$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: MEop/vgCox/EjzqQRYO4jBqWAn3CIG/0F5EXGCfsNeE= Subject key identifier: 3A:F5:4D:C3:D6:F4:71:22:5B:7D:AC:97:FA:8F:D4:FF:9C:F0:56:21 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584953C410A18B8EDD5E8A37E0C0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:10:a1:8b:8e:dd:5e:8a:37:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=3ca5871c-aea0-4256-ae78-a1ee17b91c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:3f:5c:34:3c:38:80:51:23:0c:90:0e:e3: 6b:44:80:e2:93:25:5e:7e:9e:02:1f:67:c7:65:8a: 68:ac:79:e5:64:03:ae:c6:41:bd:bb:ee:72:be:7f: b5:96:35:46:c5:25:a9:7a:fd:37:c0:58:61:e4:ff: e0:b9:68:50:39:8b:42:eb:3f:5e:ee:84:d0:a0:1a: 0f:90:ae:64:e8:03:25:9d:e6:2e:83:55:d3:f4:0a: 08:04:22:d6:18:f9:b9:2b:f5:33:11:9a:d9:16:08: 23:1a:f3:b8:31:85:a9:a8:06:86:c5:56:26:7f:ab: d6:0f:8d:04:f9:df:9b:9c:3b:94:50:2b:23:25:2c: ad:e1:a2:73:3f:72:c9:09:a4:61:8b:7b:24:7b:73: f9:a8:d5:70:6c:42:be:55:7d:a8:ee:da:6e:d8:2a: ff:ef:e3:60:86:1d:d8:75:e1:05:dc:20:fd:a7:ba: 4f:00:7c:fc:1e:30:b5:e0:4a:ff:14:6a:b7:f2:0b: 2c:e8:b6:cf:c5:88:4b:05:79:9b:cb:34:2b:a3:9a: a9:b1:71:5e:48:09:cd:ab:ac:8c:39:f8:0e:46:a4: 74:b9:a3:ce:a4:f0:79:b4:28:43:b5:b8:f7:4e:17: e3:9b:69:ff:7c:13:1a:e1:94:13:a2:7d:93:99:a0: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F5:4D:C3:D6:F4:71:22:5B:7D:AC:97:FA:8F:D4:FF:9C:F0:56:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d2:d1:cf:5a:4f:cd:f4:0d:dc:2a:a4:d2:b4:47:9d:6f:40: 1b:1d:17:34:31:bc:0b:c3:b2:cd:2f:8d:60:02:92:41:36:6c: 5e:df:c7:63:d0:99:f0:57:c2:32:26:d8:f6:77:bb:b0:c0:a9: fc:4d:f0:28:28:91:8e:93:be:09:2f:d4:2c:b3:39:1a:4d:a3: e9:85:41:3d:62:9b:1b:18:c2:7d:72:62:d1:01:9e:dd:02:f8: e1:10:39:fd:ab:4b:27:9c:88:53:dc:85:a5:2e:4e:fe:2a:c4: 3b:9d:b4:ff:3b:eb:ca:55:63:04:73:7a:4e:59:52:bd:02:4b: cc:1c:0f:ff:b6:4d:bb:0c:b8:06:7b:af:b1:8b:93:88:ba:6e: 07:89:d0:e5:2c:2f:fe:5c:06:39:cf:a8:35:bb:f2:6c:e5:3f: de:14:4a:87:ea:6e:36:0d:37:fe:2b:e4:97:9d:f5:85:fa:0c: e8:0a:a2:ac:33:c0:f8:22:a4:fb:d9:2b:f2:ce:98:00:95:25: ff:e5:42:32:9b:7f:f9:d7:74:4b:e8:71:5a:f4:ca:c8:5c:6f: d5:75:46:48:c8:6c:7a:99:b4:56:a1:5e:38:e8:d2:a3:5a:d6: fe:b4:96:06:59:52:dc:45:4b:d6:8d:5c:f4:13:af:94:0e:ed: 6b:c0:5c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBChi47dXoo34MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2NhNTg3MWMtYWVhMC00MjU2LWFlNzgtYTFlZTE3YjkxYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqw/XDQ8OIBRIwyQDuNrRIDikyVefp4CH2fH ZYporHnlZAOuxkG9u+5yvn+1ljVGxSWpev03wFhh5P/guWhQOYtC6z9e7oTQoBoP kK5k6AMlneYug1XT9AoIBCLWGPm5K/UzEZrZFggjGvO4MYWpqAaGxVYmf6vWD40E +d+bnDuUUCsjJSyt4aJzP3LJCaRhi3ske3P5qNVwbEK+VX2o7tpu2Cr/7+Nghh3Y deEF3CD9p7pPAHz8HjC14Er/FGq38gss6LbPxYhLBXmbyzQro5qpsXFeSAnNq6yM OfgORqR0uaPOpPB5tChDtbj3Thfjm2n/fBMa4ZQTon2TmaCidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr1TcPW9HEiW32sl/qP1P+c8FYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELS0c9aT830DdwqpNK0R51vQBsdFzQxvAvDss0vjWACkkE2bF7fx2PQ mfBXwjIm2PZ3u7DAqfxN8CgokY6Tvgkv1CyzORpNo+mFQT1imxsYwn1yYtEBnt0C +OEQOf2rSyeciFPchaUuTv4qxDudtP8768pVYwRzek5ZUr0CS8wcD/+2TbsMuAZ7 r7GLk4i6bgeJ0OUsL/5cBjnPqDW78mzlP94USofqbjYNN/4r5Jed9YX6DOgKoqwz wPgipPvZK/LOmACVJf/lQjKbf/nXdEvocVr0yshcb9V1RkjIbHqZtFahXjjo0qNa 1v60lgZZUtxFS9aNXPQTr5QO7WvAXMU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:11:02 2025 by rpki-client