$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa File: 12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json) Hash identifier: kWAM7zY4bqNKPRrtb9Wtjzr+XAQWJfJmQ/8d3mdn944= Subject key identifier: 00:28:EB:BE:B4:32:A4:16:48:2A:96:81:64:19:4C:82:80:2A:29:5A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584953C409AC3B2A0A22CC21DF80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 22781 IP address blocks: 216.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:09:ac:3b:2a:0a:22:cc:21:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=c39a0101-55ee-4bc2-9229-2aa1b94a8120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9a:7c:a6:07:4f:ff:05:84:80:f8:77:ac:f3: 9a:47:38:12:b1:e7:84:18:14:33:e7:b5:01:60:a9: ca:0d:97:98:02:6d:a2:b0:dd:9b:81:5b:50:e0:5e: e0:43:9e:54:2d:41:5d:9d:f9:db:10:89:34:99:50: a4:b4:c7:31:ec:41:a7:1f:e4:1e:c4:2f:01:19:93: 84:44:91:fa:b0:b9:8a:71:1f:60:eb:68:00:ba:44: 94:9b:02:e7:ba:2f:ac:30:90:0f:00:93:55:f6:e9: 7b:f1:9c:7f:22:b8:e5:74:10:11:14:02:24:64:f4: 88:75:5f:fa:2b:6b:8f:6b:39:35:b4:78:e4:aa:8f: e8:35:2b:06:f4:6b:e4:66:b1:25:d3:ff:8c:df:09: 53:4a:89:3a:a6:2a:8e:f2:7c:7a:b0:8e:7b:03:26: 4c:4e:26:68:bc:47:ea:e0:55:e6:59:86:0a:b3:9c: 57:72:d3:02:20:6a:1f:2e:e3:79:ca:8b:66:fb:f3: 65:7f:67:db:68:62:ce:d9:57:1a:3a:20:f5:c6:ec: a5:42:61:8c:ab:7e:ff:69:4e:d3:e0:7a:27:c2:14: 06:77:44:8b:c1:7d:1d:16:5a:60:6c:69:6c:83:9a: 22:b0:f3:46:e7:81:a4:95:4a:e7:7e:01:97:d2:3b: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:EB:BE:B4:32:A4:16:48:2A:96:81:64:19:4C:82:80:2A:29:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:21:89:92:7f:ad:06:2d:9e:c0:50:b3:4f:8d:42:44:30:b5: 68:bb:6a:e7:79:99:e2:27:29:0c:7f:69:92:03:fc:c5:74:c0: 90:a1:45:43:34:f8:9a:dc:61:41:c7:9c:8d:fe:34:25:28:31: c3:9e:a5:fa:4c:49:0b:5b:fa:07:34:84:02:5c:c3:f6:6a:b8: 69:32:3a:86:9d:af:6e:03:a7:54:bf:33:0d:ce:af:b3:21:49: a4:c3:81:e6:8f:22:f7:f5:62:04:0c:43:ac:75:e9:04:72:b3: 8d:5a:f8:f6:a9:a2:6b:26:71:41:60:5e:bf:50:e7:57:37:11: c3:17:0a:65:36:9f:a1:af:7f:36:23:dd:ba:8f:9f:80:f1:6b: d6:ba:f1:68:61:2c:29:3f:fb:22:83:3f:09:d1:97:57:76:71: 5c:ec:4b:c6:29:d3:62:5e:a4:9a:bf:70:97:29:db:71:e2:9a: cd:fd:7e:3c:df:42:e6:1e:7f:43:69:6b:b1:95:02:f2:9c:d3: 10:91:1a:28:8e:fe:4f:22:c5:79:98:84:9d:b9:70:f3:71:2b: 6f:8c:c7:c6:fe:6d:0f:19:d8:de:b9:8d:3a:4e:5e:0c:d2:77: 9c:0a:62:e7:34:a6:da:88:28:e4:7a:67:ba:72:49:6d:bb:85: fa:f7:98:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAmsOyoKIswh34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzM5YTAxMDEtNTVlZS00YmMyLTkyMjktMmFhMWI5NGE4MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJp8pgdP/wWEgPh3rPOaRzgSseeEGBQz57UB YKnKDZeYAm2isN2bgVtQ4F7gQ55ULUFdnfnbEIk0mVCktMcx7EGnH+QexC8BGZOE RJH6sLmKcR9g62gAukSUmwLnui+sMJAPAJNV9ul78Zx/IrjldBARFAIkZPSIdV/6 K2uPazk1tHjkqo/oNSsG9GvkZrEl0/+M3wlTSok6piqO8nx6sI57AyZMTiZovEfq 4FXmWYYKs5xXctMCIGofLuN5yotm+/Nlf2fbaGLO2VcaOiD1xuylQmGMq37/aU7T 4HonwhQGd0SLwX0dFlpgbGlsg5oisPNG54GklUrnfgGX0juleQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAo6760MqQWSCqWgWQZTIKAKilaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEhiZJ/rQYtnsBQs0+NQkQwtWi7aud5meInKQx/aZID/MV0wJChRUM0 +JrcYUHHnI3+NCUoMcOepfpMSQtb+gc0hAJcw/ZquGkyOoadr24Dp1S/Mw3Or7Mh SaTDgeaPIvf1YgQMQ6x16QRys41a+PapomsmcUFgXr9Q51c3EcMXCmU2n6GvfzYj 3bqPn4Dxa9a68WhhLCk/+yKDPwnRl1d2cVzsS8Yp02JepJq/cJcp23Hims39fjzf QuYef0Npa7GVAvKc0xCRGiiO/k8ixXmYhJ25cPNxK2+Mx8b+bQ8Z2N65jTpOXgzS d5wKYuc0ptqIKOR6Z7pySW27hfr3mA4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:26:16 2025 by rpki-client