$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa File: 1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json) Hash identifier: HWc01+CrLTjYNLJQ6Y2B6Z5+6p0t23rJMCx/owUKgnw= Subject key identifier: 11:64:FE:91:76:A2:F5:23:C2:91:B9:22:E0:76:3A:43:2B:87:53:85 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848C580F08BE3B7D8741FD31780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 174 IP address blocks: 216.131.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f0:8b:e3:b7:d8:74:1f:d3:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e277571f-d9b4-42ed-8910-800665e1b3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:af:59:12:e8:d5:57:11:9e:b2:16:e3:b2: f7:6a:f5:5d:7f:80:9a:cc:b5:57:dd:97:fd:41:29: 63:c2:35:24:d1:55:a1:23:5f:4d:6b:5d:05:bc:c5: 7c:97:90:b7:86:80:ab:46:8d:d3:fb:e9:aa:35:22: 4b:c4:05:79:87:3e:4c:d4:5b:c8:46:32:42:c8:28: fa:86:e4:ab:0d:3c:ab:fa:bc:66:bc:6c:4c:fa:49: 31:c8:51:6d:90:3e:fa:32:db:38:7c:6e:00:a8:e2: 9f:66:d1:31:de:53:7c:c8:16:e3:8b:e1:18:3e:7a: bc:d9:34:30:94:7b:cf:dc:fd:e0:de:8e:c5:d1:f3: c1:4c:58:88:9a:04:fa:e0:91:f3:28:2f:a2:47:7d: 35:d3:41:03:5e:03:1b:62:17:9c:d0:1d:e3:b0:e4: 57:70:89:bf:6a:87:54:68:f5:ad:8b:5e:8d:f1:ca: 71:3f:1d:03:eb:77:63:5b:43:f8:84:b4:bf:9e:cd: 66:14:d9:f1:68:ea:85:29:80:e9:b1:17:94:e7:c6: da:73:57:d1:c8:a3:63:60:c4:88:0b:01:03:df:2d: 6f:dc:0c:18:93:ac:62:7a:48:11:9e:b1:15:a6:12: 06:55:07:c9:4f:74:fd:fe:58:46:98:85:25:eb:9f: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:FE:91:76:A2:F5:23:C2:91:B9:22:E0:76:3A:43:2B:87:53:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9a:94:cf:56:1b:19:e6:be:56:ef:03:8f:70:df:55:14:08: 36:8a:5f:ad:9f:2c:d0:a0:1a:c9:df:e2:e1:c5:96:61:ea:5b: 55:54:58:39:7a:13:e4:99:30:39:d9:67:b3:4a:6b:55:58:83: 6c:67:c1:c4:c7:6a:2a:d5:1e:2b:2f:f2:4d:a0:e7:be:13:d2: be:dd:98:cd:54:8d:1b:10:8a:1b:d7:df:25:bb:e0:5d:e3:46: 48:b9:91:2d:af:75:9a:20:4d:0b:80:50:bc:a7:5c:c9:99:8b: 7f:18:de:c5:39:d8:fc:dd:b1:58:6f:ca:75:49:ba:c7:4b:20: 61:35:91:b9:b1:e8:bb:1b:f7:b3:0d:11:cc:ba:32:7e:0b:ef: 04:f6:f9:e7:a3:3f:ac:57:87:55:22:fa:ba:79:8f:71:9a:43: f0:f9:81:67:55:4b:33:19:36:d0:9c:d8:38:c9:bc:68:5d:ec: c0:4b:a3:30:7d:36:5d:af:e2:a5:61:2f:9a:9d:23:c3:f1:03: ef:9d:62:a9:a2:27:1c:e5:d3:d7:dd:e4:6a:0f:5f:65:de:70: 50:65:ad:e7:84:ca:3e:a1:5c:71:68:ba:2e:c7:a9:bb:97:35: 59:c6:59:ba:b0:1f:65:02:b2:93:2a:84:8f:31:6c:d6:40:5d: 2f:ec:e4:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPCL47fYdB/TF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI3NzU3MWYtZDliNC00MmVkLTg5MTAtODAwNjY1ZTFiM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c+vWRLo1VcRnrIW47L3avVdf4CazLVX3Zf9 QSljwjUk0VWhI19Na10FvMV8l5C3hoCrRo3T++mqNSJLxAV5hz5M1FvIRjJCyCj6 huSrDTyr+rxmvGxM+kkxyFFtkD76Mts4fG4AqOKfZtEx3lN8yBbji+EYPnq82TQw lHvP3P3g3o7F0fPBTFiImgT64JHzKC+iR30100EDXgMbYhec0B3jsORXcIm/aodU aPWti16N8cpxPx0D63djW0P4hLS/ns1mFNnxaOqFKYDpsReU58bac1fRyKNjYMSI CwED3y1v3AwYk6xiekgRnrEVphIGVQfJT3T9/lhGmIUl65+dyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFk/pF2ovUjwpG5IuB2OkMrh1OFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWJhZDA2OGMtM2E3ZS0z NDg4LThkNTAtYTVlMTc1NWY3NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABealM9WGxnmvlbvA49w31UUCDaKX62fLNCgGsnf4uHFlmHqW1VUWDl6 E+SZMDnZZ7NKa1VYg2xnwcTHairVHisv8k2g574T0r7dmM1UjRsQihvX3yW74F3j Rki5kS2vdZogTQuAULynXMmZi38Y3sU52PzdsVhvynVJusdLIGE1kbmx6Lsb97MN Ecy6Mn4L7wT2+eejP6xXh1Ui+rp5j3GaQ/D5gWdVSzMZNtCc2DjJvGhd7MBLozB9 Nl2v4qVhL5qdI8PxA++dYqmiJxzl09fd5GoPX2XecFBlreeEyj6hXHFoui7HqbuX NVnGWbqwH2UCspMqhI8xbNZAXS/s5Do= -----END CERTIFICATE-----Generated at Fri Mar 14 13:36:09 2025 by rpki-client