$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18003761-baff-3f60-8d0e-31527de7fe3c.roa File: 18003761-baff-3f60-8d0e-31527de7fe3c.roa (raw, json) Hash identifier: FK3+b+HHKUymVSMg9tXBV7SJqiUuPIwKN7jcskPQcqM= Subject key identifier: E0:D1:96:EE:E9:BF:2B:87:18:B5:69:EB:46:2A:DC:01:B7:98:9A:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BC9D7C01FE433B8FCAA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18003761-baff-3f60-8d0e-31527de7fe3c.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 40647 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c9:d7:c0:1f:e4:33:b8:fc:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=45cdf88c-040a-437a-b40a-b205a9566078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:37:49:9f:97:82:44:c6:0d:df:cd:57:c0: 98:4a:fc:ca:56:56:58:c2:00:47:df:ee:0f:ae:60: 2f:5e:c4:3c:91:6e:76:64:b5:54:04:55:d0:b7:48: b0:3e:c1:d6:94:20:13:93:8c:48:6d:8a:c8:bf:5d: 1b:6d:62:ad:4a:c6:f4:60:0a:1b:d5:c5:01:dc:5c: 70:b4:0b:22:79:82:4a:98:39:24:3a:be:88:3a:98: 08:f2:e6:59:26:e9:84:f5:f1:3a:5f:5b:4f:51:82: f4:9e:d2:7d:82:5d:9e:93:19:3b:2a:68:a3:64:f0: 7a:58:30:2e:94:f1:44:8e:f2:62:b4:62:5a:b6:8f: 36:bb:34:b4:85:ed:35:61:62:b8:13:bb:53:10:2a: 89:f8:3a:f3:45:bf:03:f0:3a:96:b7:09:27:21:ca: 37:e5:d8:f9:5c:9a:2c:25:f3:4a:22:c2:fc:68:10: 93:36:45:e4:c3:82:22:8b:a5:b1:97:03:cb:e7:c1: 30:e2:41:89:56:7b:18:00:c7:81:fc:87:45:10:2f: a9:19:a9:fc:91:8a:51:34:a8:9e:41:27:bb:3e:78: 1a:74:14:c4:92:6d:bc:cf:df:22:92:28:a4:62:19: 75:bc:d0:b7:9d:fd:d0:7e:72:4d:3a:cc:b2:9a:93: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D1:96:EE:E9:BF:2B:87:18:B5:69:EB:46:2A:DC:01:B7:98:9A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18003761-baff-3f60-8d0e-31527de7fe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6f:48:54:6f:d3:7c:4d:58:23:b5:65:f2:d8:ec:b9:48:4d: 88:70:e7:26:d5:90:06:10:88:bf:fa:a3:65:cf:3c:7d:fd:83: 69:78:08:ad:bf:20:05:62:45:9e:cd:7e:12:2b:98:f8:2f:c6: a6:81:25:25:25:fa:a5:14:47:5d:3d:cb:21:10:55:a5:7c:a9: 45:9f:cf:be:0b:38:8e:2d:7b:bc:05:aa:e2:ac:f6:8c:fe:fe: de:51:84:a3:c2:e4:69:0f:c4:22:5b:a7:f4:19:99:46:37:a5: b6:05:4c:a0:ab:cc:ae:45:fb:14:b6:02:c0:1c:43:03:be:29: 9d:40:0b:ed:f0:3d:84:be:37:20:c0:36:9b:11:d9:96:ba:72: 7b:0d:23:a6:ca:dc:d3:33:a8:04:c6:7e:8f:04:b4:ee:ee:5e: 2c:5e:d4:53:2e:e0:4a:14:3f:80:aa:77:67:69:3a:88:cd:f9: 38:f6:1b:d7:b0:bb:cd:af:16:6a:3b:fe:87:61:30:6d:46:9d: 66:d2:2b:bd:06:d6:de:25:ad:10:d9:78:61:77:68:94:bc:b2: f4:7e:3c:5d:f9:9a:35:aa:f6:c0:8c:aa:e5:15:ab:ed:a1:e6: b3:d4:4f:74:5f:ce:ed:23:02:5c:80:f6:12:bf:82:e0:f6:86: 42:5a:f6:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8nXwB/kM7j8qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NDVjZGY4OGMtMDQwYS00MzdhLWI0MGEtYjIwNWE5NTY2MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwU3SZ+XgkTGDd/NV8CYSvzKVlZYwgBH3+4P rmAvXsQ8kW52ZLVUBFXQt0iwPsHWlCATk4xIbYrIv10bbWKtSsb0YAob1cUB3Fxw tAsieYJKmDkkOr6IOpgI8uZZJumE9fE6X1tPUYL0ntJ9gl2ekxk7KmijZPB6WDAu lPFEjvJitGJato82uzS0he01YWK4E7tTECqJ+DrzRb8D8DqWtwknIco35dj5XJos JfNKIsL8aBCTNkXkw4Iii6WxlwPL58Ew4kGJVnsYAMeB/IdFEC+pGan8kYpRNKie QSe7PngadBTEkm28z98ikiikYhl1vNC3nf3QfnJNOsyympMhvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFODRlu7pvyuHGLVp60Yq3AG3mJqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgwMDM3NjEtYmFmZi0z ZjYwLThkMGUtMzE1MjdkZTdmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeb0hUb9N8TVgjtWXy2Oy5SE2IcOcm1ZAGEIi/+qNlzzx9/YNpeAit vyAFYkWezX4SK5j4L8amgSUlJfqlFEddPcshEFWlfKlFn8++CziOLXu8BarirPaM /v7eUYSjwuRpD8QiW6f0GZlGN6W2BUygq8yuRfsUtgLAHEMDvimdQAvt8D2Evjcg wDabEdmWunJ7DSOmytzTM6gExn6PBLTu7l4sXtRTLuBKFD+AqndnaTqIzfk49hvX sLvNrxZqO/6HYTBtRp1m0iu9BtbeJa0Q2Xhhd2iUvLL0fjxd+Zo1qvbAjKrlFavt oeaz1E90X87tIwJcgPYSv4Lg9oZCWvaZ -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:16 2025 by rpki-client