$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa File: e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa (raw, json) Hash identifier: sfAldAIJNHOYTUvK6xYXSlAfj6Wdh2s22HT8bvp0Y/8= Subject key identifier: 16:16:75:09:7A:53:E0:E3:7E:7F:AA:4A:6D:0D:81:DC:F5:64:B3:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F4A6C49342953B266A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396541 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f4:a6:c4:93:42:95:3b:26:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=02c7d86a-f518-4ece-ba8f-4036f9fd3721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:29:32:68:18:0f:45:3b:87:1e:e6:c9:8b:d8: 66:ce:7f:e5:81:a9:1c:dd:47:78:77:e7:81:c4:0f: 3e:a4:c9:f2:ec:eb:79:b9:fc:45:00:2d:6e:78:95: a9:e0:3d:af:77:50:1b:a6:6e:87:c1:30:26:c6:72: 70:5c:a5:46:ad:13:a0:43:e6:27:92:12:38:ff:4c: 6a:57:66:c6:0a:62:f7:5c:ae:0f:73:de:77:f6:f6: d2:12:69:31:50:1a:3d:b1:75:5a:b4:4a:41:25:59: 11:4f:21:69:eb:e2:f0:2d:25:7f:85:49:2f:bc:e8: 23:0e:2d:55:06:dd:03:84:46:ea:78:23:b1:b4:c0: 71:5f:e6:3e:bd:2f:51:c0:a4:b8:f3:1b:08:77:25: e3:15:2d:77:01:f8:96:51:1f:3a:3d:cb:75:ab:8d: 38:90:0e:08:b7:68:2e:af:fb:e1:a3:44:c7:a9:e0: 55:35:57:cc:bb:43:f1:a0:4a:80:18:fb:c5:b9:52: ae:19:9d:c8:bf:7b:28:37:6d:1a:f7:54:28:c6:75: 68:b2:e4:ca:fe:36:f2:7a:19:77:26:66:a9:6d:94: 5f:2c:eb:df:15:c9:08:7a:b2:cf:fd:d5:d3:83:22: bb:20:e1:1c:a9:30:60:5a:8e:d8:66:be:d2:9e:0f: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:75:09:7A:53:E0:E3:7E:7F:AA:4A:6D:0D:81:DC:F5:64:B3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d6:aa:ee:36:12:98:ab:f1:6b:95:aa:32:ce:51:a5:45:2a: e2:0a:5e:05:2e:bb:2f:f3:04:a2:47:5e:39:6c:aa:e2:4a:39: 49:49:5d:62:b3:d7:b7:b6:de:cb:39:da:38:3b:c3:11:9d:3c: d1:4b:4a:43:5e:46:83:6b:db:97:ea:25:f6:45:62:15:9e:7a: cd:21:fe:99:cc:ab:fe:65:65:dd:ec:cc:2d:c7:18:b0:57:d5: 76:f4:b9:a6:81:27:b2:be:10:6b:12:ec:38:a5:21:55:30:7d: 34:18:21:53:86:8b:92:ec:6f:61:d4:00:35:6b:b0:f4:bf:80: eb:cf:43:4f:36:0a:d3:ed:cf:15:73:c7:12:94:88:60:c1:b1: 89:53:ff:26:9b:ca:5c:f1:fd:7e:2d:50:ee:ac:c7:02:f5:18: 87:6e:57:52:ff:a1:df:eb:29:6a:89:ba:89:80:bc:6a:d8:74: 8d:e7:0d:10:a8:b8:8a:bd:af:22:f1:5a:4b:7b:fe:56:2d:46: 2e:8e:ee:d4:62:6c:50:98:49:67:b9:98:c9:d5:aa:ac:33:d6: b3:fe:3e:b3:4f:17:4f:59:9f:a7:77:c4:03:ea:0b:8b:9b:2a: 62:bd:6f:08:1d:9b:5e:b7:f2:d5:ef:3c:d8:d8:2c:da:3e:8d: 58:47:c0:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPSmxJNClTsmagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MDJjN2Q4NmEtZjUxOC00ZWNlLWJhOGYtNDAzNmY5ZmQzNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhikyaBgPRTuHHubJi9hmzn/lgakc3Ud4d+eB xA8+pMny7Ot5ufxFAC1ueJWp4D2vd1Abpm6HwTAmxnJwXKVGrROgQ+YnkhI4/0xq V2bGCmL3XK4Pc9539vbSEmkxUBo9sXVatEpBJVkRTyFp6+LwLSV/hUkvvOgjDi1V Bt0DhEbqeCOxtMBxX+Y+vS9RwKS48xsIdyXjFS13AfiWUR86Pct1q404kA4It2gu r/vho0THqeBVNVfMu0PxoEqAGPvFuVKuGZ3Iv3soN20a91QoxnVosuTK/jbyehl3 JmapbZRfLOvfFckIerLP/dXTgyK7IOEcqTBgWo7YZr7Sng8H/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBYWdQl6U+Djfn+qSm0Ngdz1ZLOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTgwYTllMWQtZTkyYi0z MTc3LTk1MzgtZDJmYTQwZmE5ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJ1qruNhKYq/FrlaoyzlGlRSriCl4FLrsv8wSiR145bKriSjlJSV1i s9e3tt7LOdo4O8MRnTzRS0pDXkaDa9uX6iX2RWIVnnrNIf6ZzKv+ZWXd7Mwtxxiw V9V29LmmgSeyvhBrEuw4pSFVMH00GCFThouS7G9h1AA1a7D0v4Drz0NPNgrT7c8V c8cSlIhgwbGJU/8mm8pc8f1+LVDurMcC9RiHbldS/6Hf6ylqibqJgLxq2HSN5w0Q qLiKva8i8VpLe/5WLUYuju7UYmxQmElnuZjJ1aqsM9az/j6zTxdPWZ+nd8QD6guL mypivW8IHZtet/LV7zzY2CzaPo1YR8As -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:46 2025 by rpki-client