$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa File: 05945125-c5c6-33a9-93e7-70431442ef5d.roa (raw, json) Hash identifier: vqZ47ogMleQbgUNHESqa2scI43LeZA+XCc/Svqp5MJo= Subject key identifier: AF:D7:05:A8:AC:02:79:C3:DD:32:63:7A:9C:EE:18:7D:A7:0A:12:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCD92E8C3C577EFD521F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396605 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:cd:92:e8:c3:c5:77:ef:d5:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=bff54578-0b5d-4cad-85d6-643af4bb807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:27:76:71:7b:c9:fd:36:c3:70:81:1a:e8: e7:cb:e0:6b:46:19:81:01:35:39:c4:e5:05:9e:87: cd:e0:e0:ee:a4:5b:4f:31:0b:b8:7f:86:53:1d:5f: 0c:b8:b5:a0:31:1e:98:92:af:88:40:8d:b8:0f:f9: 0e:e3:6f:ea:98:63:0c:75:78:0c:40:11:d1:4d:82: 32:86:f9:1f:63:7b:fb:a1:f6:8c:6c:4b:02:5a:18: b7:20:29:be:b1:38:bf:95:38:12:19:d3:af:aa:69: 80:fe:e5:5f:7f:3c:f1:1f:83:9c:de:41:38:ed:d6: c9:66:69:52:54:ee:3c:e0:94:83:e0:cf:d4:dd:ce: 3d:c6:b8:0a:dc:0b:51:15:b5:bb:bb:36:95:48:12: ab:83:67:49:94:8a:ca:74:3f:0b:62:b7:1e:e8:28: bf:0d:8b:88:d5:22:08:ac:c7:b7:5b:fa:31:3a:1b: 1f:ac:7d:de:25:c0:7f:ee:be:22:28:1c:ff:83:a4: b1:e2:93:04:64:35:da:ec:c7:13:71:0e:87:6b:2a: d7:9c:b7:c5:a9:59:e7:0a:d4:9c:2e:0e:a1:14:fb: d3:04:56:89:8f:bf:00:a0:30:75:32:ca:70:e6:01: 44:85:4a:c3:8b:b1:dc:0f:66:eb:f8:18:07:41:69: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:05:A8:AC:02:79:C3:DD:32:63:7A:9C:EE:18:7D:A7:0A:12:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ca:6f:e0:ba:c7:7b:3f:e2:6b:df:01:77:d3:91:a2:0b:b0: 6c:a3:b5:10:dd:45:cb:78:52:0f:26:6c:36:1d:d9:44:ad:a5: 75:49:8d:f9:75:0c:47:8d:22:3f:12:23:c6:73:1a:48:b4:b9: cc:5e:03:d5:43:ed:09:17:9e:8b:25:47:20:47:0d:80:5f:29: a2:13:b9:83:56:d8:40:7c:93:36:eb:38:4a:e0:7e:09:ab:1d: 35:b7:62:a5:41:61:e1:23:09:21:b4:23:54:d7:c9:44:a6:47: 2d:a6:da:62:fc:20:13:c6:8d:16:ab:20:4e:1e:4f:ea:e2:b3: 57:b1:60:ae:d7:34:3b:c3:a8:0a:08:37:54:96:de:c1:d5:17: 5d:99:b9:62:8b:13:b8:35:ee:4f:ae:e4:ce:0d:ba:b4:47:ad: 4a:fa:7a:50:17:29:28:7f:ad:91:11:8c:15:8d:9b:6d:cf:08: 90:ef:95:f0:13:07:bd:cb:26:20:2c:7e:68:80:97:5f:4f:28: 16:91:0c:2a:6d:18:41:2e:6f:87:30:b0:48:fb:61:22:9e:a3: 03:5c:b0:d8:c3:17:79:8b:4b:c2:41:6c:cc:cf:8a:17:cc:64: e2:e5:55:64:73:fa:09:47:2e:b8:7d:42:9c:a8:09:1f:81:d8: c0:41:58:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha82S6MPFd+/VIfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YmZmNTQ1NzgtMGI1ZC00Y2FkLTg1ZDYtNjQzYWY0YmI4MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufkndnF7yf02w3CBGujny+BrRhmBATU5xOUF nofN4ODupFtPMQu4f4ZTHV8MuLWgMR6Ykq+IQI24D/kO42/qmGMMdXgMQBHRTYIy hvkfY3v7ofaMbEsCWhi3ICm+sTi/lTgSGdOvqmmA/uVffzzxH4Oc3kE47dbJZmlS VO484JSD4M/U3c49xrgK3AtRFbW7uzaVSBKrg2dJlIrKdD8LYrce6Ci/DYuI1SII rMe3W/oxOhsfrH3eJcB/7r4iKBz/g6Sx4pMEZDXa7McTcQ6HayrXnLfFqVnnCtSc Lg6hFPvTBFaJj78AoDB1Mspw5gFEhUrDi7HcD2br+BgHQWkyKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/XBaisAnnD3TJjepzuGH2nChINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDU5NDUxMjUtYzVjNi0z M2E5LTkzZTctNzA0MzE0NDJlZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCym/gusd7P+Jr3wF305GiC7Bso7UQ3UXLeFIPJmw2HdlEraV1SY35 dQxHjSI/EiPGcxpItLnMXgPVQ+0JF56LJUcgRw2AXymiE7mDVthAfJM26zhK4H4J qx01t2KlQWHhIwkhtCNU18lEpkctptpi/CATxo0WqyBOHk/q4rNXsWCu1zQ7w6gK CDdUlt7B1RddmbliixO4Ne5PruTODbq0R61K+npQFykof62REYwVjZttzwiQ75Xw Ewe9yyYgLH5ogJdfTygWkQwqbRhBLm+HMLBI+2EinqMDXLDYwxd5i0vCQWzMz4oX zGTi5VVkc/oJRy64fUKcqAkfgdjAQViJ -----END CERTIFICATE-----Generated at Sun Apr 27 17:49:02 2025 by rpki-client