$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa File: 647cf0cf-742d-39ca-8ee4-d7c099db9991.roa (raw, json) Hash identifier: +Fp1JS6VDAbMT2AfMFrDrE9BfJjxLu3XLwEdBVhYfYA= Subject key identifier: 7F:E1:AC:A6:26:13:52:65:1A:68:87:0C:8C:01:2C:61:DF:2C:79:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCA31C4262665AB67DE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396561 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ca:31:c4:26:26:65:ab:67:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=bbbb7809-14de-4be9-b79b-0f3af71f0d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:e1:9d:5f:c6:df:a8:7b:1a:81:c5:d7:c5: 4b:aa:14:cf:f1:e4:4e:c8:f3:04:e0:67:b0:64:5d: a5:1e:0a:9b:5a:b5:88:94:95:0b:4c:aa:ab:b9:fa: d5:4b:8e:89:2e:e8:46:8e:8d:49:50:06:fe:dd:ed: f9:90:ae:e8:78:4d:1b:9d:69:55:85:2c:9c:3e:24: 6a:e7:65:b7:cd:99:db:36:8b:f3:99:a6:16:c9:76: b1:f5:46:10:a0:c8:69:1a:e5:87:16:4c:41:e2:7f: bd:83:e1:e1:d8:c7:3f:23:48:99:d7:17:22:31:7e: 6b:78:8d:75:a3:e6:ba:27:d6:2c:97:41:a7:9c:48: 9b:be:13:fd:fe:0b:8e:8b:9f:92:41:f2:54:fe:75: e3:3d:69:d6:b1:c0:e2:0f:f9:83:60:a4:d0:0c:81: eb:c1:56:45:73:3e:83:32:8e:63:23:6a:c6:74:e1: 87:96:6c:68:e2:8c:7d:fc:c2:d3:b6:8d:00:51:4e: 26:44:85:74:4e:a0:ab:31:e2:24:2b:f3:ca:02:fd: 01:fa:54:4b:cc:62:13:d6:6e:a5:dc:d1:f9:96:ed: f1:f7:98:4e:47:e1:6c:75:03:93:3b:ae:a5:94:fc: ab:f0:d4:5a:34:96:1a:4f:96:95:da:ab:5d:b7:1d: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E1:AC:A6:26:13:52:65:1A:68:87:0C:8C:01:2C:61:DF:2C:79:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:26:52:a1:c4:bb:f5:07:c1:c4:cb:67:de:15:ac:71:e3:dc: 31:68:87:5a:64:9a:34:19:a2:f1:01:13:62:73:f8:b5:a1:9c: b3:b3:d6:12:02:f8:65:32:4b:97:6c:7c:6e:62:24:2b:d4:aa: 1a:c7:97:f9:ef:aa:6e:a4:d3:d3:50:dd:f8:8b:a2:8f:89:46: 21:73:1c:5b:2a:85:4a:ba:33:16:c1:53:a9:14:b8:61:a0:05: 1e:83:12:4f:e4:78:a8:c7:cd:63:78:8f:f7:c7:19:e8:f9:63: 9e:b4:af:5e:66:a4:67:7b:57:ef:e7:8f:67:e4:84:22:3a:f9: 6d:ee:03:b1:14:9a:e8:29:4f:81:b0:16:d4:85:f0:3d:af:29: dd:4d:65:19:e9:dd:fe:c9:c9:46:4b:7c:ba:1f:78:fe:68:3d: c1:1c:8d:b1:6b:c7:a5:a9:d9:b8:35:82:dd:d0:df:e0:b0:c8: 51:b4:f3:34:d3:7e:ab:e9:1c:2c:61:97:6e:a3:5a:39:83:48: d5:5b:bc:4f:dd:4c:11:73:a6:24:2a:4e:af:e6:c7:f9:a3:a3: 74:e1:94:f2:7c:4e:81:3f:55:f8:fe:4b:c4:76:17:cc:5e:72: c6:45:25:41:b8:73:e7:46:3d:1d:4e:40:b0:6a:84:95:32:ae: 2e:f5:3a:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8oxxCYmZatn3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YmJiYjc4MDktMTRkZS00YmU5LWI3OWItMGYzYWY3MWYwZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigPhnV/G36h7GoHF18VLqhTP8eROyPME4Gew ZF2lHgqbWrWIlJULTKqrufrVS46JLuhGjo1JUAb+3e35kK7oeE0bnWlVhSycPiRq 52W3zZnbNovzmaYWyXax9UYQoMhpGuWHFkxB4n+9g+Hh2Mc/I0iZ1xciMX5reI11 o+a6J9Ysl0GnnEibvhP9/guOi5+SQfJU/nXjPWnWscDiD/mDYKTQDIHrwVZFcz6D Mo5jI2rGdOGHlmxo4ox9/MLTto0AUU4mRIV0TqCrMeIkK/PKAv0B+lRLzGIT1m6l 3NH5lu3x95hOR+FsdQOTO66llPyr8NRaNJYaT5aV2qtdtx1uCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH/hrKYmE1JlGmiHDIwBLGHfLHlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjQ3Y2YwY2YtNzQyZC0z OWNhLThlZTQtZDdjMDk5ZGI5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJJlKhxLv1B8HEy2feFaxx49wxaIdaZJo0GaLxARNic/i1oZyzs9YS AvhlMkuXbHxuYiQr1Koax5f576pupNPTUN34i6KPiUYhcxxbKoVKujMWwVOpFLhh oAUegxJP5Hiox81jeI/3xxno+WOetK9eZqRne1fv549n5IQiOvlt7gOxFJroKU+B sBbUhfA9ryndTWUZ6d3+yclGS3y6H3j+aD3BHI2xa8elqdm4NYLd0N/gsMhRtPM0 036r6RwsYZduo1o5g0jVW7xP3UwRc6YkKk6v5sf5o6N04ZTyfE6BP1X4/kvEdhfM XnLGRSVBuHPnRj0dTkCwaoSVMq4u9Tqb -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:35 2025 by rpki-client