$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa File: 28f16384-eb96-3fc5-961a-187be7f3b5a2.roa (raw, json) Hash identifier: AR+KcM8Q4IB10Ygr3LWvYseFhw5bOKBa+PMYf5MSpgU= Subject key identifier: 31:F0:71:87:F3:48:A0:30:4D:E7:24:CA:13:B2:CB:AA:AE:96:CD:54 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848EC9698EA9E5C19F652F53D00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 22781 IP address blocks: 216.131.64.0/22 maxlen: 22 216.131.69.0/24 maxlen: 24 216.131.70.0/23 maxlen: 23 216.131.90.0/23 maxlen: 23 216.131.92.0/22 maxlen: 22 216.131.96.0/21 maxlen: 21 216.131.113.0/24 maxlen: 24 216.131.115.0/24 maxlen: 24 216.131.119.0/24 maxlen: 24 216.131.122.0/23 maxlen: 23 216.131.124.0/22 maxlen: 22 216.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:98:ea:9e:5c:19:f6:52:f5:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=d9aca8c9-6250-4619-99b9-50e6bb6d9f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:4f:0c:15:38:b1:78:6f:73:98:b6:8d:b0: bc:5a:e3:c6:5b:b9:4a:18:61:0f:22:57:c3:33:fd: 64:bf:0d:84:64:21:cc:20:70:6e:db:26:87:14:35: b1:a0:7b:82:70:ca:84:72:7f:79:04:29:db:ce:6a: 8f:fe:3a:47:1d:08:62:ca:fa:0a:46:f7:ac:1f:ed: 49:11:be:2d:61:49:a7:23:db:e5:cf:35:c1:82:4c: 8e:76:38:eb:ab:90:f9:44:4d:6d:ae:62:1c:9a:fb: e1:41:81:de:28:71:4f:36:b2:79:40:a2:2e:fa:6d: 72:28:ef:c8:b8:69:c4:d9:9a:cc:08:30:09:ed:62: 81:cc:67:86:32:c7:60:48:46:38:c3:88:34:5b:de: 19:33:49:7a:6f:20:8e:6b:31:3e:41:00:5d:39:30: 82:f5:54:a2:7e:6d:b3:eb:99:60:f2:b2:08:23:ab: 2f:42:3c:2e:c7:ee:08:79:5a:63:a7:6f:a1:da:6e: 67:42:5d:dc:a8:26:0e:73:c6:ff:bb:77:74:9a:6a: 40:9a:82:2d:17:9a:f1:16:6f:28:5e:73:d9:ae:d0: ce:a0:cf:f7:5a:c1:c3:1c:7c:08:26:d8:cf:96:e7: 61:56:78:3a:9e:63:9a:4c:a7:63:d6:54:8d:6b:6b: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F0:71:87:F3:48:A0:30:4D:E7:24:CA:13:B2:CB:AA:AE:96:CD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.64.0/22 216.131.69.0-216.131.71.255 216.131.90.0-216.131.103.255 216.131.113.0/24 216.131.115.0/24 216.131.119.0/24 216.131.122.0-216.131.127.255 216.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a3:4c:e8:36:d9:ca:46:8c:27:c9:96:80:39:b2:79:60:9a: eb:29:1f:bf:a2:d2:92:21:21:6e:b2:bb:9d:24:b8:81:09:1c: 5d:78:4f:56:07:65:bc:e6:20:09:93:91:37:53:b0:ed:32:f0: 59:d3:0a:6c:2d:26:de:a0:a8:46:66:c7:aa:72:cb:d5:f3:cb: f9:ab:f3:07:31:88:58:a6:03:8d:25:6b:75:4f:c4:57:82:a9: 81:8c:a1:02:49:87:c0:f8:de:b1:5f:f9:56:d1:db:ff:bd:9f: 63:7a:ab:4d:ef:05:48:c2:36:02:d6:c8:c5:6c:a4:33:51:e6: f7:8f:8f:d8:9c:53:63:60:76:03:b2:2b:87:42:8e:54:19:46: 03:c3:53:83:38:91:76:8c:00:83:4d:6b:ab:87:7e:9f:7b:44: b5:a3:01:26:00:41:b5:8c:1c:7d:87:03:5e:16:09:a9:0f:48: fa:f1:eb:ea:c8:3f:72:87:57:7a:7a:42:41:fe:03:41:9d:2a: 1d:98:58:b2:a8:ec:2c:cf:ff:15:b3:c2:63:07:f6:e2:c0:24: f5:94:04:49:68:b0:48:67:99:0a:3f:5d:88:a9:74:56:e0:77: fc:d3:30:4c:da:f7:68:75:26:85:85:1e:41:10:86:b0:6e:ee: 71:57:c8:7e -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEjslpjqnlwZ9lL1PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDlhY2E4YzktNjI1MC00NjE5LTk5YjktNTBlNmJiNmQ5ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMhPDBU4sXhvc5i2jbC8WuPGW7lKGGEPIlfD M/1kvw2EZCHMIHBu2yaHFDWxoHuCcMqEcn95BCnbzmqP/jpHHQhiyvoKRvesH+1J Eb4tYUmnI9vlzzXBgkyOdjjrq5D5RE1trmIcmvvhQYHeKHFPNrJ5QKIu+m1yKO/I uGnE2ZrMCDAJ7WKBzGeGMsdgSEY4w4g0W94ZM0l6byCOazE+QQBdOTCC9VSifm2z 65lg8rIII6svQjwux+4IeVpjp2+h2m5nQl3cqCYOc8b/u3d0mmpAmoItF5rxFm8o XnPZrtDOoM/3WsHDHHwIJtjPludhVng6nmOaTKdj1lSNa2u3owIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFDHwcYfzSKAwTeckyhOyy6quls1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjhmMTYzODQtZWI5Ni0z ZmM1LTk2MWEtMTg3YmU3ZjNiNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQC2INAMAwD BADYg0UDBAPYg0AwDAMEAdiDWgMEA9iDYAMEANiDcQMEANiDcwMEANiDdzAMAwQB 2IN6AwQH2IMAAwQC2KmAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAWjTOg22cpGjCfJloA5snlgmuspH7+i 0pIhIW6yu50kuIEJHF14T1YHZbzmIAmTkTdTsO0y8FnTCmwtJt6gqEZmx6pyy9Xz y/mr8wcxiFimA40la3VPxFeCqYGMoQJJh8D43rFf+VbR2/+9n2N6q03vBUjCNgLW yMVspDNR5vePj9icU2NgdgOyK4dCjlQZRgPDU4M4kXaMAINNa6uHfp97RLWjASYA QbWMHH2HA14WCakPSPrx6+rIP3KHV3p6QkH+A0GdKh2YWLKo7CzP/xWzwmMH9uLA JPWUBElosEhnmQo/XYipdFbgd/zTMEza92h1JoWFHkEQhrBu7nFXyH4= -----END CERTIFICATE-----Generated at Thu Apr 17 19:03:37 2025 by rpki-client