$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: ayjSs9lz3AJf8ADTyxv6DY09qaYoRn7HqdtChedrML4= Subject key identifier: 4C:EF:F4:3F:0F:B0:AA:BA:75:6F:C9:71:9E:99:57:A0:3D:7E:E3:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCED9D0119CE59F867040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ce:d9:d0:11:9c:e5:9f:86:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=422540ff-d517-4a8b-af6c-b2e2e7e7f607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:c7:ae:ad:f6:9f:63:02:3a:e2:a2:69:ed: ca:0a:7c:2b:88:b9:4e:da:d4:4c:b5:7e:19:79:e3: be:77:70:5d:c9:8f:eb:07:0d:8b:b0:11:fb:56:13: 6b:29:29:ab:47:ea:33:0b:58:4c:a1:77:90:28:5a: cb:1c:09:13:44:5e:5b:78:f7:33:dd:74:21:34:a3: 17:23:6a:bd:08:46:4c:16:d8:1f:58:d1:81:ba:61: 7d:8c:f6:2b:a8:2e:9f:68:33:63:78:10:fb:0c:3f: 80:c8:59:73:b9:7e:8d:a4:ca:1f:00:bc:21:f2:76: c0:e0:6c:19:1d:48:1f:2c:fa:1d:de:1c:5f:6d:13: 80:9f:43:22:e7:e5:40:77:e5:a3:c3:00:93:29:6a: 3a:d4:16:10:cb:e7:e5:5d:b1:af:33:85:5b:f9:69: 77:8d:02:df:ae:a4:0e:c3:95:33:e9:fa:8e:69:58: b3:62:c7:c2:8f:0d:36:8a:03:0b:2e:83:b9:74:79: 35:e7:3b:24:eb:fb:38:7a:b8:3b:47:15:94:c3:6b: 6e:9c:b5:be:b0:45:df:d1:fc:cb:82:31:81:8a:62: 0c:1e:24:28:e2:96:3d:6b:c6:8e:c0:89:a6:96:8b: ed:84:38:2c:2a:1c:2e:ca:24:ba:4c:4c:29:ed:03: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:F4:3F:0F:B0:AA:BA:75:6F:C9:71:9E:99:57:A0:3D:7E:E3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b8:11:87:60:76:eb:1f:aa:39:19:a2:22:17:eb:4d:32:04: c1:ef:e9:51:c2:b9:76:43:9d:9c:17:54:90:60:b1:71:0f:61: b1:6c:01:37:e4:be:1b:97:1f:62:9b:6e:32:ab:3a:fc:af:69: 6d:07:34:86:d8:2f:9e:35:39:77:9b:1d:ec:75:87:a3:20:b5: 47:fb:b8:4e:d9:9f:4e:ab:96:89:dd:4d:2f:4f:16:ef:b4:44: f7:55:53:8e:be:a7:22:e2:22:94:0f:b9:5e:d6:16:72:a1:f5: 81:08:95:f5:a6:b2:36:cc:8a:19:0c:48:5a:f6:8e:c6:28:29: b0:61:04:8b:8d:36:fc:e6:ee:23:dd:d4:3a:b2:17:76:85:ab: da:78:df:66:d3:6a:c4:41:65:0a:53:04:6f:a8:d0:f0:a6:46: c2:42:22:56:86:be:1b:3c:69:f6:e2:5c:5c:f1:1c:fe:56:20: 12:47:2b:0a:ce:d3:96:2a:10:e1:23:cf:1b:47:76:bd:fe:48: 04:9a:f9:3d:f0:bf:74:8c:7d:98:1d:83:f0:77:6f:b1:34:73: 73:9e:b4:59:44:f3:f7:7f:1c:0c:5d:f5:81:56:f8:76:e2:b1: d0:bb:1f:8a:92:e1:56:e6:a6:a6:a2:51:55:c7:b8:13:bf:ac: b6:93:5b:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha87Z0BGc5Z+GcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NDIyNTQwZmYtZDUxNy00YThiLWFmNmMtYjJlMmU3ZTdmNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuDHrq32n2MCOuKiae3KCnwriLlO2tRMtX4Z eeO+d3BdyY/rBw2LsBH7VhNrKSmrR+ozC1hMoXeQKFrLHAkTRF5bePcz3XQhNKMX I2q9CEZMFtgfWNGBumF9jPYrqC6faDNjeBD7DD+AyFlzuX6NpMofALwh8nbA4GwZ HUgfLPod3hxfbROAn0Mi5+VAd+WjwwCTKWo61BYQy+flXbGvM4Vb+Wl3jQLfrqQO w5Uz6fqOaVizYsfCjw02igMLLoO5dHk15zsk6/s4erg7RxWUw2tunLW+sEXf0fzL gjGBimIMHiQo4pY9a8aOwImmlovthDgsKhwuyiS6TEwp7QOPtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEzv9D8PsKq6dW/JcZ6ZV6A9fuNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjuBGHYHbrH6o5GaIiF+tNMgTB7+lRwrl2Q52cF1SQYLFxD2GxbAE3 5L4blx9im24yqzr8r2ltBzSG2C+eNTl3mx3sdYejILVH+7hO2Z9Oq5aJ3U0vTxbv tET3VVOOvqci4iKUD7le1hZyofWBCJX1prI2zIoZDEha9o7GKCmwYQSLjTb85u4j 3dQ6shd2havaeN9m02rEQWUKUwRvqNDwpkbCQiJWhr4bPGn24lxc8Rz+ViASRysK ztOWKhDhI88bR3a9/kgEmvk98L90jH2YHYPwd2+xNHNznrRZRPP3fxwMXfWBVvh2 4rHQux+KkuFW5qamolFVx7gTv6y2k1v6 -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:56 2025 by rpki-client