$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa File: 165b190a-bc48-3899-87f2-27377652e3af.roa (raw, json) Hash identifier: LaCyGWDgNvPscEN+vjnhbgMyYMt1fHI85dibBiy+03w= Subject key identifier: E9:A7:FA:26:6B:5F:65:C2:89:B6:13:0C:0B:5A:7D:52:A2:87:82:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCF7E9B380F2485EBA560 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396580 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:cf:7e:9b:38:0f:24:85:eb:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=b97f821d-ef84-4eeb-8436-6bb2c2326a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:5d:bd:75:df:ac:1e:3c:51:9b:2b:de:cc: 5f:73:42:1a:29:da:c9:46:19:e1:31:63:33:59:5b: d0:4e:06:b0:00:c6:49:05:73:1a:ca:6e:5b:6e:88: 4f:f8:04:74:13:9e:56:d2:f0:a8:fe:a6:d4:25:18: 44:29:f2:c0:c2:07:51:27:73:44:8f:4b:6c:dc:ec: 34:5b:31:cf:e1:7a:0b:cb:53:3b:4d:e1:60:a1:ba: 32:64:35:ab:6f:12:02:d0:47:df:dc:a4:cd:e9:fe: 4b:8f:9a:38:8e:0e:6e:44:18:49:9f:c6:ac:64:d2: 15:f1:95:3f:8b:88:f3:17:47:ad:34:c5:23:a9:94: d3:54:6d:d4:47:38:05:41:61:a3:8e:97:80:c0:49: b7:c4:6c:1c:be:2c:65:82:32:6a:24:dd:c8:19:8d: 74:d3:22:62:9d:8f:67:64:84:bb:09:1a:9d:9e:6b: 51:5c:e8:08:53:7b:23:b9:79:0c:fe:74:ae:e2:b7: 89:52:0d:94:e3:09:10:00:b8:93:ed:f1:56:03:4e: c3:ff:ec:d9:47:49:33:86:b9:5f:55:5c:7d:91:be: 06:33:4c:83:0d:7e:07:4f:0a:08:7a:a9:1f:1b:c6: ad:d0:4d:f9:f1:d3:5d:25:ef:81:8f:ee:a6:7c:e4: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A7:FA:26:6B:5F:65:C2:89:B6:13:0C:0B:5A:7D:52:A2:87:82:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:83:8c:36:e0:0a:fb:fa:c5:df:64:0a:5f:0d:ec:b3:39:51: a8:d2:d2:51:00:4d:b1:39:60:ff:50:21:c3:b6:eb:8e:3b:9b: 4c:45:fe:41:0f:4e:de:fc:9a:e9:23:bc:e3:ff:60:44:10:3d: a8:d5:dc:81:bf:41:a3:b2:80:05:e1:88:d2:6e:d5:43:50:df: d8:57:c1:61:02:ff:1c:68:b1:bb:10:2c:d6:99:fd:bf:01:13: 27:54:f8:ad:64:e8:54:67:66:34:52:47:d7:22:7c:6f:ef:e5: 18:99:be:d5:9f:fc:64:cc:67:93:e3:b5:1b:ff:c0:c1:43:6b: 58:0e:d5:f6:6e:47:d7:9f:3d:6a:1a:6c:64:f3:eb:e0:ec:32: 14:d6:86:3b:c4:0b:70:0d:37:2b:c8:f8:a0:d6:ad:4c:e1:c4: 9f:95:13:17:11:22:ff:4a:7c:f8:30:e2:d1:7a:8d:e2:4c:4a: 2b:f9:0d:23:82:1b:0a:68:7b:bf:4b:cb:26:35:6c:c6:ae:77: 4a:39:6a:51:be:e0:37:cc:5f:34:59:f5:8b:cf:66:a1:66:a4: ea:cb:be:75:86:7f:07:bc:09:f0:75:20:c0:ac:69:34:b2:a1: 68:98:78:ab:af:60:ae:f4:a6:17:cb:82:3f:bd:ca:d7:01:80: 4c:68:13:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha89+mzgPJIXrpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Yjk3ZjgyMWQtZWY4NC00ZWViLTg0MzYtNmJiMmMyMzI2YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz9dvXXfrB48UZsr3sxfc0IaKdrJRhnhMWMz WVvQTgawAMZJBXMaym5bbohP+AR0E55W0vCo/qbUJRhEKfLAwgdRJ3NEj0ts3Ow0 WzHP4XoLy1M7TeFgoboyZDWrbxIC0Eff3KTN6f5Lj5o4jg5uRBhJn8asZNIV8ZU/ i4jzF0etNMUjqZTTVG3URzgFQWGjjpeAwEm3xGwcvixlgjJqJN3IGY100yJinY9n ZIS7CRqdnmtRXOgIU3sjuXkM/nSu4reJUg2U4wkQALiT7fFWA07D/+zZR0kzhrlf VVx9kb4GM0yDDX4HTwoIeqkfG8at0E358dNdJe+Bj+6mfORbMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOmn+iZrX2XCibYTDAtafVKih4I6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTY1YjE5MGEtYmM0OC0z ODk5LTg3ZjItMjczNzc2NTJlM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4g4w24Ar7+sXfZApfDeyzOVGo0tJRAE2xOWD/UCHDtuuOO5tMRf5B D07e/JrpI7zj/2BEED2o1dyBv0GjsoAF4YjSbtVDUN/YV8FhAv8caLG7ECzWmf2/ ARMnVPitZOhUZ2Y0UkfXInxv7+UYmb7Vn/xkzGeT47Ub/8DBQ2tYDtX2bkfXnz1q Gmxk8+vg7DIU1oY7xAtwDTcryPig1q1M4cSflRMXESL/Snz4MOLReo3iTEor+Q0j ghsKaHu/S8smNWzGrndKOWpRvuA3zF80WfWLz2ahZqTqy751hn8HvAnwdSDArGk0 sqFomHirr2Cu9KYXy4I/vcrXAYBMaBOK -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:37 2025 by rpki-client