$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa File: 940344f4-0160-35f8-8292-c2448905d4ba.roa (raw, json) Hash identifier: jUZ9DTXqU6xGDqZ52lfTr2TZ9wwFersxqWZlChceA1c= Subject key identifier: F2:0A:B2:5B:94:6F:8F:A5:06:E8:02:72:9D:AB:F3:CB:AD:99:9D:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BC9C66CA1930042BE5C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 36629 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c9:c6:6c:a1:93:00:42:be:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=e134f5a9-4297-42d6-b3ba-9e695167195f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:09:ec:09:2f:51:9f:69:0a:fa:b5:37:47: 8b:b1:9a:5b:c5:90:08:13:d3:f8:48:fb:3b:05:12: 83:02:26:25:05:19:ab:20:42:ac:16:61:f3:12:87: 8e:2c:9a:01:57:f7:ba:b0:b3:b8:21:30:46:a8:68: c4:63:75:8d:40:58:9c:4c:a8:4e:bb:35:aa:50:2c: 3e:e8:8e:c4:eb:71:6b:fb:c0:a6:96:e7:16:a3:46: 1a:61:b0:60:42:d3:3e:0f:2c:e9:3d:04:9a:20:dd: 45:a2:b7:0e:3e:8b:f2:34:ce:c4:c0:59:23:02:f0: 3e:12:c4:65:9a:07:b0:87:82:dc:3c:88:8e:60:e8: 8f:ad:8e:25:48:74:70:af:96:4f:46:a2:63:4c:f4: 25:15:55:0a:44:11:43:3f:f6:36:4d:c0:84:87:aa: 4f:b3:db:e1:c6:29:63:c3:eb:b1:c8:6e:dc:19:fa: c7:02:be:fe:5f:f0:30:70:48:98:c2:a6:74:21:8f: cd:e1:2a:1b:69:18:88:ca:ee:c7:92:75:ee:c0:4d: 1a:e9:e0:6d:f8:9c:a8:74:5a:1c:58:5b:d3:7c:98: a1:67:c1:7d:fc:cc:ea:fc:28:be:f3:d8:f2:fe:92: 4b:99:e6:cd:c8:3a:f0:1b:70:25:0e:4b:45:b4:b8: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0A:B2:5B:94:6F:8F:A5:06:E8:02:72:9D:AB:F3:CB:AD:99:9D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b4:2a:7e:41:d9:61:81:ad:60:ee:c2:18:47:0d:78:a2:d0: 53:83:8b:1e:c7:d6:d4:cb:63:eb:15:d7:05:02:4c:d0:d9:d4: de:13:96:ff:8b:5f:1f:1c:50:08:77:f2:83:ba:cc:ff:8e:ee: 5d:5b:82:fe:24:d2:9f:a0:a6:f3:c4:85:09:f5:10:da:24:22: 40:5b:5b:e1:55:00:57:86:c0:30:94:fd:9f:6b:d4:a5:70:04: df:c4:1b:92:52:94:6c:fc:05:62:e9:47:45:7f:38:dc:98:27: 8a:88:25:02:f7:0f:d0:a9:57:14:f5:9f:fa:2d:38:d0:ff:cc: 7b:82:5c:30:de:59:6d:04:03:35:d4:46:db:78:6c:3a:7e:74: ff:93:d5:3b:73:9c:11:47:35:97:60:3d:8e:21:59:91:0c:ea: 31:99:87:c8:31:77:39:04:e3:cd:b4:39:0e:f6:28:b5:f0:a4: 1f:9f:c8:f0:44:78:b9:2e:92:4d:e2:a4:d4:25:ce:79:db:14: 02:35:5e:d2:b2:c2:71:4f:53:ff:8c:8f:1d:a5:2c:c4:34:ab: f0:4a:47:22:3e:78:1f:bd:76:8c:63:27:2f:32:19:a2:de:bd: 93:7b:d7:21:fb:3b:28:06:a9:93:bb:a9:cf:6d:26:f7:ea:c8: 43:02:a8:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8nGbKGTAEK+XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTEzNGY1YTktNDI5Ny00MmQ2LWIzYmEtOWU2OTUxNjcxOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggAJ7AkvUZ9pCvq1N0eLsZpbxZAIE9P4SPs7 BRKDAiYlBRmrIEKsFmHzEoeOLJoBV/e6sLO4ITBGqGjEY3WNQFicTKhOuzWqUCw+ 6I7E63Fr+8CmlucWo0YaYbBgQtM+DyzpPQSaIN1ForcOPovyNM7EwFkjAvA+EsRl mgewh4LcPIiOYOiPrY4lSHRwr5ZPRqJjTPQlFVUKRBFDP/Y2TcCEh6pPs9vhxilj w+uxyG7cGfrHAr7+X/AwcEiYwqZ0IY/N4SobaRiIyu7HknXuwE0a6eBt+JyodFoc WFvTfJihZ8F9/Mzq/Ci+89jy/pJLmebNyDrwG3AlDktFtLgI6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPIKsluUb4+lBugCcp2r88utmZ0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQwMzQ0ZjQtMDE2MC0z NWY4LTgyOTItYzI0NDg5MDVkNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3tCp+Qdlhga1g7sIYRw14otBTg4sex9bUy2PrFdcFAkzQ2dTeE5b/ i18fHFAId/KDusz/ju5dW4L+JNKfoKbzxIUJ9RDaJCJAW1vhVQBXhsAwlP2fa9Sl cATfxBuSUpRs/AVi6UdFfzjcmCeKiCUC9w/QqVcU9Z/6LTjQ/8x7glww3lltBAM1 1EbbeGw6fnT/k9U7c5wRRzWXYD2OIVmRDOoxmYfIMXc5BOPNtDkO9ii18KQfn8jw RHi5LpJN4qTUJc552xQCNV7SssJxT1P/jI8dpSzENKvwSkciPngfvXaMYycvMhmi 3r2Te9ch+zsoBqmTu6nPbSb36shDAqjl -----END CERTIFICATE-----Generated at Sun Apr 27 17:59:39 2025 by rpki-client