$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa File: 2be2b071-452a-3316-af15-4dc60aecd7f8.roa (raw, json) Hash identifier: KQLGOUdDFrK/+2ApP/IOkjWQfMb4QsEU1yiLrOFvYYk= Subject key identifier: 85:34:A1:15:78:1B:87:42:2E:44:6C:1E:51:E3:2A:CA:95:51:BF:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BC68DE33BB014CF9D6580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396600 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c6:8d:e3:3b:b0:14:cf:9d:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=3bf380b0-28be-40f5-847f-2b012df76c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:d2:fb:f4:5e:b3:d8:9c:ae:17:5d:14:b5: 7b:89:d0:3d:47:18:9a:95:36:24:04:79:83:18:d5: 22:6d:57:b9:f7:26:82:9a:59:38:c1:54:e7:28:21: cf:0c:50:f6:20:05:30:56:96:1b:c9:57:c6:57:22: d6:a5:79:e1:34:e7:99:21:00:52:a0:9b:53:cc:5f: 76:3b:9a:df:6b:5a:2d:27:96:07:49:e6:ea:79:0c: ef:42:8a:85:b4:90:b6:55:21:71:82:8c:ba:21:b0: 6b:e7:c4:ea:0d:b4:eb:95:52:aa:56:d3:cf:b5:15: ff:28:55:a2:aa:84:cc:5d:f1:5f:af:3b:01:af:e6: c5:56:e6:0f:81:44:92:9e:df:ab:ab:a2:08:14:b9: aa:9d:05:0d:23:37:39:07:01:35:b4:ed:ba:4f:5e: 4c:b9:06:b0:43:5b:f5:aa:07:b8:8b:50:0f:5a:e7: 0e:87:26:5a:c0:16:f6:5a:ae:f5:09:04:e8:9e:fb: 1e:d5:4e:38:2a:fe:52:d9:77:c8:84:2d:4b:40:6b: 32:47:c1:39:47:5a:b1:09:d3:1e:d7:ef:87:6d:0e: 71:99:e0:54:ce:96:1f:9d:80:4c:91:e5:fc:f7:c6: cb:e4:45:a1:02:b8:3e:ac:e8:76:f7:a3:a3:e1:e9: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:A1:15:78:1B:87:42:2E:44:6C:1E:51:E3:2A:CA:95:51:BF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3b:ec:2d:f4:47:05:26:bc:2d:7b:88:dd:7f:e8:2e:f4:23: bd:4f:94:04:74:ef:bf:0c:ae:25:ac:7e:07:2d:36:cd:82:55: 92:0b:5d:22:2a:cd:44:b2:ba:36:5e:b3:26:98:ab:10:68:2e: 36:76:b7:54:a3:4b:ec:07:58:b7:cf:4f:e3:27:79:9e:7b:4b: 03:cf:74:f0:c9:fb:84:55:19:82:51:fd:5f:68:7d:01:ff:73: 6d:df:2e:75:12:00:68:8b:1b:e9:01:df:af:00:d8:b2:41:e8: 07:fb:77:9e:d2:d0:4a:73:77:d1:1d:25:aa:dc:62:98:4c:85: 9c:c9:c5:ca:fe:46:e1:3b:c0:f7:05:8b:b5:4a:05:99:58:5d: a6:08:da:de:da:93:6a:05:68:26:13:06:71:1a:b5:fa:a7:69: 3f:2f:cb:2f:28:9e:05:cd:a3:74:a6:08:a5:5f:ea:3a:3d:0e: ae:f3:c8:bf:76:4e:4a:78:bc:f5:53:cf:78:77:73:6b:5c:35: ec:06:2b:e2:ca:51:a9:bd:bc:74:72:23:88:c0:b8:7a:93:e6: 44:57:fd:fe:e2:59:17:b6:f5:c6:f1:d3:eb:a5:49:3d:c1:9c: a0:bd:7d:7c:96:50:94:e4:d1:bf:68:e6:42:4e:38:91:12:7b: 16:91:46:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8aN4zuwFM+dZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk M2JmMzgwYjAtMjhiZS00MGY1LTg0N2YtMmIwMTJkZjc2Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE3S+/Res9icrhddFLV7idA9RxialTYkBHmD GNUibVe59yaCmlk4wVTnKCHPDFD2IAUwVpYbyVfGVyLWpXnhNOeZIQBSoJtTzF92 O5rfa1otJ5YHSebqeQzvQoqFtJC2VSFxgoy6IbBr58TqDbTrlVKqVtPPtRX/KFWi qoTMXfFfrzsBr+bFVuYPgUSSnt+rq6IIFLmqnQUNIzc5BwE1tO26T15MuQawQ1v1 qge4i1APWucOhyZawBb2Wq71CQTonvse1U44Kv5S2XfIhC1LQGsyR8E5R1qxCdMe 1++HbQ5xmeBUzpYfnYBMkeX898bL5EWhArg+rOh296Oj4ekpxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIU0oRV4G4dCLkRsHlHjKsqVUb9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJlMmIwNzEtNDUyYS0z MzE2LWFmMTUtNGRjNjBhZWNkN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSO+wt9EcFJrwte4jdf+gu9CO9T5QEdO+/DK4lrH4HLTbNglWSC10i Ks1Esro2XrMmmKsQaC42drdUo0vsB1i3z0/jJ3mee0sDz3TwyfuEVRmCUf1faH0B /3Nt3y51EgBoixvpAd+vANiyQegH+3ee0tBKc3fRHSWq3GKYTIWcycXK/kbhO8D3 BYu1SgWZWF2mCNre2pNqBWgmEwZxGrX6p2k/L8svKJ4FzaN0pgilX+o6PQ6u88i/ dk5KeLz1U894d3NrXDXsBiviylGpvbx0ciOIwLh6k+ZEV/3+4lkXtvXG8dPrpUk9 wZygvX18llCU5NG/aOZCTjiREnsWkUa/ -----END CERTIFICATE-----Generated at Sun Apr 13 03:07:36 2025 by rpki-client