$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa File: ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa (raw, json) Hash identifier: BgY3rxvXskUS2H973QjcMs2ePW/cn3jK8MVUspayhSY= Subject key identifier: 66:49:6D:6C:95:EE:8F:CF:41:09:82:31:AD:24:CC:82:AF:97:36:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C0A4F520BA824F2E63643780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396617 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f5:20:ba:82:4f:2e:63:64:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=65a832c6-99b3-46b0-80eb-9368bf1c9cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:33:85:1a:83:1b:a4:35:c2:8e:37:af:ad: 91:40:02:c2:84:e5:57:b6:22:02:fe:21:68:88:e4: 81:1b:85:55:60:ad:d0:ea:0c:16:dc:f8:6b:5f:30: 01:1d:02:18:15:a3:96:86:a9:d3:c9:af:23:94:3a: 4f:fe:49:d9:f4:14:e3:db:dc:db:cb:5a:e5:c7:58: 56:7e:f4:b0:31:90:f8:5a:f7:6e:fe:57:d8:ae:16: de:31:e4:87:f3:c2:55:ce:23:8f:44:58:c5:67:9c: b0:16:fd:ba:08:84:f8:c5:c4:1f:18:46:92:34:cc: 86:95:ee:be:99:32:7d:ac:f9:42:f1:53:75:8a:68: d6:fb:00:b9:63:a6:a4:e4:81:46:14:47:a6:31:72: 13:71:9b:b7:b8:b1:5c:36:9e:d2:ee:8f:52:da:a2: 50:3c:0e:ab:c2:cd:35:00:a3:3d:73:78:aa:45:44: 64:e4:0a:ff:cd:5d:17:0e:09:87:05:d3:fe:fd:32: 01:93:0f:25:8b:6c:fb:74:2d:e4:a5:ae:0d:f5:2c: b0:8a:d2:2f:4a:84:7f:3e:29:0e:fb:bf:f9:60:bd: 5b:93:e0:74:e4:74:e8:33:ed:38:15:5d:bd:85:ac: bc:99:ac:c8:11:d7:53:74:df:af:71:81:26:39:53: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:6D:6C:95:EE:8F:CF:41:09:82:31:AD:24:CC:82:AF:97:36:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:11:f6:e7:34:c9:f3:56:f6:72:47:f1:d2:c3:ff:0c:23:62: 8e:18:80:e2:7d:9d:8c:bc:c8:e8:b5:37:ea:35:1c:98:94:6c: d0:29:a2:c3:95:e2:5d:6b:09:b2:f9:79:76:4a:db:1a:9e:03: fe:8e:b0:b0:a6:d6:50:7b:40:4a:8b:ff:df:a9:ec:85:37:61: 8c:0c:bc:fe:bb:85:b1:02:4d:43:9d:a2:d9:08:0f:46:c5:4e: 28:7d:e3:54:ad:06:21:44:91:43:b3:56:8e:06:f5:f7:81:b3: ed:34:72:88:0c:7c:2a:d9:8f:b7:ac:14:a4:49:06:87:86:fd: 66:0c:6d:3b:3d:16:e2:b7:c7:28:b3:d6:b6:cd:bc:58:04:f7: 3f:1b:55:46:99:f3:cc:66:88:86:ac:f5:dd:6c:b5:e4:72:9e: ea:2a:08:d2:95:30:c7:e5:01:2a:82:6a:db:86:83:7b:c4:6e: 8a:e3:e1:43:29:91:de:69:7e:8e:a4:8b:63:0c:a0:ab:e3:ba: 6c:fe:48:0d:38:a7:9b:23:33:70:71:16:4b:5f:b4:70:5b:d4: b4:ac:68:46:26:2a:dd:d5:d6:e6:3d:18:e0:9f:3e:f3:87:0b: 20:d8:88:2b:2d:0c:f5:74:1e:ff:d8:7d:8d:05:03:43:35:a0: b9:b4:d6:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPUguoJPLmNkN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NjVhODMyYzYtOTliMy00NmIwLTgwZWItOTM2OGJmMWM5Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQwzhRqDG6Q1wo43r62RQALChOVXtiIC/iFo iOSBG4VVYK3Q6gwW3PhrXzABHQIYFaOWhqnTya8jlDpP/knZ9BTj29zby1rlx1hW fvSwMZD4Wvdu/lfYrhbeMeSH88JVziOPRFjFZ5ywFv26CIT4xcQfGEaSNMyGle6+ mTJ9rPlC8VN1imjW+wC5Y6ak5IFGFEemMXITcZu3uLFcNp7S7o9S2qJQPA6rws01 AKM9c3iqRURk5Ar/zV0XDgmHBdP+/TIBkw8li2z7dC3kpa4N9SywitIvSoR/PikO +7/5YL1bk+B05HToM+04FV29hay8mazIEddTdN+vcYEmOVMrDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZJbWyV7o/PQQmCMa0kzIKvlzb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI5ZDA0MGMtYTY2My0z ZjZlLWI3MWQtYjU4ZDFjODFhM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNEfbnNMnzVvZyR/HSw/8MI2KOGIDifZ2MvMjotTfqNRyYlGzQKaLD leJdawmy+Xl2StsangP+jrCwptZQe0BKi//fqeyFN2GMDLz+u4WxAk1DnaLZCA9G xU4ofeNUrQYhRJFDs1aOBvX3gbPtNHKIDHwq2Y+3rBSkSQaHhv1mDG07PRbit8co s9a2zbxYBPc/G1VGmfPMZoiGrPXdbLXkcp7qKgjSlTDH5QEqgmrbhoN7xG6K4+FD KZHeaX6OpItjDKCr47ps/kgNOKebIzNwcRZLX7RwW9S0rGhGJird1dbmPRjgnz7z hwsg2IgrLQz1dB7/2H2NBQNDNaC5tNYp -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:54 2025 by rpki-client