$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa File: dd8a995e-ded4-3180-b959-a5098f3033df.roa (raw, json) Hash identifier: luCHnxSbwynrKGbavPC+rxQ5RbTifGD1BXAJZRjS+24= Subject key identifier: 42:E3:E1:C8:A0:80:38:46:60:B4:6A:99:1C:EC:A7:FB:BC:87:C9:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCF8EDE4A04F128C1F080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396544 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:cf:8e:de:4a:04:f1:28:c1:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ce257b8b-08b2-4a78-b364-0242998da810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:b5:3e:9e:b7:77:2e:0a:6d:e0:f3:0f:91: b2:e2:de:51:1c:97:34:b6:24:fe:15:dc:fd:c5:15: 4b:d5:aa:07:9b:1c:19:8a:a8:58:3e:9f:ef:22:d1: ed:b0:72:4c:39:2c:8e:a1:57:01:d1:7a:6b:41:ca: 83:9a:06:48:3c:6d:99:fa:17:c7:44:d4:cf:79:d9: c6:30:9c:3d:ee:39:d4:9c:ee:e3:90:c5:b7:ff:bf: f9:6e:84:dc:db:9f:5b:fa:89:0b:03:1b:b8:ce:d8: 24:cf:d0:55:5b:41:d7:c1:c0:9b:78:ce:5a:13:69: 68:17:a5:77:c0:c3:b4:5c:e9:bb:fb:56:7f:4f:30: c2:00:e5:80:0a:a0:ba:9b:04:be:a9:63:a7:45:c2: 0e:d2:a9:6f:da:97:f9:4c:b3:05:4a:84:31:95:f2: c7:3d:2a:5e:f2:4a:59:c1:06:67:60:92:42:4f:31: 07:5f:2d:4f:4f:6c:16:a4:de:b1:47:27:21:60:0a: 8c:43:86:0b:a1:1f:17:1c:ba:fd:19:18:bf:72:e6: a7:44:68:6b:e9:de:58:0d:26:28:49:53:d8:21:6a: f6:38:f3:ff:17:ca:1a:84:9d:b8:f6:d8:b1:91:ac: 45:a4:c7:76:9f:11:1e:07:d7:b0:c5:c1:7d:73:c4: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E3:E1:C8:A0:80:38:46:60:B4:6A:99:1C:EC:A7:FB:BC:87:C9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:69:ac:08:15:4a:09:ab:8d:2e:b3:a9:70:93:25:35:76:61: c7:59:fe:92:1c:31:48:41:6b:5d:16:4f:5c:99:dd:27:43:b9: 92:39:b1:96:d8:ce:33:88:dd:f8:d6:37:66:4c:5e:71:1f:cc: 7e:2d:99:db:8b:f6:6d:41:0b:59:1b:a5:3b:e7:ae:2c:7b:da: 52:ec:96:ca:a4:62:67:00:0f:0b:ca:82:c4:72:7a:8d:1b:eb: c8:b9:c2:b6:e3:1d:cc:22:9f:6b:9f:11:7f:6f:34:40:bf:f8: 11:cd:da:82:8d:8a:3e:b6:da:84:3a:63:b0:2a:c1:77:93:85: d2:37:a4:73:6a:2c:03:4d:11:13:d6:d4:f9:b2:18:58:51:35: 19:f0:8c:77:34:8e:99:57:c5:72:9f:53:75:90:d4:70:84:a8: 07:0f:16:80:1f:4a:de:c2:ae:cd:c4:e4:e4:44:20:08:82:79: fe:a5:a3:f8:a4:06:11:e0:1a:3a:87:f8:5b:e3:c5:0a:af:ec: b0:45:82:ad:d8:b0:ca:b3:70:c6:d5:a7:1f:fb:c5:e9:13:09: 21:cd:59:95:27:49:36:cd:a9:63:bc:85:cf:08:21:db:04:d5: da:37:07:93:b6:f6:26:b6:85:f2:f1:ab:d4:dc:13:34:0f:fa: 92:af:a0:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8+O3koE8SjB8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2UyNTdiOGItMDhiMi00YTc4LWIzNjQtMDI0Mjk5OGRhODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcm1Pp63dy4KbeDzD5Gy4t5RHJc0tiT+Fdz9 xRVL1aoHmxwZiqhYPp/vItHtsHJMOSyOoVcB0XprQcqDmgZIPG2Z+hfHRNTPednG MJw97jnUnO7jkMW3/7/5boTc259b+okLAxu4ztgkz9BVW0HXwcCbeM5aE2loF6V3 wMO0XOm7+1Z/TzDCAOWACqC6mwS+qWOnRcIO0qlv2pf5TLMFSoQxlfLHPSpe8kpZ wQZnYJJCTzEHXy1PT2wWpN6xRychYAqMQ4YLoR8XHLr9GRi/cuanRGhr6d5YDSYo SVPYIWr2OPP/F8oahJ249tixkaxFpMd2nxEeB9ewxcF9c8QyWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFELj4ciggDhGYLRqmRzsp/u8h8mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4YTk5NWUtZGVkNC0z MTgwLWI5NTktYTUwOThmMzAzM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpaawIFUoJq40us6lwkyU1dmHHWf6SHDFIQWtdFk9cmd0nQ7mSObGW 2M4ziN341jdmTF5xH8x+LZnbi/ZtQQtZG6U7564se9pS7JbKpGJnAA8LyoLEcnqN G+vIucK24x3MIp9rnxF/bzRAv/gRzdqCjYo+ttqEOmOwKsF3k4XSN6RzaiwDTRET 1tT5shhYUTUZ8Ix3NI6ZV8Vyn1N1kNRwhKgHDxaAH0rewq7NxOTkRCAIgnn+paP4 pAYR4Bo6h/hb48UKr+ywRYKt2LDKs3DG1acf+8XpEwkhzVmVJ0k2zaljvIXPCCHb BNXaNweTtvYmtoXy8avU3BM0D/qSr6D/ -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:14 2025 by rpki-client