$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa File: f8572b75-cff9-35aa-b031-036f8f47dec8.roa (raw, json) Hash identifier: 0t4My69pC/b+pfhp7q/hyK0D08S/xDm9rOKKvWGeYos= Subject key identifier: 0B:AC:5B:A2:DC:EB:F1:E0:4C:88:28:71:66:42:A2:D0:79:6B:9A:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BC702F5BF8566FF496340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396590 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c7:02:f5:bf:85:66:ff:49:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=73b43daa-6b1d-437b-9d87-3de703b328d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:4a:85:55:65:11:2d:0d:96:f9:40:a4:f5: cc:96:27:b6:4f:dd:fd:e7:92:0b:e9:90:95:b8:cd: 80:c4:ce:11:06:8d:d7:ad:55:66:ee:ea:55:83:54: f1:e7:4e:d4:ef:f4:a8:0b:42:b5:9c:bd:5d:42:90: da:df:09:ef:31:47:29:f8:49:78:d7:47:e7:cf:c4: 25:7c:83:d7:05:ae:0f:e1:4b:88:63:a0:da:da:60: 9a:6e:55:58:39:3c:71:13:39:3f:8d:b2:24:67:29: 6f:18:5b:5d:de:4b:cf:bc:a7:4c:ec:ba:54:42:9d: 20:b8:55:9b:10:d6:5a:a6:20:cf:63:e9:a0:ff:c7: 95:7e:3d:89:37:38:65:01:4d:73:f8:77:bd:f0:91: 9b:9c:80:3b:92:09:4e:b6:a8:74:50:a1:8c:8a:73: 4d:17:04:50:6a:a7:e3:d2:22:e8:43:e7:43:73:8c: 20:37:1c:11:77:66:65:87:24:f3:b0:83:a8:b4:b9: 73:22:56:e4:ef:4e:10:0e:23:f1:7b:7f:a7:eb:9f: 46:b5:f0:30:9a:cb:c0:d9:73:8c:80:12:39:07:e7: ae:16:73:09:f7:ef:a2:cf:87:23:ef:6f:78:58:2a: eb:dc:1d:c9:e3:8b:47:cc:83:da:cd:bf:e1:66:41: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AC:5B:A2:DC:EB:F1:E0:4C:88:28:71:66:42:A2:D0:79:6B:9A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7f:ee:ef:74:b0:2b:78:2a:cf:2d:5f:7a:9d:59:19:d8:bc: 7a:e2:18:79:dd:54:0f:66:31:6d:5e:03:cd:f3:21:b5:d5:ca: 38:e9:88:39:7d:2e:e0:e2:e7:8d:c6:74:13:ec:48:c7:9f:95: 36:a3:98:65:17:44:2d:51:68:bd:aa:d7:3b:62:19:5d:d0:39: 61:da:d3:9f:be:a3:88:23:79:ac:95:f7:d4:e6:26:46:21:cc: 64:17:64:29:b6:5f:52:87:f5:b1:89:ce:29:6c:cc:ec:86:51: 1c:79:6f:6d:54:d2:3d:a1:f2:c7:a0:c0:e1:69:8b:d6:ba:f3: ff:93:4a:1e:33:bb:f6:1e:d8:03:2c:fb:14:97:a3:32:8f:de: 44:4f:2a:d5:bc:11:4f:05:fe:17:dc:79:0f:dd:0b:f5:02:f5: f4:d2:aa:de:fd:85:25:77:53:64:22:97:41:8c:e9:33:20:3c: 42:63:d1:f5:b9:7e:34:5b:00:a9:70:f7:98:e5:d1:c5:22:35: fb:73:26:d2:b9:3a:96:b6:ae:2b:9f:7d:53:0b:40:f3:93:d1: 1c:fa:cb:c0:01:5c:e1:f6:8a:6d:55:30:03:bb:87:e4:89:c7: d8:61:8b:03:4d:f5:07:11:d9:09:57:00:05:04:ff:2e:be:7e: 53:63:2d:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8cC9b+FZv9JY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NzNiNDNkYWEtNmIxZC00MzdiLTlkODctM2RlNzAzYjMyOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunpKhVVlES0NlvlApPXMlie2T93955IL6ZCV uM2AxM4RBo3XrVVm7upVg1Tx507U7/SoC0K1nL1dQpDa3wnvMUcp+El410fnz8Ql fIPXBa4P4UuIY6Da2mCablVYOTxxEzk/jbIkZylvGFtd3kvPvKdM7LpUQp0guFWb ENZapiDPY+mg/8eVfj2JNzhlAU1z+He98JGbnIA7kglOtqh0UKGMinNNFwRQaqfj 0iLoQ+dDc4wgNxwRd2ZlhyTzsIOotLlzIlbk704QDiPxe3+n659GtfAwmsvA2XOM gBI5B+euFnMJ9++iz4cj7294WCrr3B3J44tHzIPazb/hZkFo4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAusW6Lc6/HgTIgocWZCotB5a5rdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg1NzJiNzUtY2ZmOS0z NWFhLWIwMzEtMDM2ZjhmNDdkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9f+7vdLAreCrPLV96nVkZ2Lx64hh53VQPZjFtXgPN8yG11co46Yg5 fS7g4ueNxnQT7EjHn5U2o5hlF0QtUWi9qtc7Yhld0Dlh2tOfvqOII3mslffU5iZG IcxkF2Qptl9Sh/Wxic4pbMzshlEceW9tVNI9ofLHoMDhaYvWuvP/k0oeM7v2HtgD LPsUl6Myj95ETyrVvBFPBf4X3HkP3Qv1AvX00qre/YUld1NkIpdBjOkzIDxCY9H1 uX40WwCpcPeY5dHFIjX7cybSuTqWtq4rn31TC0Dzk9Ec+svAAVzh9optVTADu4fk icfYYYsDTfUHEdkJVwAFBP8uvn5TYy0B -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:45 2025 by rpki-client