$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa File: e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa (raw, json) Hash identifier: 486288qTFsrfxKcnYmwi7mfdh43iKmCZ7GKac59vSgk= Subject key identifier: 64:85:71:2A:A2:28:4F:8E:BF:A7:89:B0:19:08:A7:BC:E4:04:25:C7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848EF613DFD489B895E140A9480 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 62240 IP address blocks: 216.169.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3d:fd:48:9b:89:5e:14:0a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=2815ef38-a4dc-45d0-9548-f77e83ecc59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:44:79:22:cf:ed:34:11:26:b7:ed:8a:0c: 6a:8f:a7:b4:bb:9e:2f:5a:6f:90:de:f4:8e:c8:67: e5:15:96:87:25:f4:48:1f:5c:76:3b:74:e1:26:17: 51:86:97:98:07:9f:cc:8d:10:de:11:4e:f9:77:1f: 6c:01:07:77:77:8e:bb:7a:23:70:5e:14:b1:60:25: 45:9d:d1:7f:8b:87:29:7c:64:aa:1e:6c:fb:2e:32: ed:7c:b4:c5:06:db:47:c1:68:c4:03:4d:bf:92:b3: cd:43:3b:e4:77:28:c2:5a:86:11:21:4c:06:73:84: 0c:21:27:29:c4:b5:58:dc:73:e6:4b:92:aa:0b:f4: ea:0f:18:13:2e:28:de:7c:fc:e7:7e:34:a0:f8:33: 62:63:4e:09:80:22:cf:6f:60:33:f0:d4:9f:4f:15: 03:fe:56:d2:ef:24:75:c2:c3:c5:e1:74:b9:af:97: 66:53:d5:2d:16:3b:37:08:1c:fe:01:04:e0:1d:a1: fc:ec:12:58:b2:cc:84:9c:e7:a1:74:2b:6c:25:fb: 40:d0:fe:db:e9:07:30:dd:76:9b:d5:6d:88:94:82: 28:83:8e:f5:5f:d5:f6:db:5e:a1:e8:39:48:6d:ba: 04:7c:8b:dc:cb:5a:2f:70:b4:70:f2:9e:2a:e7:ff: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:71:2A:A2:28:4F:8E:BF:A7:89:B0:19:08:A7:BC:E4:04:25:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.169.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d5:99:34:0d:e2:ed:cc:45:12:9c:17:22:e4:49:c4:f5:4e: 45:ed:20:c4:48:d0:d2:66:e9:14:8e:3c:37:96:46:94:23:6c: 9c:c3:b5:7c:40:4e:ce:45:07:83:1f:0b:bc:10:1c:5c:bf:2f: b5:4f:b3:0c:82:94:9f:b4:d4:91:77:57:fc:8a:a4:2e:64:ed: 0b:80:bf:85:a0:99:7a:79:cc:5f:8a:d5:15:d2:6b:1c:8b:41: 26:8c:5f:9d:48:86:98:0e:f2:27:b1:46:f8:f3:03:cb:15:ad: a9:79:d1:ed:b3:16:f8:b1:cc:77:6f:a0:03:19:18:cf:91:01: 94:18:d6:52:27:29:af:26:29:f8:2e:3c:71:53:c5:01:6c:72: 27:ae:ac:c4:41:0a:63:7c:b3:6d:8c:21:31:ba:39:87:b7:b0: 3d:f9:44:74:6b:43:80:d2:c6:08:28:fd:56:4c:cd:0f:ae:8d: 65:ed:ee:e4:b4:a3:dd:d4:6d:1b:1a:14:3c:85:f0:c2:4c:c3: a0:3d:05:78:e0:e8:0e:09:9d:e8:8e:cd:91:df:a7:fa:15:f0: 85:6e:c9:ca:42:88:6a:a2:d4:68:d4:86:9c:f0:d1:71:49:e7: 6c:80:21:d1:36:c5:29:5e:97:16:59:57:a8:ce:56:c8:f2:1a: d0:8e:78:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT39SJuJXhQKlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjgxNWVmMzgtYTRkYy00NWQwLTk1NDgtZjc3ZTgzZWNjNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd1EeSLP7TQRJrftigxqj6e0u54vWm+Q3vSO yGflFZaHJfRIH1x2O3ThJhdRhpeYB5/MjRDeEU75dx9sAQd3d467eiNwXhSxYCVF ndF/i4cpfGSqHmz7LjLtfLTFBttHwWjEA02/krPNQzvkdyjCWoYRIUwGc4QMIScp xLVY3HPmS5KqC/TqDxgTLijefPznfjSg+DNiY04JgCLPb2Az8NSfTxUD/lbS7yR1 wsPF4XS5r5dmU9UtFjs3CBz+AQTgHaH87BJYssyEnOehdCtsJftA0P7b6Qcw3Xab 1W2IlIIog471X9X2216h6DlIbboEfIvcy1ovcLRw8p4q5/9D3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSFcSqiKE+Ov6eJsBkIp7zkBCXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTc2ODVkOWUtNzljNS0z YmM5LWJiM2UtMzUxYjFiYjBiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTVmTQN4u3MRRKcFyLkScT1TkXtIMRI0NJm6RSOPDeWRpQjbJzDtXxA Ts5FB4MfC7wQHFy/L7VPswyClJ+01JF3V/yKpC5k7QuAv4WgmXp5zF+K1RXSaxyL QSaMX51IhpgO8iexRvjzA8sVral50e2zFvixzHdvoAMZGM+RAZQY1lInKa8mKfgu PHFTxQFscieurMRBCmN8s22MITG6OYe3sD35RHRrQ4DSxggo/VZMzQ+ujWXt7uS0 o93UbRsaFDyF8MJMw6A9BXjg6A4JneiOzZHfp/oV8IVuycpCiGqi1GjUhpzw0XFJ 52yAIdE2xSlelxZZV6jOVsjyGtCOeGg= -----END CERTIFICATE-----Generated at Thu Apr 3 22:31:27 2025 by rpki-client