$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa File: 76028751-035c-3651-88e2-a1d009ea9b7f.roa (raw, json) Hash identifier: tDVfuxuJUDyaaT/tFYlOLIAynyQz+7dpwkAnt2BVpbE= Subject key identifier: 28:6F:12:33:73:8D:05:EC:03:55:7E:55:87:21:04:BB:9C:09:D8:91 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848D0ABB86B06B8A99233D68DC0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 140952 IP address blocks: 108.171.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b8:6b:06:b8:a9:92:33:d6:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=6710d3c6-fea2-4fc5-84e7-3b32f6a164ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:c3:d2:d6:f0:a1:db:a1:ae:5f:2e:f2:8e: 48:51:ba:26:3f:36:ef:ed:e5:5d:17:de:7b:55:aa: b5:44:07:84:8d:59:5a:7f:87:17:f6:b9:79:b0:20: f8:7f:ed:24:52:d1:09:b2:df:50:9a:03:c8:50:8d: f6:bb:ad:57:15:ed:8d:d7:8c:e7:45:b6:09:cf:f9: 31:45:83:65:63:a7:11:86:0a:a4:e0:66:af:50:60: cd:12:24:33:17:84:60:ab:e0:56:a2:7b:2f:4f:73: 13:ad:f8:84:46:bc:e0:6c:00:a7:e3:02:20:ad:b2: f3:0b:3a:01:76:cd:da:ac:1b:d3:cc:4e:4b:26:f6: 8d:ef:bc:e2:14:0b:d3:7d:83:ad:b9:be:93:ab:71: 88:01:47:2c:8a:63:08:56:9d:3c:6b:98:18:f3:fa: c5:6e:1b:f3:51:94:5c:49:69:1c:95:ab:c5:0d:71: b6:ac:51:e7:3f:5a:96:d9:6f:45:f6:fc:27:c1:b4: 0b:5a:11:80:0c:96:bd:ea:c8:c0:e5:31:88:b7:4e: 44:36:d7:d5:c9:62:9e:3b:d4:0e:9e:50:4d:f6:6c: 0a:a4:8b:93:f9:bc:7c:35:1f:aa:38:4e:f9:7f:d8: 58:7b:07:69:ef:11:24:ac:c3:68:03:57:e7:48:4c: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:12:33:73:8D:05:EC:03:55:7E:55:87:21:04:BB:9C:09:D8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f6:2b:d7:f7:ec:27:86:77:60:ff:88:bc:d7:0c:af:60:57: e6:f4:3b:ef:86:9e:1b:8a:10:0f:1e:f5:77:4d:0b:89:28:c5: d0:55:b3:0e:fc:51:b0:cd:51:21:ed:08:75:27:89:3d:85:84: 6d:65:20:47:21:a2:9d:d9:e3:e8:68:42:24:18:e5:35:c0:78: c1:df:e2:db:d1:76:c5:54:56:1f:b7:83:3d:90:29:49:b5:b9: 3c:16:63:d7:f5:d1:b6:16:f9:c9:b5:a3:5e:f9:ac:48:4a:fe: 08:6a:18:ad:05:5c:0b:26:81:3a:37:a4:74:c7:64:1d:7d:1a: 74:33:f1:fb:de:72:d0:c2:b0:1f:8e:52:f4:9e:bb:32:c9:62: e8:67:1c:4d:e9:ad:5c:44:6d:ce:59:b1:1a:44:da:4f:d2:4e: dd:b0:e0:bd:3b:a1:d7:ab:68:af:5c:64:3d:10:c6:b9:68:50: 72:5b:e8:01:32:03:49:dc:fc:c4:f2:a3:ce:cf:01:b5:18:66: 1b:02:c8:f9:8f:3c:94:4a:9d:68:76:9a:b0:d0:73:90:07:ab: bc:cd:e9:0d:6c:c7:a6:7e:c6:f9:d3:d4:af:45:7f:dd:c2:77: 00:31:f5:d8:25:cd:4d:13:ee:d4:4f:81:c6:98:5c:15:5c:4a: a9:bb:0e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7hrBripkjPWjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjcxMGQzYzYtZmVhMi00ZmM1LTg0ZTctM2IzMmY2YTE2NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsbD0tbwoduhrl8u8o5IUbomPzbv7eVdF957 Vaq1RAeEjVlaf4cX9rl5sCD4f+0kUtEJst9QmgPIUI32u61XFe2N14znRbYJz/kx RYNlY6cRhgqk4GavUGDNEiQzF4Rgq+BWonsvT3MTrfiERrzgbACn4wIgrbLzCzoB ds3arBvTzE5LJvaN77ziFAvTfYOtub6Tq3GIAUcsimMIVp08a5gY8/rFbhvzUZRc SWkclavFDXG2rFHnP1qW2W9F9vwnwbQLWhGADJa96sjA5TGIt05ENtfVyWKeO9QO nlBN9mwKpIuT+bx8NR+qOE75f9hYewdp7xEkrMNoA1fnSEw7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChvEjNzjQXsA1V+VYchBLucCdiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNzYwMjg3NTEtMDM1Yy0z NjUxLTg4ZTItYTFkMDA5ZWE5YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb2K9f37CeGd2D/iLzXDK9gV+b0O++GnhuKEA8e9XdNC4koxdBVsw78 UbDNUSHtCHUniT2FhG1lIEchop3Z4+hoQiQY5TXAeMHf4tvRdsVUVh+3gz2QKUm1 uTwWY9f10bYW+cm1o175rEhK/ghqGK0FXAsmgTo3pHTHZB19GnQz8fvectDCsB+O UvSeuzLJYuhnHE3prVxEbc5ZsRpE2k/STt2w4L07oderaK9cZD0QxrloUHJb6AEy A0nc/MTyo87PAbUYZhsCyPmPPJRKnWh2mrDQc5AHq7zN6Q1sx6Z+xvnT1K9Ff93C dwAx9dglzU0T7tRPgcaYXBVcSqm7DnE= -----END CERTIFICATE-----Generated at Mon Apr 7 13:23:57 2025 by rpki-client