$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6d1852f-f1eb-330c-839e-f60bd74f89f0.roa File: e6d1852f-f1eb-330c-839e-f60bd74f89f0.roa (raw, json) Hash identifier: oUhcILESotZikGNgEjD1WACy3sOgti5dtUXSiYqhLl0= Subject key identifier: 53:77:7D:51:40:2F:83:A2:D9:C8:CE:0E:7E:48:CD:8C:EC:6A:32:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94AC572268E98DBFF9160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6d1852f-f1eb-330c-839e-f60bd74f89f0.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 216.87.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4a:c5:72:26:8e:98:db:ff:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=8fd135ae-2770-4986-81ad-5903fb5c3988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:44:0b:aa:46:f4:54:3e:35:46:e2:cd:41: 9e:8a:d1:a5:24:4b:c8:c0:da:f8:a9:35:d0:9a:c5: eb:82:5c:d8:08:9e:20:ed:ed:99:1f:48:bf:45:e5: b8:7f:e7:a1:45:2e:09:0f:b1:19:6d:38:5b:26:cd: 7a:20:e9:f1:61:86:80:b7:ec:12:f0:7c:75:5b:e3: 31:a8:d8:9d:7a:8d:9c:bb:41:e6:fd:a3:85:11:54: 24:f7:ed:b8:6b:f7:bf:91:03:39:2a:49:ce:59:49: db:b7:24:27:d1:2e:be:8c:e8:1f:cb:20:b7:50:46: 77:96:0c:f2:7c:57:49:ef:11:90:99:0c:5a:bf:fb: 9b:45:aa:3a:6e:37:ef:00:e4:c0:c1:b6:4e:33:f5: a0:92:63:01:33:0a:7f:bf:b0:9a:bf:90:5b:81:ab: 3c:4b:f7:7e:21:18:9e:8f:86:b4:73:c6:f8:a6:9b: 62:8f:c8:a8:78:0a:c7:9c:bb:f8:47:69:ab:e3:4a: 4c:21:07:aa:28:10:93:38:b2:7d:60:e1:26:01:d2: d9:ad:92:65:01:09:99:ce:41:c6:0b:a4:2f:9b:66: 27:00:3a:e9:a8:40:bd:1d:8b:d6:09:da:f3:de:61: 8f:cb:f6:15:6c:56:a6:8a:8b:59:9b:c4:fd:aa:1a: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:77:7D:51:40:2F:83:A2:D9:C8:CE:0E:7E:48:CD:8C:EC:6A:32:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6d1852f-f1eb-330c-839e-f60bd74f89f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:64:34:bd:0c:be:b9:11:6c:4f:85:43:a3:b5:4f:26:8f:7a: b9:ad:99:cc:84:13:2e:b7:3a:f6:65:e4:65:0e:44:7b:04:25: 31:88:d4:c3:0c:b8:18:71:02:a1:17:95:fa:8b:6b:87:2f:9f: 24:27:5f:4b:aa:4b:d1:63:63:a1:26:47:93:4d:fd:a6:f7:b9: 99:23:2f:35:62:f0:fb:d4:5f:34:38:9c:dc:c0:ea:9c:11:f3: be:0d:b1:72:7d:ab:87:f2:e8:5a:db:d7:46:c1:af:66:57:e5: c3:b5:f7:86:43:86:97:b1:73:35:6f:67:66:79:db:76:0f:57: 8d:71:74:ab:ba:22:13:da:53:18:fe:f4:8a:9b:f0:69:70:58: 7c:84:e0:cb:c0:35:b8:50:6e:3e:66:af:54:f2:ae:fa:d2:73: 91:35:c9:76:e2:10:2c:29:ec:42:60:71:87:68:87:d6:6c:71: b3:96:a6:35:74:bf:7c:0a:35:82:15:3a:05:f2:a7:d3:21:7a: e6:2d:09:99:84:97:14:21:0a:3f:69:d8:8c:09:1d:35:18:81: 11:ef:fe:41:1b:17:3a:34:19:9e:4e:27:5d:c7:bc:2b:97:42: da:50:16:ca:8e:e3:b6:57:8f:e7:48:bf:9f:09:08:07:0d:7f: b2:fa:7a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUrFciaOmNv/kWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OGZkMTM1YWUtMjc3MC00OTg2LTgxYWQtNTkwM2ZiNWMzOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoahEC6pG9FQ+NUbizUGeitGlJEvIwNr4qTXQ msXrglzYCJ4g7e2ZH0i/ReW4f+ehRS4JD7EZbThbJs16IOnxYYaAt+wS8Hx1W+Mx qNideo2cu0Hm/aOFEVQk9+24a/e/kQM5KknOWUnbtyQn0S6+jOgfyyC3UEZ3lgzy fFdJ7xGQmQxav/ubRao6bjfvAOTAwbZOM/WgkmMBMwp/v7Cav5Bbgas8S/d+IRie j4a0c8b4pptij8ioeArHnLv4R2mr40pMIQeqKBCTOLJ9YOEmAdLZrZJlAQmZzkHG C6Qvm2YnADrpqEC9HYvWCdrz3mGPy/YVbFamiotZm8T9qhrAFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN3fVFAL4Oi2cjODn5IzYzsajKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTZkMTg1MmYtZjFlYi0z MzBjLTgzOWUtZjYwYmQ3NGY4OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9kNL0MvrkRbE+FQ6O1TyaPermtmcyEEy63OvZl5GUORHsEJTGI1MMM uBhxAqEXlfqLa4cvnyQnX0uqS9FjY6EmR5NN/ab3uZkjLzVi8PvUXzQ4nNzA6pwR 874NsXJ9q4fy6Frb10bBr2ZX5cO194ZDhpexczVvZ2Z523YPV41xdKu6IhPaUxj+ 9Iqb8GlwWHyE4MvANbhQbj5mr1TyrvrSc5E1yXbiECwp7EJgcYdoh9ZscbOWpjV0 v3wKNYIVOgXyp9MheuYtCZmElxQhCj9p2IwJHTUYgRHv/kEbFzo0GZ5OJ13HvCuX QtpQFsqO47ZXj+dIv58JCAcNf7L6enY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:52 2025 by rpki-client