$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa File: 875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa (raw, json) Hash identifier: 2GGd1UG44PcukiW3Y7IBfG5P5E/YBHFTGdJ2dMPQflI= Subject key identifier: 8B:F0:EA:D9:52:D2:49:EF:C5:4B:C4:EE:DC:EB:0C:A5:2B:7B:0A:CA Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848EF61691134F480368005D840 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 212238 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:69:11:34:f4:80:36:80:05:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c691900b-7cec-4b83-a603-bd2e9c204b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:d2:d9:79:48:ea:07:e4:e4:44:4c:f0:d9: 7b:e9:05:d0:0f:e3:88:49:10:05:c5:0d:90:48:d9: 6e:1a:d5:db:e8:e7:32:1d:87:01:48:a4:88:09:d8: 35:99:42:90:05:d1:0e:5c:2e:6e:e6:29:5e:62:b6: 94:92:68:ce:0c:71:48:cf:f6:48:86:20:95:5f:78: 51:87:77:35:26:34:42:e6:7e:50:86:3d:e8:ff:de: 45:8f:24:a9:48:f2:34:a7:cb:03:ef:75:3b:a2:d3: 33:5b:0f:7b:ff:55:d1:bb:56:19:ee:cf:ea:9f:f4: 93:13:e4:46:e0:6e:11:aa:91:06:25:47:65:c9:7b: 00:ee:39:e0:50:4c:03:09:78:ed:9b:b2:7b:e1:cd: 91:4a:e5:c0:50:64:f1:c3:04:77:d9:53:17:e5:4c: 51:47:c2:64:87:5f:ca:78:06:6d:e8:4a:77:2f:9e: e3:38:91:6b:04:76:4e:9e:49:a5:c7:b6:3c:1c:55: 59:72:30:9d:84:08:a1:54:38:b5:f6:08:08:c5:19: 38:bf:2d:55:0d:b9:3f:fd:99:a7:59:3a:55:50:6d: f2:16:6a:14:e4:c8:1f:71:75:01:42:1e:4b:90:ce: b1:53:6d:a7:c5:f9:12:1b:94:3b:7c:a8:ef:33:92: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:EA:D9:52:D2:49:EF:C5:4B:C4:EE:DC:EB:0C:A5:2B:7B:0A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d5:8d:14:50:62:e6:92:b7:13:a2:b5:3c:73:f1:b7:04:76: ab:80:7a:3b:69:b4:5f:12:71:6e:d3:49:8f:7d:2f:51:26:e9: 3e:67:46:a8:39:7b:6f:df:91:48:ba:64:15:89:64:04:0c:d7: 56:b1:07:fa:ff:d8:43:6b:18:a7:5e:60:04:c1:01:e7:1d:eb: eb:6d:74:ee:b3:1a:0b:5a:9c:d8:04:54:0a:1e:0c:92:95:34: e7:9f:bf:0a:bb:be:24:b9:4f:fd:22:9d:29:41:ed:22:40:39: 29:92:b9:2d:59:1e:7f:2d:9b:17:9b:3d:24:ac:d5:e0:54:76: 43:fe:29:67:83:59:3a:33:56:94:d4:74:87:36:dc:d4:71:5e: 18:ce:fb:dd:96:32:ad:c7:2a:d5:dc:f6:4e:e9:44:cf:5b:82: 29:a1:9a:5f:8f:2b:a4:04:25:f2:ee:0a:e8:49:ca:f2:f8:4c: 71:5a:8c:5c:ab:44:d6:7e:86:39:83:28:ca:d0:bc:28:3a:27: da:32:cf:7a:b0:1d:e1:da:b2:aa:78:a9:b4:ba:5b:bb:59:36: 9c:98:df:0f:93:c6:17:c8:f7:dc:5f:c5:a3:43:69:ff:c6:0c: 3b:1a:4b:ed:19:9b:da:82:e1:a2:2f:35:38:e7:d2:b1:95:d8: 46:90:a3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWkRNPSANoAF2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzY5MTkwMGItN2NlYy00YjgzLWE2MDMtYmQyZTljMjA0YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY3S2XlI6gfk5ERM8Nl76QXQD+OISRAFxQ2Q SNluGtXb6OcyHYcBSKSICdg1mUKQBdEOXC5u5ileYraUkmjODHFIz/ZIhiCVX3hR h3c1JjRC5n5Qhj3o/95FjySpSPI0p8sD73U7otMzWw97/1XRu1YZ7s/qn/STE+RG 4G4RqpEGJUdlyXsA7jngUEwDCXjtm7J74c2RSuXAUGTxwwR32VMX5UxRR8Jkh1/K eAZt6Ep3L57jOJFrBHZOnkmlx7Y8HFVZcjCdhAihVDi19ggIxRk4vy1VDbk//Zmn WTpVUG3yFmoU5MgfcXUBQh5LkM6xU22nxfkSG5Q7fKjvM5I4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvw6tlS0knvxUvE7tzrDKUrewrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODc1ZmI4YmEtY2M5ZC0z ZTgwLWExZDMtYzEwODU0ZGIxNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrVjRRQYuaStxOitTxz8bcEdquAejtptF8ScW7TSY99L1Em6T5nRqg5 e2/fkUi6ZBWJZAQM11axB/r/2ENrGKdeYATBAecd6+ttdO6zGgtanNgEVAoeDJKV NOefvwq7viS5T/0inSlB7SJAOSmSuS1ZHn8tmxebPSSs1eBUdkP+KWeDWTozVpTU dIc23NRxXhjO+92WMq3HKtXc9k7pRM9bgimhml+PK6QEJfLuCuhJyvL4THFajFyr RNZ+hjmDKMrQvCg6J9oyz3qwHeHasqp4qbS6W7tZNpyY3w+TxhfI99xfxaNDaf/G DDsaS+0Zm9qC4aIvNTjn0rGV2EaQo7Y= -----END CERTIFICATE-----Generated at Fri Apr 11 23:04:54 2025 by rpki-client