$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa File: ef83dae0-919b-3c68-8186-373eab1ba0bb.roa (raw, json) Hash identifier: rNrf1Y+dDWjrkrkjxErpZmw7ebVn426qIjkMePpixPI= Subject key identifier: E9:B8:47:04:60:27:B3:26:18:F5:B1:F1:4F:B2:02:33:B5:68:E1:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCDFDBA8AF0E061BA6E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 397210 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:cd:fd:ba:8a:f0:e0:61:ba:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ea71d5f4-8580-42aa-a731-7e26a938b4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:54:7d:4b:84:76:63:53:70:4e:4e:0e:57: 53:39:d7:80:58:fb:dc:e1:35:a4:c3:6d:b1:b9:cc: 51:57:7b:1f:98:48:02:27:83:5d:d6:5c:75:ef:37: 91:36:09:53:5a:86:5a:87:a9:de:6c:e6:54:15:c7: 36:cb:76:ef:a7:d6:c1:51:53:84:9a:49:8d:f3:52: 07:7b:ab:79:cd:cd:37:21:d6:32:c0:5a:d2:f7:55: a3:0d:e9:64:d3:3f:71:c6:9a:13:e5:07:e2:79:b8: 27:2d:5a:b2:81:b7:83:1f:fa:14:11:17:b7:26:b5: 68:60:47:e0:4e:0d:f3:fe:f4:ee:8e:79:be:d4:69: bc:29:ab:24:58:bc:5c:1d:55:fb:d3:19:32:ff:02: 2c:60:db:cd:16:f0:45:30:ca:1e:d4:79:bd:1d:da: a1:dc:fa:55:28:a5:2d:8c:a7:31:42:30:34:79:8e: 33:31:9a:10:65:1d:95:49:4d:47:5d:a9:d5:36:84: df:9a:ec:7c:cc:71:ed:0a:03:e4:b9:ff:ce:70:8e: 27:f2:62:25:2e:a2:cc:c9:29:d4:f7:e3:d2:6a:20: f1:cd:4b:8c:91:b7:98:05:e6:80:a5:58:bc:93:85: 5f:fc:59:3c:ab:c9:7a:7e:cb:71:c9:71:14:36:86: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B8:47:04:60:27:B3:26:18:F5:B1:F1:4F:B2:02:33:B5:68:E1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:82:e1:82:fe:8a:64:12:42:34:6a:55:1e:fa:46:d6:41:c5: e2:f4:b5:64:c0:94:b7:fe:24:15:bf:0f:8a:fa:d0:cc:1c:60: 02:48:66:dc:8d:68:ba:a5:56:74:6d:95:89:19:36:0e:59:49: 8a:d9:54:d8:c5:28:ab:b9:83:eb:ac:a3:1f:30:c4:81:a3:10: 82:31:d2:66:18:c5:ae:9a:40:00:c4:cf:0b:79:19:76:88:c8: ca:6b:64:d1:6e:81:21:ee:f2:46:1e:02:d9:ad:84:c7:a2:77: f2:0f:10:59:9f:e0:36:6d:f8:f2:5e:e3:3f:32:07:8a:6c:4f: 93:4f:b3:8f:e1:15:61:e4:8f:b8:d5:b7:c1:e5:c1:ac:41:a3: 2d:dd:4c:8a:43:f7:44:6a:97:b4:57:d5:22:0e:55:e0:71:8c: a9:bc:a7:69:59:e9:9d:2d:7f:84:cc:54:80:4f:fe:bf:98:0b: 02:6e:3a:92:c5:e5:5b:04:df:80:de:53:c0:44:f3:36:44:00: f2:bb:12:86:36:39:92:61:e4:28:e0:3f:23:5c:b1:9e:81:48: af:a8:4d:99:4c:1f:f6:3e:fc:a3:19:bf:91:84:b9:b6:46:7f: 5d:9a:25:0f:44:3e:4c:57:93:35:ca:cf:f6:46:20:cc:6f:9d: 8a:23:79:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha839uorw4GG6bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWE3MWQ1ZjQtODU4MC00MmFhLWE3MzEtN2UyNmE5MzhiNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiclUfUuEdmNTcE5ODldTOdeAWPvc4TWkw22x ucxRV3sfmEgCJ4Nd1lx17zeRNglTWoZah6nebOZUFcc2y3bvp9bBUVOEmkmN81IH e6t5zc03IdYywFrS91WjDelk0z9xxpoT5QfiebgnLVqygbeDH/oUERe3JrVoYEfg Tg3z/vTujnm+1Gm8KaskWLxcHVX70xky/wIsYNvNFvBFMMoe1Hm9Hdqh3PpVKKUt jKcxQjA0eY4zMZoQZR2VSU1HXanVNoTfmux8zHHtCgPkuf/OcI4n8mIlLqLMySnU 9+PSaiDxzUuMkbeYBeaApVi8k4Vf/Fk8q8l6fstxyXEUNobzgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOm4RwRgJ7MmGPWx8U+yAjO1aOFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4M2RhZTAtOTE5Yi0z YzY4LTgxODYtMzczZWFiMWJhMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbguGC/opkEkI0alUe+kbWQcXi9LVkwJS3/iQVvw+K+tDMHGACSGbc jWi6pVZ0bZWJGTYOWUmK2VTYxSiruYPrrKMfMMSBoxCCMdJmGMWumkAAxM8LeRl2 iMjKa2TRboEh7vJGHgLZrYTHonfyDxBZn+A2bfjyXuM/MgeKbE+TT7OP4RVh5I+4 1bfB5cGsQaMt3UyKQ/dEape0V9UiDlXgcYypvKdpWemdLX+EzFSAT/6/mAsCbjqS xeVbBN+A3lPARPM2RADyuxKGNjmSYeQo4D8jXLGegUivqE2ZTB/2PvyjGb+RhLm2 Rn9dmiUPRD5MV5M1ys/2RiDMb52KI3nG -----END CERTIFICATE-----Generated at Sun Apr 27 19:49:59 2025 by rpki-client