$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: 2NpG4h9D1CzaIzLOCKXCwLMankT+OuqYinctTTc6nuM= Subject key identifier: B4:17:25:30:5B:D8:FC:6C:3F:24:84:C5:9D:45:3A:04:BA:72:D5:B5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3F72D018F083C94C10970 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f7:2d:01:8f:08:3c:94:c1:09:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=fdd1002a-b169-45d6-8c34-8f84ce7d9818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:62:10:b9:69:09:15:77:56:6f:c0:02:78: 77:b3:57:93:14:d3:13:f5:ab:55:49:c0:5c:0a:64: a9:51:7b:b9:2b:76:b8:f0:0b:97:10:57:79:31:60: d6:a3:12:2a:78:2f:bb:4e:cf:7f:74:8e:42:27:82: 27:9c:4c:e1:d2:5c:73:02:bf:37:2e:2a:24:51:57: a2:08:c3:f9:f3:11:f5:44:f3:9a:f8:31:7b:74:76: 3c:c8:e5:3d:d5:23:6a:a3:81:25:c7:7d:58:0a:f8: 5a:b0:b5:d6:b9:af:14:b0:82:73:ab:e5:56:b3:ea: 08:e5:fa:28:26:25:17:e2:ef:f6:41:82:d8:66:82: 13:04:d4:87:f7:4f:78:24:32:f1:a5:36:43:16:f2: fc:84:8e:99:b0:e5:4b:a6:c0:a2:b0:04:a4:19:0e: e1:e7:d5:49:6d:d9:55:71:72:a4:7e:66:2e:c5:ce: da:48:5e:c0:d3:64:dd:04:4f:93:0d:cc:6c:55:d1: 68:82:01:14:d9:93:99:eb:5f:cc:1e:8a:a5:61:13: 02:0a:40:f0:de:b1:58:e2:30:a1:6d:e1:7a:ae:30: 87:f2:0d:58:28:6b:f2:1e:26:17:53:11:69:db:4d: c0:0d:a6:6c:c7:8c:9a:30:00:19:d6:1e:f9:a4:92: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:17:25:30:5B:D8:FC:6C:3F:24:84:C5:9D:45:3A:04:BA:72:D5:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d8:6f:55:0e:43:04:90:fb:dd:c3:fc:30:3f:75:af:c3:a6: 26:05:c2:5f:cb:a6:f2:bb:27:1f:ff:c1:25:91:f4:a9:7c:4e: 9d:ca:9e:45:02:5c:48:34:0a:19:aa:20:b7:e7:59:74:98:66: a5:9a:53:a6:21:62:98:17:5a:c0:71:34:4f:2d:dc:c7:31:c8: 4d:30:64:47:61:42:b3:6a:62:da:3e:77:46:33:cd:1e:33:31: f7:b0:a9:f5:a7:96:96:9e:4d:88:f4:5d:7c:ac:3d:23:f0:4c: b7:e7:77:01:4e:98:ab:16:f8:f2:5a:c5:c1:52:10:b4:f5:f1: 56:af:8a:35:41:e4:17:42:a9:26:a6:86:f7:67:c2:8c:3a:ad: 74:49:0b:f9:28:70:ff:66:bd:59:56:d4:7f:cb:9a:7f:e7:95: 10:4b:0c:af:ca:46:46:82:35:0d:77:27:0f:da:b6:32:f6:e8: ce:71:1f:f3:4e:8e:e1:8d:0e:84:4c:06:70:d6:82:e9:4a:ea: 40:d4:00:bc:f8:90:e8:b8:ba:ca:32:78:30:a1:12:6a:16:3a: 6f:ad:4d:68:0d:af:de:a4:fb:e8:79:55:f9:4b:a2:4d:64:61: 66:ef:c4:92:47:5f:6c:d9:ac:63:d6:d3:fc:7f:ad:49:57:e3: 2b:8c:c3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/ctAY8IPJTBCXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZmRkMTAwMmEtYjE2OS00NWQ2LThjMzQtOGY4NGNlN2Q5ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdpiELlpCRV3Vm/AAnh3s1eTFNMT9atVScBc CmSpUXu5K3a48AuXEFd5MWDWoxIqeC+7Ts9/dI5CJ4InnEzh0lxzAr83LiokUVei CMP58xH1RPOa+DF7dHY8yOU91SNqo4Elx31YCvhasLXWua8UsIJzq+VWs+oI5foo JiUX4u/2QYLYZoITBNSH9094JDLxpTZDFvL8hI6ZsOVLpsCisASkGQ7h59VJbdlV cXKkfmYuxc7aSF7A02TdBE+TDcxsVdFoggEU2ZOZ61/MHoqlYRMCCkDw3rFY4jCh beF6rjCH8g1YKGvyHiYXUxFp203ADaZsx4yaMAAZ1h75pJIIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQXJTBb2PxsPySExZ1FOgS6ctW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvYb1UOQwSQ+93D/DA/da/DpiYFwl/LpvK7Jx//wSWR9Kl8Tp3KnkUC XEg0ChmqILfnWXSYZqWaU6YhYpgXWsBxNE8t3McxyE0wZEdhQrNqYto+d0YzzR4z MfewqfWnlpaeTYj0XXysPSPwTLfndwFOmKsW+PJaxcFSELT18VavijVB5BdCqSam hvdnwow6rXRJC/kocP9mvVlW1H/Lmn/nlRBLDK/KRkaCNQ13Jw/atjL26M5xH/NO juGNDoRMBnDWgulK6kDUALz4kOi4usoyeDChEmoWOm+tTWgNr96k++h5VflLok1k YWbvxJJHX2zZrGPW0/x/rUlX4yuMw2c= -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:27 2025 by rpki-client