$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa File: 36402e01-d5fb-3945-b412-c19d180b92ba.roa (raw, json) Hash identifier: UyvjIeWaLV2yn7ZkQrI/6mUHhGyGMgsrZSxcwIx8OsQ= Subject key identifier: 4E:44:50:04:A9:0B:57:0D:B1:3D:B3:3B:F4:4D:9A:E0:CA:AA:45:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F4D5EE010966F0E3D0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 397206 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f4:d5:ee:01:09:66:f0:e3:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=307dd9ab-7a10-4c5d-80e1-4d1564c936cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:f1:ea:5c:76:dc:c1:22:21:96:9f:da:00: a1:6c:df:6f:f8:66:c2:f7:df:54:a5:1f:9a:65:e0: 83:18:e6:b7:43:ee:4f:8b:f1:4a:54:77:05:db:cb: 2d:51:0a:16:00:fd:f3:39:da:18:6e:b6:18:78:00: 7e:54:d3:00:4b:5f:f8:87:c3:40:13:c3:9c:aa:a1: 4c:43:46:66:bb:f6:9b:c2:7b:35:4a:d9:8c:9e:23: 33:21:b0:86:8c:83:af:09:6b:2e:5e:91:d1:c3:fe: 10:46:2f:7e:5f:b4:96:e6:8e:a1:84:1c:c8:4d:9f: cd:89:3e:b7:04:07:94:0e:83:78:b5:15:4a:ad:02: a6:71:32:d5:ea:1e:82:47:b3:05:4d:62:01:3e:4e: f6:52:3b:c1:9f:73:14:36:9e:52:34:dd:6b:36:98: e0:53:ca:29:fd:1d:46:38:6a:14:7d:5a:1c:8f:5e: c2:ae:aa:42:cd:b7:65:3a:d4:6c:71:e5:50:89:08: d7:f4:77:ce:96:75:84:31:5a:64:e6:74:3f:17:c5: 87:ab:3d:19:b4:4c:5f:ad:e3:45:0b:33:b3:d3:21: 11:d9:46:52:a4:8f:7f:ee:ea:d2:b8:db:64:78:32: da:8c:49:42:26:96:15:c8:21:da:d5:f1:9e:99:e1: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:50:04:A9:0B:57:0D:B1:3D:B3:3B:F4:4D:9A:E0:CA:AA:45:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:98:5b:f3:a2:b2:6f:b1:ce:5f:fd:85:73:f3:08:79:cd:ac: 49:0d:6f:01:3c:6b:bc:50:67:9e:32:7a:6a:a8:e8:c6:01:4d: 66:b5:03:08:f9:64:a4:f8:1a:12:f9:e8:21:25:e5:c0:38:a1: 1f:ea:86:8c:15:46:fd:2a:2d:3a:f2:17:0f:a5:96:41:3d:18: 15:a0:f5:5e:1a:ad:d2:32:df:22:0c:eb:23:15:ad:ed:0c:07: c1:e6:7a:35:a3:6c:ae:37:ae:45:35:c6:7c:96:25:e3:31:cc: b4:9f:b7:62:f7:31:5d:c3:ce:d9:51:0e:c0:4c:38:4e:8c:49: a6:1b:0e:a5:45:6b:32:bb:c8:de:be:d9:77:00:a4:8f:19:b7: 88:fa:d3:a3:b2:4b:d2:94:4c:44:c9:96:e0:b6:21:39:bf:9f: ed:df:c5:e9:22:a3:da:a8:d6:dd:71:ca:02:4c:f6:7e:94:31: 1a:c3:70:85:9b:71:cd:76:bb:ca:d1:c7:96:b8:a4:9f:c4:f4: 26:f6:a9:d1:d0:af:e8:aa:ef:b2:cc:76:dc:f3:88:f7:48:ff: 29:bb:5e:f3:c3:ff:5b:bd:a5:da:89:e4:fe:93:b5:a4:c4:ca: d3:8b:97:a4:bb:8b:24:5a:82:b9:af:64:3e:d9:ee:5d:16:26: ae:57:9a:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPTV7gEJZvDj0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MzA3ZGQ5YWItN2ExMC00YzVkLTgwZTEtNGQxNTY0YzkzNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv7x6lx23MEiIZaf2gChbN9v+GbC999UpR+a ZeCDGOa3Q+5Pi/FKVHcF28stUQoWAP3zOdoYbrYYeAB+VNMAS1/4h8NAE8OcqqFM Q0Zmu/abwns1StmMniMzIbCGjIOvCWsuXpHRw/4QRi9+X7SW5o6hhBzITZ/NiT63 BAeUDoN4tRVKrQKmcTLV6h6CR7MFTWIBPk72UjvBn3MUNp5SNN1rNpjgU8op/R1G OGoUfVocj17CrqpCzbdlOtRsceVQiQjX9HfOlnWEMVpk5nQ/F8WHqz0ZtExfreNF CzOz0yER2UZSpI9/7urSuNtkeDLajElCJpYVyCHa1fGemeHJHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE5EUASpC1cNsT2zO/RNmuDKqkXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY0MDJlMDEtZDVmYi0z OTQ1LWI0MTItYzE5ZDE4MGI5MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzmFvzorJvsc5f/YVz8wh5zaxJDW8BPGu8UGeeMnpqqOjGAU1mtQMI +WSk+BoS+eghJeXAOKEf6oaMFUb9Ki068hcPpZZBPRgVoPVeGq3SMt8iDOsjFa3t DAfB5no1o2yuN65FNcZ8liXjMcy0n7di9zFdw87ZUQ7ATDhOjEmmGw6lRWsyu8je vtl3AKSPGbeI+tOjskvSlExEyZbgtiE5v5/t38XpIqPaqNbdccoCTPZ+lDEaw3CF m3HNdrvK0ceWuKSfxPQm9qnR0K/oqu+yzHbc84j3SP8pu17zw/9bvaXaieT+k7Wk xMrTi5eku4skWoK5r2Q+2e5dFiauV5pB -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:24 2025 by rpki-client