$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa File: 1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa (raw, json) Hash identifier: TqUL+gA5RjfO6yrHI9iSmgIkK2wkkX++R15fC1PW55M= Subject key identifier: 13:FC:1D:14:1C:91:39:C0:B0:F7:63:11:4A:77:68:3C:DA:A9:11:8E Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3F4E1F3C914F7CBD59400 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 62651 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f4:e1:f3:c9:14:f7:cb:d5:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=0ea32672-78b4-42d0-bbdd-c9e5b94deaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:d1:e6:0b:b1:83:1c:80:42:ff:57:3f:d3: b3:54:69:1f:54:53:1c:62:6e:5b:a1:37:df:fd:13: 5b:c4:f9:eb:91:92:d2:bc:b8:e4:8c:f9:55:ff:47: b1:3b:28:3f:f3:3b:8b:85:aa:36:2c:2d:d2:ff:b8: f3:05:cc:7f:99:53:fc:f1:63:ca:20:83:78:fd:ab: cd:bd:88:1e:c4:7d:9f:20:b6:85:ac:d7:7d:f1:7c: bd:a7:b3:be:25:6d:4f:25:5f:06:ab:be:ce:46:da: 0e:69:48:0e:15:18:56:f4:f9:fc:3d:1c:13:8a:a4: 85:24:92:71:ad:29:71:a2:8a:0c:f3:f2:24:44:90: bc:f1:b3:08:5e:b3:d4:d8:81:ed:ff:08:fd:1e:70: f5:91:7a:e6:7d:e7:b7:de:12:f7:dc:73:08:7f:3d: 53:1a:00:ee:c5:51:84:d6:a7:ce:54:ea:51:d5:e8: 91:ae:1e:f4:66:ef:8e:b5:8b:33:8e:04:47:73:d7: e4:fa:84:f4:4d:1c:d7:48:a5:0e:ed:61:3e:4b:e2: de:70:2e:4f:76:e4:f1:0c:be:0f:b7:a3:7c:35:2d: ec:f5:da:3b:f5:68:d6:73:7e:0f:53:60:7d:35:c0: 4b:41:12:f7:b0:8e:a9:d1:99:14:e4:4e:bf:59:47: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FC:1D:14:1C:91:39:C0:B0:F7:63:11:4A:77:68:3C:DA:A9:11:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d9:56:40:49:41:74:bb:4c:89:5c:36:51:87:a7:65:a4:4d: a3:6e:fb:5f:23:83:f0:3c:78:ea:cc:aa:b0:a1:47:da:6a:54: 1a:f2:5d:98:54:9a:49:9a:34:fa:7c:ab:f5:94:96:47:5d:58: e6:db:b6:fe:d0:d4:8c:3a:40:26:13:04:29:f3:c4:42:a4:e2: ce:3c:e5:68:6e:97:86:47:bc:3e:3e:a0:fc:72:05:c7:b7:73: d9:63:c0:15:c9:70:ae:39:e8:05:bd:00:a2:ce:20:3c:31:1c: 3a:95:85:2d:9c:ad:c3:d9:f9:7d:ca:02:88:4f:6b:59:d6:ff: 30:5b:26:ca:16:41:35:5e:ac:4d:90:ea:dd:ac:b4:e2:57:b3: a1:86:20:a0:75:56:d2:ab:ca:96:6b:c6:48:cd:d5:eb:ab:e1: 1b:39:d0:9f:a5:43:26:84:6f:43:64:d9:2f:61:69:66:a1:08: 09:8a:4f:9c:d5:e4:a4:6f:eb:35:fa:63:94:04:c2:ca:08:62: 2d:50:96:e9:a7:3f:1d:42:98:26:e8:6d:7e:a4:7a:a9:92:e9: 77:47:84:6b:77:f9:fc:37:96:db:2d:4e:50:36:83:38:06:2f: 3f:bc:82:70:8d:c2:58:af:35:fc:0f:54:39:1e:0f:99:2e:26: d2:97:e2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/Th88kU98vVlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MGVhMzI2NzItNzhiNC00MmQwLWJiZGQtYzllNWI5NGRlYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3fR5guxgxyAQv9XP9OzVGkfVFMcYm5boTff /RNbxPnrkZLSvLjkjPlV/0exOyg/8zuLhao2LC3S/7jzBcx/mVP88WPKIIN4/avN vYgexH2fILaFrNd98Xy9p7O+JW1PJV8Gq77ORtoOaUgOFRhW9Pn8PRwTiqSFJJJx rSlxoooM8/IkRJC88bMIXrPU2IHt/wj9HnD1kXrmfee33hL33HMIfz1TGgDuxVGE 1qfOVOpR1eiRrh70Zu+OtYszjgRHc9fk+oT0TRzXSKUO7WE+S+LecC5PduTxDL4P t6N8NS3s9do79WjWc34PU2B9NcBLQRL3sI6p0ZkU5E6/WUf1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP8HRQckTnAsPdjEUp3aDzaqRGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWRjNDBmZDgtOTFmZC0z ZDBmLTkzZjktMmMzYjA0ZjUyZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3ZVkBJQXS7TIlcNlGHp2WkTaNu+18jg/A8eOrMqrChR9pqVBryXZhU mkmaNPp8q/WUlkddWObbtv7Q1Iw6QCYTBCnzxEKk4s485Whul4ZHvD4+oPxyBce3 c9ljwBXJcK456AW9AKLOIDwxHDqVhS2crcPZ+X3KAohPa1nW/zBbJsoWQTVerE2Q 6t2stOJXs6GGIKB1VtKrypZrxkjN1eur4Rs50J+lQyaEb0Nk2S9haWahCAmKT5zV 5KRv6zX6Y5QEwsoIYi1QlumnPx1CmCbobX6keqmS6XdHhGt3+fw3ltstTlA2gzgG Lz+8gnCNwlivNfwPVDkeD5kuJtKX4lQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:48 2025 by rpki-client