$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa File: 04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa (raw, json) Hash identifier: fW3KgrBk5fElVrhuWYwwKsdNnBu1ceDiu1B2avInpZg= Subject key identifier: E4:67:66:70:4A:C6:11:38:C7:49:84:91:74:EA:32:6B:3C:F3:AF:2A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3FCE9108BE5F3342ABA00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 62651 IP address blocks: 216.131.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fc:e9:10:8b:e5:f3:34:2a:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=0747ac8b-7d50-4f12-abdc-cecbcf563bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:30:b1:87:7c:1b:75:b0:84:39:f2:1b:4c: c6:d3:de:4e:58:be:64:18:8f:4c:42:e3:60:ea:03: d9:8b:61:90:ef:27:4b:18:11:c2:a3:8b:8d:5c:c6: 81:71:83:53:fa:a6:f0:bd:f1:af:e2:c2:ab:f5:cf: a9:62:62:b6:5a:10:21:97:63:13:51:4f:91:69:84: 34:de:c7:83:0d:b4:09:22:29:33:31:02:17:3f:c6: c2:d3:ec:bd:b0:90:ce:47:bb:87:92:c2:f5:c6:cf: e2:d6:a0:c1:89:cf:5b:09:8a:9c:1b:c2:5d:3a:15: 6b:6f:99:e5:e1:95:52:93:79:27:b3:69:0e:4f:15: 65:7b:67:1b:63:bd:d7:70:92:71:45:c7:08:b2:1c: 75:59:94:b3:76:3c:63:94:c7:6d:16:81:95:46:77: 1b:6d:41:4a:f3:e9:88:e5:27:d3:7a:c8:1b:38:e4: c8:27:61:58:a3:ea:83:0e:aa:03:04:1a:67:42:5c: f2:a9:65:d7:84:8a:b8:ac:e4:1b:4e:ec:61:0f:c9: 43:19:be:61:0b:44:8b:13:3e:ed:11:e1:f6:25:a5: ea:23:4d:dd:22:86:ca:0c:7f:53:59:e5:cc:26:da: e2:5a:38:86:78:ab:d3:95:b0:b4:7d:b3:d9:dd:e6: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:66:70:4A:C6:11:38:C7:49:84:91:74:EA:32:6B:3C:F3:AF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:47:27:9a:8d:ab:85:65:4e:98:19:76:7c:ff:66:2f:6d:e5: e7:43:fe:ad:a6:e0:2d:df:ac:f4:7b:d8:6b:ff:1b:9e:2e:00: c8:7a:ce:66:80:b6:df:04:d8:b3:20:94:94:30:b5:14:01:71: 8f:db:0b:73:7e:21:4f:49:e6:9f:d1:20:66:26:cb:f6:5f:75: 87:cc:79:7f:c6:c7:5e:a0:3e:87:04:ee:be:7b:e8:81:0b:fd: a1:67:14:46:34:c6:29:0b:09:d2:ce:64:ca:04:cb:34:4b:38: f9:68:ed:76:b7:6d:25:30:dd:9d:8f:8b:d0:6e:d6:b0:df:7b: 95:ee:3b:87:94:e6:24:41:4e:91:c0:f2:37:bd:3a:bd:e8:ec: 9a:89:61:4c:5a:bf:15:48:5c:b6:78:67:0b:41:2b:c1:c8:3d: a3:04:98:7e:64:7d:e3:76:04:a5:c0:63:cd:f9:d4:84:30:e5: 99:df:16:1f:18:39:43:dc:3d:14:f1:92:94:f7:87:ec:82:f0: c6:00:e2:3e:a4:98:0e:10:79:9c:d2:ec:96:b0:82:48:c6:ff: 75:cf:7c:9a:ee:35:0f:d3:db:18:37:a0:16:1e:fb:a5:56:27: f6:d6:aa:6f:51:b1:07:96:a7:eb:32:71:9e:0e:85:31:d1:9b: 7d:3a:83:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/zpEIvl8zQqugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDc0N2FjOGItN2Q1MC00ZjEyLWFiZGMtY2VjYmNmNTYzYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3swsYd8G3WwhDnyG0zG095OWL5kGI9MQuNg 6gPZi2GQ7ydLGBHCo4uNXMaBcYNT+qbwvfGv4sKr9c+pYmK2WhAhl2MTUU+RaYQ0 3seDDbQJIikzMQIXP8bC0+y9sJDOR7uHksL1xs/i1qDBic9bCYqcG8JdOhVrb5nl 4ZVSk3kns2kOTxVle2cbY73XcJJxRccIshx1WZSzdjxjlMdtFoGVRncbbUFK8+mI 5SfTesgbOOTIJ2FYo+qDDqoDBBpnQlzyqWXXhIq4rOQbTuxhD8lDGb5hC0SLEz7t EeH2JaXqI03dIobKDH9TWeXMJtriWjiGeKvTlbC0fbPZ3eYjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORnZnBKxhE4x0mEkXTqMms8868qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRhOTE5MjMtNjVjYy0z ZDI0LWExZTktY2JlMGRhM2FmNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRHJ5qNq4VlTpgZdnz/Zi9t5edD/q2m4C3frPR72Gv/G54uAMh6zmaA tt8E2LMglJQwtRQBcY/bC3N+IU9J5p/RIGYmy/ZfdYfMeX/Gx16gPocE7r576IEL /aFnFEY0xikLCdLOZMoEyzRLOPlo7Xa3bSUw3Z2Pi9Bu1rDfe5XuO4eU5iRBTpHA 8je9Or3o7JqJYUxavxVIXLZ4ZwtBK8HIPaMEmH5kfeN2BKXAY8351IQw5ZnfFh8Y OUPcPRTxkpT3h+yC8MYA4j6kmA4QeZzS7JawgkjG/3XPfJruNQ/T2xg3oBYe+6VW J/bWqm9RsQeWp+sycZ4OhTHRm306g/4= -----END CERTIFICATE-----Generated at Sat May 10 13:58:22 2025 by rpki-client