$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: XOWAhu8Vw/AZKciW52hYZMNBUkzSZnjyw832xsaUS5M= Subject key identifier: 22:89:6F:D7:D4:6E:EE:6D:7F:E8:6C:FD:2F:A2:BC:D7:82:57:FE:F5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374AC7A53545C54FE0559D00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c7:a5:35:45:c5:4f:e0:55:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=5ad641b3-de73-495f-984e-80ed1d9c42a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:f8:c4:ea:85:9f:f0:79:4c:72:ca:cb:1b: 6a:f8:29:f0:dc:07:1b:00:a0:7c:37:0c:96:f6:66: ad:d6:9c:25:72:b2:6a:4f:07:c3:91:fd:16:c9:d8: b8:36:1c:ae:63:99:c2:de:a1:d6:d1:a2:67:d5:cc: ea:04:4b:30:ae:1c:7f:a9:07:15:3e:b9:6e:a7:33: 7b:bd:7b:cd:4e:4a:b2:62:6e:a9:97:ee:d8:5a:c3: 0d:43:30:ba:af:21:83:a3:5e:a0:5f:5a:06:f5:79: 93:28:1a:af:06:07:53:01:c2:8e:64:18:38:81:92: a3:ba:25:f7:a7:40:59:f3:e1:d3:49:33:e3:e7:57: 14:e1:54:06:3e:08:69:f8:54:bf:62:fa:f4:4e:95: b2:0f:c6:ec:10:7f:56:ad:22:32:7d:2a:a9:42:a2: e9:be:1b:00:08:1f:4f:2a:f7:b1:62:49:1b:c3:d1: 62:50:f7:4f:3f:43:5b:d9:5f:92:5c:5b:2b:f0:6b: 5c:ca:40:f8:9e:c9:39:9c:d2:3f:a7:40:1f:af:4c: 7a:11:e2:32:70:52:7d:69:a2:56:7a:c1:a7:1a:fb: 1e:ee:9a:62:60:73:2e:dd:39:ef:c0:93:41:5f:9e: 07:07:a5:45:1b:6e:81:14:bc:2b:68:46:85:b7:6f: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:6F:D7:D4:6E:EE:6D:7F:E8:6C:FD:2F:A2:BC:D7:82:57:FE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:00:5b:04:3a:c3:36:9b:ba:f3:4d:bb:df:5a:a9:be:cf:98: e0:1a:27:0d:54:28:24:c7:7f:02:7f:ca:12:c8:4d:77:a8:55: 59:24:b2:89:5f:0a:13:61:f6:a9:b8:ed:f6:6f:82:8e:f7:b8: 86:c7:09:46:68:be:7b:20:79:1c:02:42:30:50:e4:32:4a:2f: 56:e0:e4:ed:3e:df:4b:9a:26:cb:91:b7:f1:1e:aa:3c:65:7e: 4c:97:95:aa:da:f6:52:46:d7:7b:48:20:10:2b:09:37:28:3e: 6e:85:16:40:95:1b:c7:9a:f1:f6:f3:66:fe:c3:29:56:94:ee: a6:6c:e5:74:17:45:bb:1c:ab:f5:43:50:c2:86:1a:a7:50:3f: 4c:5f:1b:ba:4e:f6:75:99:d7:46:17:cc:7c:53:c6:a9:88:8b: 7d:cc:9a:5e:e5:b4:18:c9:13:49:32:12:37:c0:7b:fd:31:ed: 33:2d:a7:2a:ba:80:51:45:9a:a1:21:e7:60:e3:f7:19:9d:30: 21:f2:65:cd:bd:d7:54:6a:dc:c0:54:3d:20:81:ea:8f:02:bb: 20:9f:b0:0a:e9:66:9a:8a:a8:3a:53:31:8f:80:b4:b7:36:2c: 18:64:89:d5:8b:d8:bd:d2:ea:fe:0b:08:f5:88:46:ea:ee:02: 06:13:06:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SselNUXFT+BVnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NWFkNjQxYjMtZGU3My00OTVmLTk4NGUtODBlZDFkOWM0MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOv4xOqFn/B5THLKyxtq+Cnw3AcbAKB8NwyW 9mat1pwlcrJqTwfDkf0Wydi4NhyuY5nC3qHW0aJn1czqBEswrhx/qQcVPrlupzN7 vXvNTkqyYm6pl+7YWsMNQzC6ryGDo16gX1oG9XmTKBqvBgdTAcKOZBg4gZKjuiX3 p0BZ8+HTSTPj51cU4VQGPghp+FS/Yvr0TpWyD8bsEH9WrSIyfSqpQqLpvhsACB9P KvexYkkbw9FiUPdPP0Nb2V+SXFsr8GtcykD4nsk5nNI/p0Afr0x6EeIycFJ9aaJW esGnGvse7ppiYHMu3TnvwJNBX54HB6VFG26BFLwraEaFt2/EmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKJb9fUbu5tf+hs/S+ivNeCV/71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsAWwQ6wzabuvNNu99aqb7PmOAaJw1UKCTHfwJ/yhLITXeoVVkksolf ChNh9qm47fZvgo73uIbHCUZovnsgeRwCQjBQ5DJKL1bg5O0+30uaJsuRt/Eeqjxl fkyXlara9lJG13tIIBArCTcoPm6FFkCVG8ea8fbzZv7DKVaU7qZs5XQXRbscq/VD UMKGGqdQP0xfG7pO9nWZ10YXzHxTxqmIi33Mml7ltBjJE0kyEjfAe/0x7TMtpyq6 gFFFmqEh52Dj9xmdMCHyZc2911Rq3MBUPSCB6o8CuyCfsArpZpqKqDpTMY+AtLc2 LBhkidWL2L3S6v4LCPWIRuruAgYTBoE= -----END CERTIFICATE-----Generated at Fri Jul 4 00:04:35 2025 by rpki-client