fd:96:e1:e8:00:58:9d: c1:05:e8:40:a4:58:08:03:8b:ca:7b:98:a0:e6:7e:d2:c0:34: 47:02:cb:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPQ4s65fIs0Pt6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NTUwZmVkZjktZTk3Mi00ZGIwLWE5YTktYzU0NGJmYTg5ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHsF5nIo8ZY32+1Efm7+dUV5l5rJkIkwE9ZZ j70bmlJzP3GXukS3VOb9vf5iz6ltwlhA8Kz5X09+83ctmzDMR+EUXK2ThDC55KJL nBnNx14t+DgNefdFT5S8knZA8dpYu9fK1VOJkjTIbDumxWhmCgE2xNxZSCUQa5ys JH5SF/ECMWc6hB/XTetNIHvJy66TX/b+LwYjXV8OUMa2Ov9sFGgLjuI9j4/wY5DR A5SRebGWyWeiRyqpuLGGoCf1dqekNMDJkvddAdS6xs3+PG9tTfW7tsnVv5gFGtsH dy7167VjADehcVgGYnh4b74KrzlGEFklaCOIXDsUMrIXpH7HewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCo42T9rqKP8oaRI/75UFGfqSAM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmY0YTYzMTQtZjM2MC0z ZmNhLWE3MmItZWY3NjU1M2QzNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADq1oWf7xyysxpuotys1TbVtrJkso8TTqQZueg5KTPxSiJnyLY2jbn yVL47JcTZWM4ibWIBy9kNfE4FW8doVbaWFVnK+fRYMXZzXkNmyF1429YjWcWyf7h GL/ma8Ym5qF0T/e6zVbUfcj91Of19QQB4eazUkyDKVwnWveirPv9Cp2AHDYvhoZW GdiUJHq5SMVdPk02GJ5To58BBax8NA4TK/m3NWS8kfxiXBSeKBwWcXk4v81unXTF fI337uyPspoWtTBj+61RnIHy43XUS5UeHLycH0NnN0zR3XTH35EuG3UNWP2W4egA WJ3BBehApFgIA4vKe5ig5n7SwDRHAsvF -----END CERTIFICATE-----Generated at Mon May 12 05:35:00 2025 by rpki-client