$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5eef63cb-1dd4-3b1f-8887-515abfeddfa2.roa File: 5eef63cb-1dd4-3b1f-8887-515abfeddfa2.roa (raw, json) Hash identifier: pkQ0lTGHLvez1JQ+UHAbqGXpuPh3IecE6JfN4nukQGE= Subject key identifier: 00:2D:7D:11:95:F4:F9:44:E1:32:98:D6:F7:98:BF:68:59:5F:02:3C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848A29B5567C450A165C7055E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5eef63cb-1dd4-3b1f-8887-515abfeddfa2.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 62240 IP address blocks: 216.131.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:55:67:c4:50:a1:65:c7:05:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=1ae7ec35-bc2e-4200-896f-35346f4f98e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:08:48:87:ab:0d:fb:a7:cd:d0:c9:ea:a8: 8e:6c:97:47:a1:78:6e:14:47:b2:78:10:3f:b9:53: de:46:a9:20:0b:0d:99:aa:46:bf:73:88:2f:ee:ad: 43:08:7a:91:c0:aa:47:4c:0a:c6:6b:60:7c:fe:f8: 3f:1c:09:c2:be:72:8d:a6:3f:7d:5d:49:7b:e6:59: 14:da:26:8b:82:de:ff:b2:ca:fa:d6:13:11:9d:7b: 88:d3:48:9b:44:18:b2:5a:68:2e:f2:ff:e3:14:11: 23:50:16:52:29:5f:dd:33:ed:e8:70:c7:33:ca:86: 7c:04:90:43:14:ab:60:35:2a:b1:f8:8f:9c:99:d0: 6c:9e:27:e2:6f:c5:b9:c3:e3:ab:09:a3:a2:3f:6f: 19:94:07:ec:3e:0b:2f:82:3f:97:e2:ca:f4:9c:ac: e9:01:12:d3:2d:88:e7:20:20:56:da:56:85:8e:70: d2:f3:3b:57:7e:f5:56:3f:87:3b:ff:b7:14:a7:85: ff:72:88:c7:e9:49:c0:eb:7c:68:af:13:0c:f4:41: c8:81:5f:d1:d7:97:14:09:c3:b9:55:c5:ef:5a:e4: dc:a9:0b:04:65:01:39:35:67:e3:24:97:94:8d:ab: ec:c9:42:f8:95:b6:dd:fa:ca:10:d7:a7:10:96:5c: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:7D:11:95:F4:F9:44:E1:32:98:D6:F7:98:BF:68:59:5F:02:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5eef63cb-1dd4-3b1f-8887-515abfeddfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c6:83:fa:84:eb:db:84:60:32:25:fa:f0:62:4e:ee:fc:36: 0f:2e:31:20:26:5c:b9:ea:91:a0:a8:19:d0:e3:93:aa:94:5c: f6:4d:cc:f7:42:93:87:68:e4:94:b6:d8:fc:87:c0:b3:68:ed: fb:ae:4c:a4:1e:34:16:84:2e:28:dd:4a:04:13:25:46:e3:1b: 63:80:ef:ba:f8:ab:93:61:3f:28:9a:53:d6:1e:ed:fd:18:eb: 8a:f7:37:b8:ef:58:e9:64:db:8e:be:0a:11:db:3f:7e:8e:e7: 96:7c:78:d0:53:38:cd:e6:d3:10:da:5e:2d:c3:cd:59:4b:3a: 90:06:90:7b:3b:e5:fc:86:7a:76:3a:3e:17:2e:14:fb:0c:cc: 51:48:46:9e:74:88:9c:9a:1e:c3:f8:e7:53:57:ff:e1:7e:f0: d6:7e:56:30:61:1c:87:18:1c:74:6f:79:9f:0c:9a:29:15:d3: 75:af:e1:0c:0a:2a:8f:31:66:45:cd:80:a2:92:d7:53:0d:f4: dc:04:d1:95:cf:8a:c7:eb:87:b5:af:9e:da:2f:37:35:7a:5d: 4a:27:2c:b3:11:ce:c6:67:04:67:70:64:5a:8d:13:15:14:34: 84:d9:0b:7e:8f:e0:65:72:57:05:7e:65:d0:c0:77:a4:be:34: 98:36:d3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1VnxFChZccFXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk MWFlN2VjMzUtYmMyZS00MjAwLTg5NmYtMzUzNDZmNGY5OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HAISIerDfunzdDJ6qiObJdHoXhuFEeyeBA/ uVPeRqkgCw2Zqka/c4gv7q1DCHqRwKpHTArGa2B8/vg/HAnCvnKNpj99XUl75lkU 2iaLgt7/ssr61hMRnXuI00ibRBiyWmgu8v/jFBEjUBZSKV/dM+3ocMczyoZ8BJBD FKtgNSqx+I+cmdBsnifib8W5w+OrCaOiP28ZlAfsPgsvgj+X4sr0nKzpARLTLYjn ICBW2laFjnDS8ztXfvVWP4c7/7cUp4X/cojH6UnA63xorxMM9EHIgV/R15cUCcO5 VcXvWuTcqQsEZQE5NWfjJJeUjavsyUL4lbbd+soQ16cQllwEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAtfRGV9PlE4TKY1veYv2hZXwI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNWVlZjYzY2ItMWRkNC0z YjFmLTg4ODctNTE1YWJmZWRkZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTGg/qE69uEYDIl+vBiTu78Ng8uMSAmXLnqkaCoGdDjk6qUXPZNzPdC k4do5JS22PyHwLNo7fuuTKQeNBaELijdSgQTJUbjG2OA77r4q5NhPyiaU9Ye7f0Y 64r3N7jvWOlk246+ChHbP36O55Z8eNBTOM3m0xDaXi3DzVlLOpAGkHs75fyGenY6 PhcuFPsMzFFIRp50iJyaHsP451NX/+F+8NZ+VjBhHIcYHHRveZ8MmikV03Wv4QwK Ko8xZkXNgKKS11MN9NwE0ZXPisfrh7WvntovNzV6XUonLLMRzsZnBGdwZFqNExUU NITZC36P4GVyVwV+ZdDAd6S+NJg20+U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:45 2025 by rpki-client