$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa File: d08c84e2-cf05-324f-9e29-a1020bf31620.roa (raw, json) Hash identifier: ENcWM0mDX1M70brz8uKOjKBOJjd2kZczvxTmUsBE0bM= Subject key identifier: 64:17:94:89:73:22:53:01:99:B7:B8:94:BC:71:E4:B4:75:85:4F:E7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A14657D15A1E12C1C7BCCD54C Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 22781 IP address blocks: 216.131.118.0/24 maxlen: 24 2606:b300:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7d:15:a1:e1:2c:1c:7b:cc:d5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=95ab62ef-ce90-4242-bacf-fc82dfb12a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:20:49:d8:6e:ac:fc:d1:65:8a:21:98:f6: ee:93:b7:be:b9:6b:85:f4:01:82:77:be:bc:28:01: df:f4:2e:6b:87:38:87:88:81:19:6b:1c:e3:f0:db: 74:de:f7:d9:34:b2:bd:6f:b8:8b:1c:2c:1c:22:21: 9b:f6:33:a6:f5:33:25:62:e1:19:68:8b:ec:94:b2: d0:9e:d0:8a:39:7a:9e:fe:e0:55:09:76:19:3c:f3: 3d:a7:bb:10:2f:10:98:7d:57:4b:8c:13:ae:fb:c7: 88:3b:5f:32:50:c4:8d:db:0c:fc:3f:a8:1d:dd:0d: f9:6b:46:f3:11:47:51:e0:f8:01:91:d6:34:19:5e: c1:ac:d4:01:f4:4a:77:dd:46:25:49:74:08:d0:a6: b9:95:db:2f:b5:4f:49:05:d6:ea:e4:05:72:d8:41: 3a:6b:d8:8b:29:98:cf:8e:a8:8c:54:a1:f4:b5:af: 88:71:a7:59:35:aa:9f:b5:f7:d8:3d:d0:da:3a:a2: 02:ea:5e:2f:b5:56:c0:28:82:80:1c:c7:8e:9c:c3: c9:2f:8a:32:76:8a:2c:53:59:f5:17:52:02:2c:a8: 53:ed:2e:f2:9f:ae:4f:04:cd:ab:25:f1:92:99:41: 2d:e3:18:20:55:66:db:1e:2b:3a:b4:2b:9d:3f:99: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:94:89:73:22:53:01:99:B7:B8:94:BC:71:E4:B4:75:85:4F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.118.0/24 IPv6: 2606:b300:8100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:86:b6:ee:97:85:42:46:70:57:b3:03:12:af:12:e6:f8:04: f0:f7:f9:22:73:d2:7c:22:d7:24:a1:27:39:13:ba:27:24:ee: 06:3f:44:21:e8:f8:f1:26:f4:bd:5a:b6:13:39:97:4f:ca:f9: 55:af:c4:47:00:23:1d:29:45:e0:1a:d3:84:04:9a:49:c4:8c: f4:fa:a8:7d:43:b3:cd:8f:86:57:49:66:02:90:6b:1e:e0:a5: f3:2a:af:04:53:9f:88:55:87:f2:f9:f4:f4:80:b6:1e:c1:c3: ca:40:df:4e:33:2e:f7:27:92:f5:6c:b1:94:fe:85:00:90:bc: 3b:8d:06:eb:54:54:02:28:b0:c5:2d:cb:e9:b6:b2:43:b5:fa: 4d:a9:7d:f2:1f:9c:44:22:38:40:03:85:b5:40:83:26:97:b0: 9c:24:e6:e6:e9:57:c1:b3:e6:cd:fd:c7:94:49:3f:1f:92:42: 53:9d:f4:4b:25:db:d5:49:a2:97:6f:df:27:f8:d5:b1:b1:78: 94:a5:03:70:34:34:b8:ec:42:f0:a7:64:13:b3:4c:89:23:f7: 6f:a2:6e:2a:52:19:71:0d:59:5f:7d:c2:e6:b8:55:68:e1:5c: 73:0c:7c:ae:79:e6:d0:a4:0b:df:6c:a2:e6:a0:16:de:39:83: 2d:d4:85:a5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoUZX0VoeEsHHvM1UwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTVhYjYyZWYtY2U5MC00MjQyLWJhY2YtZmM4MmRmYjEyYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnsgSdhurPzRZYohmPbuk7e+uWuF9AGCd768 KAHf9C5rhziHiIEZaxzj8Nt03vfZNLK9b7iLHCwcIiGb9jOm9TMlYuEZaIvslLLQ ntCKOXqe/uBVCXYZPPM9p7sQLxCYfVdLjBOu+8eIO18yUMSN2wz8P6gd3Q35a0bz EUdR4PgBkdY0GV7BrNQB9Ep33UYlSXQI0Ka5ldsvtU9JBdbq5AVy2EE6a9iLKZjP jqiMVKH0ta+IcadZNaqftffYPdDaOqIC6l4vtVbAKIKAHMeOnMPJL4oydoosU1n1 F1ICLKhT7S7yn65PBM2rJfGSmUEt4xggVWbbHis6tCudP5lp8QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGQXlIlzIlMBmbe4lLxx5LR1hU/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDA4Yzg0ZTItY2YwNS0z MjRmLTllMjktYTEwMjBiZjMxNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN2MA4E AgACMAgDBgAmBrMAgTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAghrbul4VCRnBXswMSrxLm+ATw9/kic9J8 ItckoSc5E7onJO4GP0Qh6PjxJvS9WrYTOZdPyvlVr8RHACMdKUXgGtOEBJpJxIz0 +qh9Q7PNj4ZXSWYCkGse4KXzKq8EU5+IVYfy+fT0gLYewcPKQN9OMy73J5L1bLGU /oUAkLw7jQbrVFQCKLDFLcvptrJDtfpNqX3yH5xEIjhAA4W1QIMml7CcJObm6VfB s+bN/ceUST8fkkJTnfRLJdvVSaKXb98n+NWxsXiUpQNwNDS47ELwp2QTs0yJI/dv om4qUhlxDVlffcLmuFVo4VxzDHyueebQpAvfbKLmoBbeOYMt1IWl -----END CERTIFICATE-----Generated at Sat Jun 7 12:28:09 2025 by rpki-client