$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa File: 1814f33e-9120-36ed-b07e-30d6034f9571.roa (raw, json) Hash identifier: MOihVxoVW5i2M9Nwv6FShNpfTvr3+r70db0x68Nfd60= Subject key identifier: 52:F4:05:06:DA:9D:33:F5:92:B4:0B:5D:A0:8A:5F:4F:38:88:F5:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F732E5B236527BD1B920 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 22547 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f7:32:e5:b2:36:52:7b:d1:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=e2b4be9f-2d2e-4e35-a3d2-7878971b8abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:a8:59:76:ec:5d:15:5c:44:75:ce:f9:e8: d0:82:0d:ca:d7:76:2d:b5:13:91:db:89:a3:e7:f6: f3:70:44:0c:36:d6:75:4b:e6:85:d6:69:56:b1:db: e8:55:7a:72:65:39:7b:39:09:de:10:03:34:a2:44: 10:83:ab:f5:52:1c:52:ba:ba:5c:33:52:53:a0:12: 19:43:33:af:08:55:54:ba:93:77:22:91:35:de:56: 12:93:9f:80:6e:15:e2:d9:7f:76:e2:7d:a1:66:01: 7f:f8:3d:71:6d:f3:46:ad:92:cc:05:cf:87:5e:ce: 06:25:f8:98:fd:c9:17:0d:86:b0:59:46:8c:ab:86: e9:96:8b:0f:96:60:45:4a:63:2e:95:69:3e:3e:ac: 26:12:89:7e:dd:89:26:38:5d:32:50:1a:76:39:3f: 1a:cc:54:55:70:7b:3b:f9:5b:c2:0a:bd:c4:b4:0f: 6c:f4:9b:37:8b:9b:61:2e:52:0d:59:6c:6a:7f:e9: f7:80:1f:dc:f9:dd:aa:0d:13:77:15:21:50:38:5a: 01:3e:83:33:df:40:04:b6:a5:0f:5d:3d:b2:1c:05: b9:98:40:25:97:91:9a:6b:2a:44:3f:b4:65:3a:76: c3:7d:d1:62:c1:2a:fb:86:ab:f9:79:1d:81:2b:2b: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F4:05:06:DA:9D:33:F5:92:B4:0B:5D:A0:8A:5F:4F:38:88:F5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9d:44:46:59:04:86:08:82:3a:d7:00:6f:9c:ce:58:cc:cc: 4a:c3:79:68:6e:bc:1d:4c:39:b3:a9:46:41:f8:62:74:01:5f: 25:51:aa:e4:64:6a:cc:cd:b2:f4:b6:72:26:59:3e:d6:d8:b7: 9e:42:3d:5d:c1:ab:8c:ac:3a:32:63:b1:ff:4a:fc:de:a0:b1: 55:5e:85:64:55:ea:a5:7f:a4:b4:0c:e4:33:c7:6e:4d:f4:04: 7a:ca:c5:98:2b:51:99:8b:3a:64:c8:d4:da:66:d9:ea:fe:8f: 8b:fa:bc:e8:9e:28:51:92:2f:43:9c:40:f9:92:f0:e4:e2:c0: 5c:9e:f8:77:be:1b:e2:51:db:75:95:d4:fc:f5:57:04:d2:65: bc:87:1a:17:ed:2a:76:42:3f:1d:02:90:f2:2c:61:31:35:95: 15:0e:d7:aa:df:99:39:e7:53:e3:8e:36:dc:68:70:ed:a4:ad: b2:41:4e:d7:50:02:80:91:ad:bb:57:87:cd:ca:fe:cd:1c:ae: 07:a6:99:a6:8b:fb:e9:6b:fa:eb:bd:84:4c:7d:49:a6:16:7a: 24:a9:23:98:fc:64:2b:35:af:f8:f9:7a:87:a4:ae:58:d5:c3: 2f:8c:a7:97:b2:17:0e:0b:8e:bd:cf:e7:cc:09:53:ef:53:15: d9:e0:1b:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPcy5bI2UnvRuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTJiNGJlOWYtMmQyZS00ZTM1LWEzZDItNzg3ODk3MWI4YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GSoWXbsXRVcRHXO+ejQgg3K13YttROR24mj 5/bzcEQMNtZ1S+aF1mlWsdvoVXpyZTl7OQneEAM0okQQg6v1UhxSurpcM1JToBIZ QzOvCFVUupN3IpE13lYSk5+AbhXi2X924n2hZgF/+D1xbfNGrZLMBc+HXs4GJfiY /ckXDYawWUaMq4bplosPlmBFSmMulWk+PqwmEol+3YkmOF0yUBp2OT8azFRVcHs7 +VvCCr3EtA9s9Js3i5thLlINWWxqf+n3gB/c+d2qDRN3FSFQOFoBPoMz30AEtqUP XT2yHAW5mEAll5GaaypEP7RlOnbDfdFiwSr7hqv5eR2BKysMFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFL0BQbanTP1krQLXaCKX084iPUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgxNGYzM2UtOTEyMC0z NmVkLWIwN2UtMzBkNjAzNGY5NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQnURGWQSGCII61wBvnM5YzMxKw3lobrwdTDmzqUZB+GJ0AV8lUark ZGrMzbL0tnImWT7W2LeeQj1dwauMrDoyY7H/SvzeoLFVXoVkVeqlf6S0DOQzx25N 9AR6ysWYK1GZizpkyNTaZtnq/o+L+rzonihRki9DnED5kvDk4sBcnvh3vhviUdt1 ldT89VcE0mW8hxoX7Sp2Qj8dApDyLGExNZUVDteq35k551PjjjbcaHDtpK2yQU7X UAKAka27V4fNyv7NHK4Hppmmi/vpa/rrvYRMfUmmFnokqSOY/GQrNa/4+XqHpK5Y 1cMvjKeXshcOC469z+fMCVPvUxXZ4BsE -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:40 2025 by rpki-client