$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa File: 08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa (raw, json) Hash identifier: ZKlfTt3SbOAhdwu8h55jrrbZvVX+sMSmKtFAC7Ra9cI= Subject key identifier: 9D:98:FB:8E:CD:3A:12:73:98:BC:4E:63:77:95:E9:F5:7D:78:FC:08 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3F518AD0B27E8AA77B040 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 62651 IP address blocks: 216.131.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f5:18:ad:0b:27:e8:aa:77:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=8e216048-e12d-4edd-8f1d-93c70b6a4f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:bd:ba:90:01:d0:59:5f:58:0b:04:65:05: 0c:ac:00:b6:d2:f5:2f:4f:bb:d4:fd:85:a3:82:ec: 58:64:66:91:c8:87:bb:45:3f:fe:92:fa:a7:a0:45: ad:9f:b1:96:c1:d3:80:56:4a:e6:2f:8d:c8:58:c7: fe:5a:55:f2:2f:d8:f6:84:74:99:29:c7:21:a5:46: 63:1f:de:82:be:fd:f3:ad:24:c0:19:72:17:cd:f3: 4c:3e:a0:7f:50:cd:1c:66:f0:bd:43:8a:6e:5f:88: 3b:81:b9:ae:28:ab:d4:85:84:ca:4c:7c:c6:6d:f6: b9:bc:38:b1:a4:42:df:32:d1:d2:e8:dc:d3:f9:9b: f8:fb:e7:63:40:1c:32:c9:d9:ec:af:b3:65:6d:8c: 64:2f:af:38:69:d1:4e:a0:ab:48:36:13:03:18:1a: 49:cc:02:05:0a:35:3c:16:d5:64:5e:0b:9a:15:43: 05:13:ba:59:6f:02:d3:1d:33:67:05:8b:de:1c:22: 3f:af:08:cf:f9:a4:90:96:66:af:42:68:3e:cf:06: 08:7c:56:cd:f5:3b:9d:0c:75:81:99:82:bd:c9:22: 7e:09:5d:0f:f1:b8:c2:09:9d:58:2c:bc:e8:cd:16: 35:53:f0:e1:6a:4b:a9:51:a5:44:d9:9e:2a:53:9b: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:FB:8E:CD:3A:12:73:98:BC:4E:63:77:95:E9:F5:7D:78:FC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:27:b4:f5:70:f4:6c:f9:1b:cf:0b:66:a2:ce:da:b3:7c:68: 3b:01:9b:6f:84:0b:37:b9:20:af:85:7d:80:ad:ac:34:cc:ce: 50:06:61:66:7b:44:fc:f4:e9:b2:60:0d:51:1b:fb:c7:60:8e: 47:f7:a3:7b:1d:68:25:bc:89:ba:bd:e6:d4:82:d9:15:39:5b: 72:e9:fa:9b:f2:7f:04:80:22:cb:56:bb:95:84:02:62:2e:a3: ea:12:7c:ca:c6:02:57:de:0d:89:2b:fc:e5:35:b4:a5:de:f5: e7:fd:9d:e3:23:4d:a4:85:fb:8b:89:10:b0:b7:d7:b3:30:22: f0:65:f6:b8:c8:d2:2c:f8:62:3e:a8:49:a8:e6:de:9b:02:16: 25:81:9b:d0:09:36:15:02:3d:4c:11:43:d9:1a:3d:be:84:9c: 55:1a:e0:27:cc:9f:e4:9f:7b:0f:0f:9a:5b:ae:e1:3d:28:94: 89:fe:c6:ee:8a:15:6b:b0:b4:7e:13:e1:a5:d0:2c:44:31:65: 91:78:e5:23:e6:dd:fe:10:54:2e:92:46:eb:17:98:6d:1e:2a: f5:ae:e9:1b:1f:cd:44:12:1b:77:4c:ef:0f:eb:59:86:f3:6d: 0f:95:53:6e:0b:3d:09:37:dc:05:8b:a9:d7:17:35:2e:3a:e1: 48:bc:b3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/UYrQsn6Kp3sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OGUyMTYwNDgtZTEyZC00ZWRkLThmMWQtOTNjNzBiNmE0ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGS9upAB0FlfWAsEZQUMrAC20vUvT7vU/YWj guxYZGaRyIe7RT/+kvqnoEWtn7GWwdOAVkrmL43IWMf+WlXyL9j2hHSZKcchpUZj H96Cvv3zrSTAGXIXzfNMPqB/UM0cZvC9Q4puX4g7gbmuKKvUhYTKTHzGbfa5vDix pELfMtHS6NzT+Zv4++djQBwyydnsr7NlbYxkL684adFOoKtINhMDGBpJzAIFCjU8 FtVkXguaFUMFE7pZbwLTHTNnBYveHCI/rwjP+aSQlmavQmg+zwYIfFbN9TudDHWB mYK9ySJ+CV0P8bjCCZ1YLLzozRY1U/DhakupUaVE2Z4qU5ulGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2Y+47NOhJzmLxOY3eV6fV9ePwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDhlYmY0ODktY2UxNi0z ZjBlLWI2OWQtN2RhYjFmOWE5YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8ntPVw9Gz5G88LZqLO2rN8aDsBm2+ECze5IK+FfYCtrDTMzlAGYWZ7 RPz06bJgDVEb+8dgjkf3o3sdaCW8ibq95tSC2RU5W3Lp+pvyfwSAIstWu5WEAmIu o+oSfMrGAlfeDYkr/OU1tKXe9ef9neMjTaSF+4uJELC317MwIvBl9rjI0iz4Yj6o Sajm3psCFiWBm9AJNhUCPUwRQ9kaPb6EnFUa4CfMn+Sfew8Pmluu4T0olIn+xu6K FWuwtH4T4aXQLEQxZZF45SPm3f4QVC6SRusXmG0eKvWu6RsfzUQSG3dM7w/rWYbz bQ+VU24LPQk33AWLqdcXNS464Ui8s1s= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:41 2025 by rpki-client