$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa File: 8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa (raw, json) Hash identifier: 5Nh+57EycSDbfsfPher4Poz6HJHYsFYbGwHVS5rx+FI= Subject key identifier: CA:81:FC:0E:2B:2E:C9:2F:C3:09:EE:52:A5:08:27:87:7E:CE:A0:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCA1E3CAB5196A0879300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396583 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ca:1e:3c:ab:51:96:a0:87:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=fc316197-f14a-47bc-87f8-21eef435cad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:55:91:11:f5:63:21:93:e7:a8:6c:dd:e5: 53:54:da:c2:24:d0:6e:2b:8b:ba:e6:63:f6:70:b6: 4b:eb:16:b0:42:77:6a:a0:fa:8f:38:43:e6:1d:e7: 66:39:b1:4a:1f:3a:51:f5:b8:39:5d:f1:53:55:d4: df:8b:5b:86:23:98:98:52:3b:b4:0e:50:0f:24:c1: 78:78:bb:19:67:23:98:14:2e:d5:f9:ac:74:d1:a1: 34:dc:70:f4:0d:68:94:a1:49:34:e8:78:0a:6b:9d: 45:17:91:7c:df:a7:3d:93:1a:9a:ca:ea:57:a4:f0: ba:88:ec:dd:b1:40:84:63:59:96:75:5a:2e:bd:5c: 41:54:10:11:d1:f1:7a:eb:3c:94:88:38:d5:6e:46: 51:a4:2a:08:f7:5a:a0:26:2b:68:c0:15:b1:08:33: 28:21:b6:ae:bc:1f:07:9d:af:3e:55:7a:0d:2e:4f: b8:c2:b1:26:81:87:dc:73:99:b7:48:e6:bc:e6:0e: 11:fd:12:70:d7:fd:0b:0e:22:b2:4f:85:d5:d6:e1: 65:f4:4c:f9:28:32:8b:96:48:2d:04:24:dd:49:e9: c7:59:6f:df:95:6c:01:49:04:b5:75:ec:db:8f:0f: c6:fb:c7:65:7d:5c:ce:a5:26:80:4b:b4:4e:40:c8: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:FC:0E:2B:2E:C9:2F:C3:09:EE:52:A5:08:27:87:7E:CE:A0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ac:33:32:fa:b6:8f:3d:54:0c:95:6a:76:c3:9c:f3:98:8e: 17:d1:83:d2:f5:07:e1:16:c9:52:a5:18:b6:28:fc:d4:64:80: 31:55:d0:cd:43:7a:9f:6c:5e:a0:9f:2a:a4:20:53:d3:c4:36: dc:02:dc:c4:0d:82:15:04:f8:11:8b:76:13:56:4b:cd:15:be: 90:99:be:ef:79:bd:81:47:86:c3:31:47:d8:f8:61:b0:2b:05: 9d:af:b3:23:9c:6e:a6:32:b1:4e:af:39:8c:d3:de:4c:86:b6: b4:7a:32:27:19:d3:33:ec:36:f3:3b:ce:83:92:86:26:ce:6e: 27:7e:43:3e:e5:41:a2:4d:b4:2a:a1:02:e8:03:16:15:5d:a2: c0:65:a5:90:61:4a:81:a1:63:88:ab:26:ba:91:b1:13:13:11: b0:b8:cf:e5:16:15:b3:5b:27:c0:9f:94:a4:96:7c:a2:0f:99: f0:eb:50:e6:1c:28:ba:9e:1b:6a:58:4c:fa:5c:6c:45:97:f1: 78:88:02:e2:e1:c4:6a:bd:56:f5:95:1d:ac:32:ff:a1:6d:45: a2:d1:f5:5f:de:d7:d0:59:07:c6:41:44:1e:83:53:26:d2:05: c5:e3:fb:8d:b6:5c:7a:f9:13:18:92:1d:8d:e2:60:b4:69:9d: 27:7e:9f:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8oePKtRlqCHkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmMzMTYxOTctZjE0YS00N2JjLTg3ZjgtMjFlZWY0MzVjYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuhVkRH1YyGT56hs3eVTVNrCJNBuK4u65mP2 cLZL6xawQndqoPqPOEPmHedmObFKHzpR9bg5XfFTVdTfi1uGI5iYUju0DlAPJMF4 eLsZZyOYFC7V+ax00aE03HD0DWiUoUk06HgKa51FF5F836c9kxqayupXpPC6iOzd sUCEY1mWdVouvVxBVBAR0fF66zyUiDjVbkZRpCoI91qgJitowBWxCDMoIbauvB8H na8+VXoNLk+4wrEmgYfcc5m3SOa85g4R/RJw1/0LDiKyT4XV1uFl9Ez5KDKLlkgt BCTdSenHWW/flWwBSQS1dezbjw/G+8dlfVzOpSaAS7ROQMg7iQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMqB/A4rLskvwwnuUqUIJ4d+zqCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIwOTYwNDctZTk5NC0z ZWMzLTlmOGMtZmZhZTZkZmY5OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsrDMy+raPPVQMlWp2w5zzmI4X0YPS9QfhFslSpRi2KPzUZIAxVdDN Q3qfbF6gnyqkIFPTxDbcAtzEDYIVBPgRi3YTVkvNFb6Qmb7veb2BR4bDMUfY+GGw KwWdr7MjnG6mMrFOrzmM095Mhra0ejInGdMz7DbzO86DkoYmzm4nfkM+5UGiTbQq oQLoAxYVXaLAZaWQYUqBoWOIqya6kbETExGwuM/lFhWzWyfAn5SklnyiD5nw61Dm HCi6nhtqWEz6XGxFl/F4iALi4cRqvVb1lR2sMv+hbUWi0fVf3tfQWQfGQUQeg1Mm 0gXF4/uNtlx6+RMYkh2N4mC0aZ0nfp8R -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:38 2025 by rpki-client