$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa File: 2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa (raw, json) Hash identifier: 8ipdcfi3k6HNL1aIJcK5kqKMW0fapg8Vsu6pZp8GyMc= Subject key identifier: 1C:EF:D6:03:0A:79:6D:8A:C0:39:8C:3F:01:45:54:2B:A9:84:69:20 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584950F960CBED11B42D8C3222C0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 54203 IP address blocks: 216.131.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:60:cb:ed:11:b4:2d:8c:32:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=03db8656-db5e-491e-a3dd-d4e33d00db58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:fe:44:de:d2:90:52:5c:24:18:90:c7:3a: 9f:a4:27:45:02:27:fa:ce:ea:6f:59:e5:57:4a:10: 47:4e:b4:87:30:11:da:0c:a8:b3:21:19:4a:3b:e6: ac:98:37:dc:17:dc:4d:3c:58:5c:f8:4b:b2:7a:c5: 72:62:6f:0a:26:6a:06:44:63:1e:9c:d7:c9:a5:fd: c5:49:c0:97:56:b1:be:ca:14:bf:70:ca:4a:16:3d: 38:5d:27:f2:c2:86:23:e8:00:cc:5b:37:f2:9d:46: 7e:15:ef:1c:bb:d1:8e:9a:a7:c8:7c:c4:49:a2:cc: 30:44:60:da:04:2d:02:e1:c2:12:eb:a6:c3:fc:09: 1e:e9:aa:58:d6:cc:c4:31:82:62:f9:f2:e0:86:1a: dc:13:68:f5:ec:81:3a:8a:9f:4c:bc:2d:5d:e2:76: 95:ac:fe:a6:e7:38:4a:75:f5:f2:d3:7e:97:1d:54: bf:9e:be:29:7e:27:83:27:6d:33:f8:e1:65:a4:91: db:07:f4:35:b4:07:9f:7d:31:b0:25:80:06:08:27: de:96:c5:03:d9:93:50:6b:e6:52:68:52:06:c4:11: d1:b4:16:f6:79:9b:cc:12:14:eb:17:e3:2c:8c:91: 49:39:96:a5:27:8d:eb:92:aa:3f:04:34:ac:40:42: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EF:D6:03:0A:79:6D:8A:C0:39:8C:3F:01:45:54:2B:A9:84:69:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7d:6c:ee:fb:9e:da:af:2f:27:e5:c6:0e:f9:d2:18:4a:f2: 48:28:e4:eb:45:94:db:f9:5a:71:6c:1f:f1:86:91:5f:f3:62: 7a:62:de:ca:39:97:10:28:b1:87:3b:98:f6:f5:19:a5:bb:6f: 4c:6a:f5:b5:bc:03:af:8d:fe:63:9d:73:74:06:37:a2:48:0c: 93:b9:2d:cd:2f:8c:f1:14:a9:3b:e9:9f:7f:fa:0e:e0:13:5a: 7b:1a:36:89:1b:7a:0c:dd:19:ca:9d:fb:2b:d1:0b:2b:bb:33: 40:8c:ab:f6:42:3f:12:72:7d:4d:b3:b0:b1:db:36:13:72:10: c0:8a:7d:7f:1a:61:4f:97:dc:df:37:8d:e3:be:ac:00:33:80: b4:99:fd:87:00:b1:01:75:05:3c:2b:d2:ba:57:41:dd:bb:75: c8:66:f8:7c:1e:a7:d8:82:b4:16:a4:10:6b:7f:27:9f:f2:69: 2b:49:72:90:45:53:0b:3d:f4:2d:b9:50:e0:95:05:90:3e:3b: 77:f4:a3:69:3c:08:ec:ab:9a:a4:b4:da:e0:bd:c5:61:b3:7a: 4e:3b:c7:67:74:25:ed:cc:8b:80:1f:4b:17:b5:ee:45:65:12: 27:ad:40:fa:bb:e1:5f:81:b8:06:b5:eb:8b:0a:03:03:0d:b0: d7:11:1f:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WDL7RG0LYwyIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MDNkYjg2NTYtZGI1ZS00OTFlLWEzZGQtZDRlMzNkMDBkYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha/+RN7SkFJcJBiQxzqfpCdFAif6zupvWeVX ShBHTrSHMBHaDKizIRlKO+asmDfcF9xNPFhc+EuyesVyYm8KJmoGRGMenNfJpf3F ScCXVrG+yhS/cMpKFj04XSfywoYj6ADMWzfynUZ+Fe8cu9GOmqfIfMRJoswwRGDa BC0C4cIS66bD/Ake6apY1szEMYJi+fLghhrcE2j17IE6ip9MvC1d4naVrP6m5zhK dfXy036XHVS/nr4pfieDJ20z+OFlpJHbB/Q1tAeffTGwJYAGCCfelsUD2ZNQa+ZS aFIGxBHRtBb2eZvMEhTrF+MsjJFJOZalJ43rkqo/BDSsQEJa8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzv1gMKeW2KwDmMPwFFVCuphGkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjM1NWZhMjEtNzViYi0z MjM3LWI0YTAtYzYzZGEzYzMxYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB99bO77ntqvLyflxg750hhK8kgo5OtFlNv5WnFsH/GGkV/zYnpi3so5 lxAosYc7mPb1GaW7b0xq9bW8A6+N/mOdc3QGN6JIDJO5Lc0vjPEUqTvpn3/6DuAT WnsaNokbegzdGcqd+yvRCyu7M0CMq/ZCPxJyfU2zsLHbNhNyEMCKfX8aYU+X3N83 jeO+rAAzgLSZ/YcAsQF1BTwr0rpXQd27dchm+Hwep9iCtBakEGt/J5/yaStJcpBF Uws99C25UOCVBZA+O3f0o2k8COyrmqS02uC9xWGzek47x2d0Je3Mi4AfSxe17kVl EietQPq74V+BuAa164sKAwMNsNcRH6E= -----END CERTIFICATE-----Generated at Sun Apr 6 06:08:02 2025 by rpki-client