$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: cHecbJv3f5NeobzTv8/z6j2/WBLTetBMeCWJ5bJefMU= Subject key identifier: B6:84:2F:A8:E2:C0:1A:70:CF:AE:19:CC:A8:09:A0:2F:2B:2C:D1:32 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849350EA277B7F36F02575C6300 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a2:77:b7:f3:6f:02:57:5c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=d8223adf-73b8-422a-9462-340b0e8aeebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:06:7d:1b:db:49:e9:22:21:be:1c:80:bf: e7:b8:74:f8:9d:e9:df:84:b0:3d:b9:e8:8f:55:18: 1a:85:d8:a2:e7:e6:69:2d:49:48:0b:cf:90:1e:2a: b7:a7:a1:1d:b7:c3:ba:6f:ae:11:c0:d7:be:36:91: f3:1b:a5:ef:44:11:ed:73:a1:a9:c7:1c:4e:81:44: 16:1a:0d:7f:9e:6b:ed:73:a7:b0:c0:67:e1:e1:40: f4:38:dc:12:10:08:0b:e7:43:a9:8f:29:74:34:cc: 27:62:4c:00:2c:98:cc:07:0e:76:4c:42:4b:65:e8: 29:36:ba:ff:69:68:41:40:d0:a7:a1:4e:12:3d:95: 29:91:1d:f7:26:6b:83:84:50:42:92:1d:c3:79:e4: 2e:6c:dc:77:dc:38:cf:d9:c7:b2:5c:25:b0:4a:0e: 4c:91:04:93:54:44:af:87:a0:0e:9c:fa:58:73:99: 9c:fa:2b:0c:5d:16:d1:31:e4:45:f2:04:e7:4d:91: aa:43:44:2c:d3:b8:1a:08:e6:e7:69:18:f6:56:35: f1:07:11:21:2a:f0:33:ff:06:3f:83:ab:e6:d1:82: b5:56:a5:6c:d4:e4:39:15:44:8b:1a:9c:18:22:49: e6:b7:b5:5d:74:b4:82:b7:3b:fe:cb:4b:a9:fe:81: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:2F:A8:E2:C0:1A:70:CF:AE:19:CC:A8:09:A0:2F:2B:2C:D1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b1:46:60:80:06:9f:b5:53:fe:a6:da:5c:63:c9:4c:bf:5f: 53:23:dd:44:f6:20:cd:30:00:e9:3e:fb:02:b8:08:46:be:fc: b3:27:68:0e:bd:fb:9f:91:ee:84:78:d1:76:04:58:cf:b0:51: 0a:33:1b:5c:4f:9b:22:b9:7c:3c:4a:42:e2:fa:b0:db:04:0e: f1:18:3d:e5:64:cf:bd:a9:6f:04:54:36:5a:d4:95:d4:e6:1d: a4:fc:80:2b:e1:e0:64:8f:24:77:8a:2a:75:db:a1:bb:a9:bf: 60:c1:3a:61:b0:e7:59:d7:8e:ca:35:ea:6c:6d:15:e5:1a:18: e1:f0:4f:85:b3:6c:92:97:f0:47:90:14:88:2a:50:33:e2:e5: af:85:68:49:23:9f:f4:8c:1d:8c:c7:0e:af:f8:03:a0:70:42: ec:6e:7d:04:8c:3c:b4:f8:58:c0:18:70:05:98:52:e3:36:23: f5:42:c5:07:4e:b8:4e:40:6b:ed:7d:02:eb:6b:2d:96:bf:9c: 88:b6:30:39:82:46:e9:69:69:90:d0:34:ce:ec:e6:95:ce:12: 42:96:7f:a4:d0:21:f0:ed:3e:f7:ed:94:55:e9:5b:68:e8:45: 0c:fa:05:e7:13:77:e4:29:55:1b:ba:a6:bf:1c:b3:71:c0:3a: 08:c3:9d:d8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk1DqJ3t/NvAldcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDgyMjNhZGYtNzNiOC00MjJhLTk0NjItMzQwYjBlOGFlZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNQGfRvbSekiIb4cgL/nuHT4nenfhLA9ueiP VRgahdii5+ZpLUlIC8+QHiq3p6Edt8O6b64RwNe+NpHzG6XvRBHtc6GpxxxOgUQW Gg1/nmvtc6ewwGfh4UD0ONwSEAgL50Opjyl0NMwnYkwALJjMBw52TEJLZegpNrr/ aWhBQNCnoU4SPZUpkR33JmuDhFBCkh3DeeQubNx33DjP2ceyXCWwSg5MkQSTVESv h6AOnPpYc5mc+isMXRbRMeRF8gTnTZGqQ0Qs07gaCObnaRj2VjXxBxEhKvAz/wY/ g6vm0YK1VqVs1OQ5FUSLGpwYIknmt7VddLSCtzv+y0up/oHydwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLaEL6jiwBpwz64ZzKgJoC8rLNEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1sUZggAaftVP+ptpcY8lMv19TI91E9iDN MADpPvsCuAhGvvyzJ2gOvfufke6EeNF2BFjPsFEKMxtcT5siuXw8SkLi+rDbBA7x GD3lZM+9qW8EVDZa1JXU5h2k/IAr4eBkjyR3iip126G7qb9gwTphsOdZ147KNeps bRXlGhjh8E+Fs2ySl/BHkBSIKlAz4uWvhWhJI5/0jB2Mxw6v+AOgcELsbn0EjDy0 +FjAGHAFmFLjNiP1QsUHTrhOQGvtfQLray2Wv5yItjA5gkbpaWmQ0DTO7OaVzhJC ln+k0CHw7T737ZRV6Vto6EUM+gXnE3fkKVUbuqa/HLNxwDoIw53Y -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:33 2025 by rpki-client