$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa File: 402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa (raw, json) Hash identifier: Ca2MHrGPSpdtZvVnaORR46PrRKavHfbkU+4oMAGUGAw= Subject key identifier: 4C:35:6F:05:2B:64:A3:60:F9:63:4D:BD:0E:F8:91:66:CF:34:51:F7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3FCC53F502142FB1EB580 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 62651 IP address blocks: 216.131.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fc:c5:3f:50:21:42:fb:1e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=03cb3d8c-2de5-4f72-97cf-bf3c32d2a525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:a1:b2:12:14:d8:f7:66:d3:f4:23:eb:9d: f8:bf:c2:6b:39:a4:ee:fa:07:c1:7b:d2:4b:82:66: 90:4b:7f:70:e6:b4:94:2e:95:8c:17:85:cf:9b:ce: 0d:3c:53:53:2d:cc:42:dc:0c:e6:91:a9:d6:f7:97: 09:30:99:9c:44:f6:7c:46:4b:b9:bb:a9:2f:8a:7e: c5:ff:c3:10:65:20:e6:d3:6c:26:98:f2:c8:b9:b6: 5a:12:56:b8:22:36:63:30:2a:0d:da:5a:cb:e4:07: 72:46:42:0f:4f:e5:27:5f:fc:c5:b9:63:9a:83:9e: 10:d0:41:de:a9:0d:22:32:53:cb:12:61:e0:6a:16: d7:f9:98:64:91:af:db:9d:4e:c2:97:29:04:6f:06: fe:5f:d3:35:fa:c9:f0:f3:7e:f0:b7:c9:ce:17:a9: 72:27:0a:45:48:5c:c2:7c:6d:41:b7:99:96:6c:95: ae:ae:b4:79:25:7d:8f:1d:ec:57:42:92:ca:50:02: db:78:90:8c:ea:7f:0d:51:29:be:0e:22:91:cd:7d: 02:83:06:7c:2e:a7:b1:ef:bf:d8:20:79:1c:bc:c5: a1:de:ba:d1:40:9c:fa:07:e9:9d:22:5e:2f:f3:a7: 95:8b:bf:c2:bd:2d:69:d1:a9:42:4e:ea:e9:ee:45: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:35:6F:05:2B:64:A3:60:F9:63:4D:BD:0E:F8:91:66:CF:34:51:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:01:16:2e:b5:d6:63:ee:94:16:17:e6:fc:61:e6:4b:23:ce: 9f:91:46:48:a3:d4:43:69:b3:d9:ac:be:c6:4f:6a:ca:04:08: 93:b1:3b:8c:48:d7:ed:2c:e9:30:d2:f1:f5:29:33:c8:59:fc: 8d:5f:65:23:3b:54:5b:0e:f5:55:84:a0:5c:cb:4b:71:99:c7: 77:fc:6c:1b:d2:78:a0:4f:dc:13:92:0b:43:57:10:2e:dd:ed: 5e:da:d4:70:6c:a7:11:c9:1d:44:13:76:52:96:b8:8b:0a:85: dd:e8:0b:50:2e:ba:51:ea:82:35:32:65:70:90:6b:69:96:24: 2d:e5:c4:76:cc:2f:45:b8:60:66:62:6d:d3:00:2b:4d:34:a5: 76:47:46:79:c4:ad:f9:2c:53:2d:e2:36:66:07:69:49:a8:cd: 46:28:ab:bf:28:30:dc:d7:dc:14:df:43:57:47:ec:f6:17:ba: 0f:c5:10:6c:1c:12:15:9a:8f:e9:8f:7a:b4:3f:b6:74:62:fe: 7c:23:1c:b5:ba:58:7d:74:35:69:e3:e7:c3:dc:0d:8f:33:a3: f5:ba:be:f8:d0:64:cf:b5:c8:f7:4f:15:58:49:bf:90:49:39: f0:58:91:8a:7d:5d:ad:15:95:2e:44:ae:46:d2:d0:d7:e2:5c: 19:2e:ba:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/zFP1AhQvsetYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDNjYjNkOGMtMmRlNS00ZjcyLTk3Y2YtYmYzYzMyZDJhNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpShshIU2Pdm0/Qj6534v8JrOaTu+gfBe9JL gmaQS39w5rSULpWMF4XPm84NPFNTLcxC3AzmkanW95cJMJmcRPZ8Rku5u6kvin7F /8MQZSDm02wmmPLIubZaEla4IjZjMCoN2lrL5AdyRkIPT+UnX/zFuWOag54Q0EHe qQ0iMlPLEmHgahbX+Zhkka/bnU7ClykEbwb+X9M1+snw837wt8nOF6lyJwpFSFzC fG1Bt5mWbJWurrR5JX2PHexXQpLKUALbeJCM6n8NUSm+DiKRzX0CgwZ8Lqex77/Y IHkcvMWh3rrRQJz6B+mdIl4v86eVi7/CvS1p0alCTurp7kWYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw1bwUrZKNg+WNNvQ74kWbPNFH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDAyYWE3ZDEtZmQxMi0z ZDNiLTg0NTItYmQ0YzIwNmM2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkBFi611mPulBYX5vxh5ksjzp+RRkij1ENps9msvsZPasoECJOxO4xI 1+0s6TDS8fUpM8hZ/I1fZSM7VFsO9VWEoFzLS3GZx3f8bBvSeKBP3BOSC0NXEC7d 7V7a1HBspxHJHUQTdlKWuIsKhd3oC1AuulHqgjUyZXCQa2mWJC3lxHbML0W4YGZi bdMAK000pXZHRnnErfksUy3iNmYHaUmozUYoq78oMNzX3BTfQ1dH7PYXug/FEGwc EhWaj+mPerQ/tnRi/nwjHLW6WH10NWnj58PcDY8zo/W6vvjQZM+1yPdPFVhJv5BJ OfBYkYp9Xa0VlS5ErkbS0NfiXBkuuvQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:03 2025 by rpki-client