$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa File: ca8d454c-8457-3d57-82f4-1e234ade3489.roa (raw, json) Hash identifier: KSq0cM/xYjXMt+Ol1cmXixddBh1ueGDhyAVjJ8C/DfU= Subject key identifier: 71:A4:1A:C5:46:1A:AA:33:B0:37:84:38:E5:5A:D6:D8:1A:28:38:AC Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849244E700944F507EF8FB97E80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 62651 IP address blocks: 216.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:70:09:44:f5:07:ef:8f:b9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=258e69c9-ec15-4483-acb9-e703f7191d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:a4:16:50:8a:20:15:25:06:b3:0f:15:a9: 0c:4f:be:f3:24:5e:9a:74:78:72:e8:41:af:3e:89: d6:08:91:aa:a7:85:bd:7e:05:11:86:b2:16:24:b9: 44:97:3c:97:54:70:99:22:54:e3:3c:a5:58:b0:d4: e7:8a:97:99:47:89:45:9a:29:89:bf:98:47:1d:95: 11:72:17:b5:3d:0a:03:50:db:7c:ae:94:5d:9d:ba: c3:cb:e3:5b:6b:11:45:40:4a:37:b1:bc:fa:6b:d2: af:c1:34:52:e1:a4:13:d1:02:f9:a2:69:a4:ae:b2: 74:fc:3a:2a:1f:63:e3:7b:4a:f6:c0:6d:39:46:c2: ff:9a:b7:f2:02:90:2c:a0:8c:e1:ab:e6:23:5b:65: 81:e4:d6:f4:95:df:0e:e2:3a:8b:14:10:31:7f:84: 51:6a:56:34:92:c2:5d:d2:56:55:ca:c0:1a:b6:ff: 80:d6:41:61:18:be:ba:ef:89:9d:5a:35:6f:fa:48: 19:cb:61:1e:31:e0:41:ed:3f:99:4b:04:64:a3:0b: de:f4:35:64:ac:4e:21:81:c0:34:7b:33:8d:aa:83: 88:b2:44:4b:d4:52:b3:fe:fe:7d:6c:a9:f9:fb:bb: c9:e3:95:b9:d6:6a:50:de:43:19:54:44:fa:18:83: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:1A:C5:46:1A:AA:33:B0:37:84:38:E5:5A:D6:D8:1A:28:38:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:81:ce:d2:a9:ed:a2:87:5d:cf:73:07:ed:4e:fb:f2:63:fc: 92:bb:d5:23:95:da:3b:62:a0:a7:1e:cb:5d:70:f3:9b:b1:de: 00:03:c6:29:d6:57:11:fe:05:7f:f3:71:42:a0:eb:25:0b:33: ba:46:ea:c9:b7:00:fb:4a:05:49:9d:8d:fb:c6:2e:db:09:9b: 19:c4:df:20:a8:33:be:dc:6a:ff:b8:59:6d:f5:58:28:98:25: 53:91:4b:44:e1:5e:2f:95:73:af:45:b2:63:da:af:bf:e8:38: e9:1b:2f:a7:9d:7e:3e:6c:8d:fd:2f:c4:e3:3d:da:33:4c:67: e0:7a:2f:86:04:c1:8f:6c:cb:bd:53:2d:f2:90:9c:87:e3:c0: c5:30:93:68:9d:7c:77:1d:1f:7b:d2:bc:e7:aa:88:5f:e9:0a: a9:78:95:f3:18:9c:a4:88:aa:4b:dd:8f:95:e2:a4:a3:4c:1e: ec:24:d0:f1:65:5f:31:3c:1d:71:49:d0:ae:39:cb:f9:4e:52: 5f:fe:20:e9:e1:48:8b:95:b9:59:95:f6:1f:96:81:a5:43:b4: 43:8e:8b:ba:d1:31:93:f6:09:2f:17:e7:ab:01:45:87:ce:f5: 30:8a:a4:1e:d3:4e:83:86:be:f7:ad:b0:ed:3f:30:b3:d8:58: 6d:8d:b5:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnAJRPUH74+5foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MjU4ZTY5YzktZWMxNS00NDgzLWFjYjktZTcwM2Y3MTkxZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMCkFlCKIBUlBrMPFakMT77zJF6adHhy6EGv PonWCJGqp4W9fgURhrIWJLlElzyXVHCZIlTjPKVYsNTnipeZR4lFmimJv5hHHZUR che1PQoDUNt8rpRdnbrDy+NbaxFFQEo3sbz6a9KvwTRS4aQT0QL5ommkrrJ0/Doq H2Pje0r2wG05RsL/mrfyApAsoIzhq+YjW2WB5Nb0ld8O4jqLFBAxf4RRalY0ksJd 0lZVysAatv+A1kFhGL6674mdWjVv+kgZy2EeMeBB7T+ZSwRkowve9DVkrE4hgcA0 ezONqoOIskRL1FKz/v59bKn5+7vJ45W51mpQ3kMZVET6GIP/NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGkGsVGGqozsDeEOOVa1tgaKDisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvY2E4ZDQ1NGMtODQ1Ny0z ZDU3LTgyZjQtMWUyMzRhZGUzNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmBztKp7aKHXc9zB+1O+/Jj/JK71SOV2jtioKcey11w85ux3gADxinW VxH+BX/zcUKg6yULM7pG6sm3APtKBUmdjfvGLtsJmxnE3yCoM77cav+4WW31WCiY JVORS0ThXi+Vc69FsmPar7/oOOkbL6edfj5sjf0vxOM92jNMZ+B6L4YEwY9sy71T LfKQnIfjwMUwk2idfHcdH3vSvOeqiF/pCql4lfMYnKSIqkvdj5XipKNMHuwk0PFl XzE8HXFJ0K45y/lOUl/+IOnhSIuVuVmV9h+WgaVDtEOOi7rRMZP2CS8X56sBRYfO 9TCKpB7TToOGvvetsO0/MLPYWG2NtTM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:11 2025 by rpki-client