$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b10f4966-302b-3239-bf06-a82cc7e08bbe.roa File: b10f4966-302b-3239-bf06-a82cc7e08bbe.roa (raw, json) Hash identifier: OK8it/onl3Wp8rCwg8+sqNO0TGjgghamfQWIhHwJKxM= Subject key identifier: 8A:B2:F2:01:66:71:EA:C4:59:D2:83:19:41:A1:0D:3A:C3:7B:0B:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCE7D1E38B85B68551540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b10f4966-302b-3239-bf06-a82cc7e08bbe.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396567 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ce:7d:1e:38:b8:5b:68:55:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=83be7ba5-dbdc-40f2-a36d-0a99d0c83d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:14:65:d6:f2:e3:b7:1c:31:2b:84:e7:d5: b2:9d:07:1b:73:09:64:63:09:24:46:ff:dc:25:d4: e5:e2:89:f2:2f:f8:d4:5d:4c:4a:3a:00:d2:c2:d2: 02:1f:e7:8f:64:d3:11:fa:34:72:34:b1:47:fb:21: c6:27:9e:87:4e:8b:b2:78:e7:2c:5f:2b:3a:17:60: 70:03:9a:45:23:0b:3d:6d:60:cf:38:72:3d:56:e9: ac:dd:76:a4:6f:5b:4e:48:ca:b6:3c:16:75:e6:1a: a7:c7:9a:68:69:43:10:86:2e:4a:5f:e0:80:3e:bd: 24:af:19:ae:ee:f7:f9:87:95:c9:43:53:55:08:a9: ce:a7:fd:cc:d5:7a:ba:9b:3d:48:bf:04:d8:c3:c4: 2e:4b:01:19:83:ed:a3:ae:bc:e6:cc:14:eb:24:df: 0b:88:74:50:f2:e6:04:ad:68:2d:27:93:6c:a4:fb: f0:df:e7:b6:da:dc:b1:71:a7:6a:9b:ec:7d:9a:5e: 5b:f5:44:2f:b1:31:08:8e:d9:6c:76:47:53:c8:56: 13:82:f2:72:e7:54:ae:d4:02:ef:88:a5:b9:f1:a5: 93:04:cd:1d:2d:c9:3c:ef:5a:d0:6c:60:36:a2:9f: 6f:ab:bd:53:96:e8:63:24:56:ae:09:a8:d6:47:b1: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:F2:01:66:71:EA:C4:59:D2:83:19:41:A1:0D:3A:C3:7B:0B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b10f4966-302b-3239-bf06-a82cc7e08bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:75:fd:71:b5:63:f9:2d:2e:9a:28:bc:ff:cd:a3:27:89:11: bf:9e:3b:2c:3e:4e:f0:8f:22:92:b8:61:eb:29:d1:2d:a4:c8: e4:a8:80:62:7b:c8:15:dd:88:88:96:66:cb:b6:07:5a:a2:33: e0:e6:56:c8:4f:5c:60:a2:ac:f6:3e:f1:0b:8a:f2:3e:d7:c6: 8a:80:06:9b:8a:7e:b3:00:61:b8:99:a3:c1:a5:ba:d5:43:3c: 33:80:cd:4d:ea:ae:1d:59:fb:15:88:c5:d3:d7:98:90:49:e5: b7:5f:47:1c:68:ec:4b:00:ba:0a:77:33:d4:0e:6a:0a:56:6c: 8e:61:b2:8b:94:b6:95:60:a2:26:8e:f1:e9:84:57:86:10:e0: 3e:35:d7:8b:19:ba:82:5c:06:81:97:d4:60:ff:66:82:ca:e2: cf:fa:25:ae:9b:f9:60:ec:be:2e:7c:57:4d:9a:0f:05:f9:c3: 8c:2b:68:a4:03:89:c8:44:77:eb:22:fd:72:aa:30:b0:43:57: 09:d9:f4:12:27:b0:f2:df:4e:08:eb:56:0e:37:7b:55:40:fa: 79:60:33:e5:5e:0a:14:61:7c:cb:6f:0c:02:94:7e:bc:5e:4a: 46:11:e1:71:f9:93:22:36:c9:cf:b1:ef:04:e9:7d:6b:00:2e: ae:de:10:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha859Hji4W2hVFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODNiZTdiYTUtZGJkYy00MGYyLWEzNmQtMGE5OWQwYzgzZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCsUZdby47ccMSuE59WynQcbcwlkYwkkRv/c JdTl4onyL/jUXUxKOgDSwtICH+ePZNMR+jRyNLFH+yHGJ56HTouyeOcsXys6F2Bw A5pFIws9bWDPOHI9Vums3Xakb1tOSMq2PBZ15hqnx5poaUMQhi5KX+CAPr0krxmu 7vf5h5XJQ1NVCKnOp/3M1Xq6mz1IvwTYw8QuSwEZg+2jrrzmzBTrJN8LiHRQ8uYE rWgtJ5NspPvw3+e22tyxcadqm+x9ml5b9UQvsTEIjtlsdkdTyFYTgvJy51Su1ALv iKW58aWTBM0dLck871rQbGA2op9vq71TluhjJFauCajWR7EPaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIqy8gFmcerEWdKDGUGhDTrDewv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjEwZjQ5NjYtMzAyYi0z MjM5LWJmMDYtYTgyY2M3ZTA4YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAndf1xtWP5LS6aKLz/zaMniRG/njssPk7wjyKSuGHrKdEtpMjkqIBi e8gV3YiIlmbLtgdaojPg5lbIT1xgoqz2PvELivI+18aKgAabin6zAGG4maPBpbrV QzwzgM1N6q4dWfsViMXT15iQSeW3X0ccaOxLALoKdzPUDmoKVmyOYbKLlLaVYKIm jvHphFeGEOA+NdeLGbqCXAaBl9Rg/2aCyuLP+iWum/lg7L4ufFdNmg8F+cOMK2ik A4nIRHfrIv1yqjCwQ1cJ2fQSJ7Dy304I61YON3tVQPp5YDPlXgoUYXzLbwwClH68 XkpGEeFx+ZMiNsnPse8E6X1rAC6u3hAa -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:56 2025 by rpki-client