$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3bc3e47e-b7c0-3abb-8440-b3b52988a3d9.roa File: 3bc3e47e-b7c0-3abb-8440-b3b52988a3d9.roa (raw, json) Hash identifier: Wu9qL60v5Vag16/+MpKNxfZ4/YVjphS6aesaxodWTzY= Subject key identifier: 50:3E:D2:BB:71:1B:C4:F9:D9:F1:65:87:B6:F3:05:E5:BF:FC:E2:EF Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584949FE90DD9499D49400C2BFD0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3bc3e47e-b7c0-3abb-8440-b3b52988a3d9.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 62651 IP address blocks: 216.131.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:90:dd:94:99:d4:94:00:c2:bf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=6e283eb3-690e-466f-a855-df5b5da47457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ef:b1:7a:16:7b:04:b6:f6:d2:da:48:21:2d: b8:b7:5d:e8:fa:a4:fc:c7:8a:b5:be:33:1c:29:7b: b7:03:19:e8:82:3d:ad:4c:ce:ed:99:58:4c:c3:5e: 3a:c1:5f:81:c1:ed:bc:69:78:87:cd:6d:d3:64:f9: e9:da:7a:29:e6:3e:4c:67:58:08:ed:0f:55:74:39: 87:f1:bb:b8:7e:71:fd:c2:6b:57:f3:50:4e:f0:b3: 00:bb:4d:03:20:38:7a:d7:96:c2:ff:64:e6:00:b8: 73:a3:0c:f8:cd:61:39:1a:84:13:4d:23:ba:c7:85: cf:1d:2d:d5:50:30:5e:88:de:e7:7c:16:bb:ca:ac: 02:a2:4e:63:64:08:5d:b0:e2:62:75:28:74:0c:12: 3c:0e:78:72:8b:a1:90:ff:4d:12:36:cc:b7:f7:82: 7a:71:d8:36:9f:80:15:c3:44:54:21:94:c3:1f:65: eb:56:a6:74:40:88:4d:8c:c7:14:a8:22:4a:32:5a: 93:82:10:51:8c:e2:1b:df:97:d2:6b:77:fb:f4:e2: bb:c3:67:34:46:3d:24:2d:0b:a9:cf:2b:d2:1a:26: 5a:a9:06:90:96:ef:99:e0:24:9b:14:dc:d3:d3:df: 2e:79:f6:e8:d9:19:e0:d5:93:57:df:b5:c2:8e:14: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:D2:BB:71:1B:C4:F9:D9:F1:65:87:B6:F3:05:E5:BF:FC:E2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3bc3e47e-b7c0-3abb-8440-b3b52988a3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:54:09:e0:97:89:17:34:7e:49:58:24:51:3f:18:77:7c:66: 10:ce:75:df:22:db:11:9d:81:6c:30:b7:56:2a:1e:90:3e:0a: d5:71:72:9b:55:28:0a:58:68:1c:e9:24:3c:2b:b8:fa:f4:7c: c7:69:a8:13:d0:05:e5:cc:f8:4d:cc:fc:ed:9a:bf:da:a0:51: 26:38:6b:bf:45:ea:85:d4:ea:9b:22:b0:ef:cc:33:15:a9:6f: 05:69:1d:3d:81:a3:ad:44:26:59:d7:49:a8:6b:71:9b:93:b1: ef:f6:f1:89:98:14:c1:ff:0f:4e:b0:ae:d2:38:79:de:48:19: 49:52:db:53:74:39:f0:13:0e:19:6c:4f:55:e4:c5:96:5e:3c: 89:4f:16:2c:53:4d:51:20:20:32:60:6e:8e:f7:7b:53:08:45: de:99:32:8a:63:f6:ac:77:aa:e3:53:19:57:59:cc:19:77:8e: 12:ef:f0:9e:3c:24:31:69:fd:1e:37:db:5a:a2:3a:1d:fb:ad: 48:02:38:7b:25:05:f7:7f:c8:f4:4e:39:86:16:04:be:7d:72: 13:10:f4:5e:a4:aa:6c:61:6b:ff:7f:45:49:06:5f:70:c9:da: 98:dc:8e:7e:6a:b6:4c:6c:24:21:19:4a:b7:81:94:ad:2e:54: a1:9b:a3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pDdlJnUlADCv9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NmUyODNlYjMtNjkwZS00NjZmLWE4NTUtZGY1YjVkYTQ3NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e+xehZ7BLb20tpIIS24t13o+qT8x4q1vjMc KXu3Axnogj2tTM7tmVhMw146wV+Bwe28aXiHzW3TZPnp2nop5j5MZ1gI7Q9VdDmH 8bu4fnH9wmtX81BO8LMAu00DIDh615bC/2TmALhzowz4zWE5GoQTTSO6x4XPHS3V UDBeiN7nfBa7yqwCok5jZAhdsOJidSh0DBI8Dnhyi6GQ/00SNsy394J6cdg2n4AV w0RUIZTDH2XrVqZ0QIhNjMcUqCJKMlqTghBRjOIb35fSa3f79OK7w2c0Rj0kLQup zyvSGiZaqQaQlu+Z4CSbFNzT098uefbo2Rng1ZNX37XCjhQXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA+0rtxG8T52fFlh7bzBeW//OLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2JjM2U0N2UtYjdjMC0z YWJiLTg0NDAtYjNiNTI5ODhhM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRUCeCXiRc0fklYJFE/GHd8ZhDOdd8i2xGdgWwwt1YqHpA+CtVxcptV KApYaBzpJDwruPr0fMdpqBPQBeXM+E3M/O2av9qgUSY4a79F6oXU6psisO/MMxWp bwVpHT2Bo61EJlnXSahrcZuTse/28YmYFMH/D06wrtI4ed5IGUlS21N0OfATDhls T1XkxZZePIlPFixTTVEgIDJgbo73e1MIRd6ZMopj9qx3quNTGVdZzBl3jhLv8J48 JDFp/R4321qiOh37rUgCOHslBfd/yPROOYYWBL59chMQ9F6kqmxha/9/RUkGX3DJ 2pjcjn5qtkxsJCEZSreBlK0uVKGbo0A= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:57 2025 by rpki-client