$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa File: 32457c4d-3c91-3d94-bcdd-950431e64872.roa (raw, json) Hash identifier: xhJDI1TK1H8LOlF2qV8VdDn8bRc7RP92YhVF4c1ahNs= Subject key identifier: A1:AF:82:9D:F1:2A:3C:ED:0F:78:73:D7:5B:92:2F:17:FB:7E:68:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848DD3BAF35AA30B4F09E92B0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 0 IP address blocks: 216.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:af:35:aa:30:b4:f0:9e:92:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=7f03faba-b23a-489a-b422-888e64735386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:0e:b8:82:99:f0:bd:63:4c:d5:d1:71:71: 63:a6:7d:11:6a:2c:71:86:34:61:a0:e8:b4:b5:69: 49:9e:49:bb:0d:8c:5a:a3:38:c4:0f:73:a6:a3:0a: ae:7a:2e:a3:86:df:8e:c9:27:e9:2f:51:6b:1f:28: 01:36:53:ee:10:04:62:55:c6:1f:9e:5e:0e:7e:0e: cd:e0:87:9f:5f:75:8f:af:0d:4b:51:14:47:c2:66: 3f:7b:cc:ff:10:c8:f1:1e:29:e5:e8:ee:dc:f4:fd: 96:c3:50:ae:d3:2e:4b:3f:b0:ad:68:fb:0c:1d:36: 1a:38:e5:17:42:b4:70:8a:07:01:1d:7a:7f:3f:88: 3a:59:bd:a7:4b:bd:7d:02:a6:92:9f:7f:42:07:71: b4:58:12:68:ee:f6:61:07:61:b7:72:18:cf:f0:26: d6:94:8f:31:41:02:81:57:8a:a0:91:5a:93:b5:dd: 25:91:b7:ba:8f:8d:7a:ef:e1:b7:36:cd:f1:87:2d: bf:5e:88:d4:b3:12:1d:c0:46:ce:35:97:97:60:fd: 35:5f:28:ed:e2:e0:80:f6:2c:e8:ce:cf:b0:4e:cd: ca:57:3a:5b:2b:5f:d7:c7:10:0c:10:f6:00:de:1f: 25:18:6e:8b:d1:c2:b6:b6:2f:07:f5:37:09:95:02: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:82:9D:F1:2A:3C:ED:0F:78:73:D7:5B:92:2F:17:FB:7E:68:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bb:ca:32:3b:d6:56:a4:0f:19:5f:d7:ca:76:ad:8e:40:51: 7c:bc:f8:e8:48:e9:d5:f5:7a:29:3f:a6:5a:63:fd:ce:5c:dc: 48:05:ed:4c:13:a1:36:39:b7:41:2b:0f:18:c0:7c:f2:de:d5: e2:63:82:0a:81:2a:ae:11:56:ab:98:75:5d:76:87:c5:10:eb: 1d:77:c9:23:51:ee:89:c6:de:1f:c3:66:e0:11:17:2a:88:a1: 80:2c:99:76:5c:54:56:c6:78:b8:71:87:a8:4d:63:7a:e8:4e: 22:19:e6:b7:d0:28:03:25:fc:5e:dc:a2:7f:22:44:cc:6a:c8: 29:91:34:85:52:92:00:8c:2c:5f:11:c5:5a:e8:5b:02:69:e0: 24:3e:27:a3:ce:f6:08:87:6d:4d:40:7b:59:c7:a9:85:59:70: 33:bd:1c:b1:97:af:c1:b6:9c:a1:6c:be:b6:a7:ba:8f:e0:22: 14:cb:ea:43:ea:ad:ca:c9:a0:9b:e6:78:bc:1a:31:bf:5a:ab: 12:13:cf:a4:f8:6b:84:ea:4d:07:fc:17:25:94:89:c4:f8:17: 8f:10:bf:df:f5:24:52:ae:e7:86:f9:89:4e:a0:84:86:81:50: 2f:01:47:d1:33:9e:b2:32:cc:66:b8:64:22:73:08:8a:da:a4: ad:bb:40:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO681qjC08J6SsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk N2YwM2ZhYmEtYjIzYS00ODlhLWI0MjItODg4ZTY0NzM1Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PQOuIKZ8L1jTNXRcXFjpn0RaixxhjRhoOi0 tWlJnkm7DYxaozjED3Omowquei6jht+OySfpL1FrHygBNlPuEARiVcYfnl4Ofg7N 4IefX3WPrw1LURRHwmY/e8z/EMjxHinl6O7c9P2Ww1Cu0y5LP7CtaPsMHTYaOOUX QrRwigcBHXp/P4g6Wb2nS719AqaSn39CB3G0WBJo7vZhB2G3chjP8CbWlI8xQQKB V4qgkVqTtd0lkbe6j4167+G3Ns3xhy2/XojUsxIdwEbONZeXYP01Xyjt4uCA9izo zs+wTs3KVzpbK1/XxxAMEPYA3h8lGG6L0cK2ti8H9TcJlQIiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGvgp3xKjztD3hz11uSLxf7fmicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI0NTdjNGQtM2M5MS0z ZDk0LWJjZGQtOTUwNDMxZTY0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG27yjI71lakDxlf18p2rY5AUXy8+OhI6dX1eik/plpj/c5c3EgF7UwT oTY5t0ErDxjAfPLe1eJjggqBKq4RVquYdV12h8UQ6x13ySNR7onG3h/DZuARFyqI oYAsmXZcVFbGeLhxh6hNY3roTiIZ5rfQKAMl/F7con8iRMxqyCmRNIVSkgCMLF8R xVroWwJp4CQ+J6PO9giHbU1Ae1nHqYVZcDO9HLGXr8G2nKFsvranuo/gIhTL6kPq rcrJoJvmeLwaMb9aqxITz6T4a4TqTQf8FyWUicT4F48Qv9/1JFKu54b5iU6ghIaB UC8BR9EznrIyzGa4ZCJzCIrapK27QGQ= -----END CERTIFICATE-----Generated at Sat Apr 12 00:23:05 2025 by rpki-client