$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa File: 875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa (raw, json) Hash identifier: 2DMlKJDBlyeOWuF+wj3zVJDU0z1UG4DHZmQBvbOIBb0= Subject key identifier: 23:F3:E7:15:A5:74:81:42:7B:04:55:2A:4C:1C:9D:90:F2:A0:DC:39 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849CE9A61532F9A50E2E86B9F00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 212238 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:61:53:2f:9a:50:e2:e8:6b:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d978dde1-017c-4d3d-8bdc-5b0dca3714e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:8d:09:fa:f5:db:e7:2e:e9:f7:28:ae:ff: 40:43:85:6d:cd:be:be:16:e5:e6:ad:39:5a:5a:44: 81:5f:83:6c:c7:8c:c3:38:4d:e5:af:51:45:0e:92: 43:f6:d4:80:60:78:d2:2a:1a:fa:29:c1:0d:8f:3c: bc:06:9b:00:19:9c:0b:39:25:3c:3f:07:3f:9b:23: f1:7e:6c:98:4e:84:1b:95:8f:ec:92:30:d3:b3:b1: 21:13:ab:9a:3e:78:99:ca:83:84:ca:64:4b:fc:48: fb:eb:7d:3b:07:77:36:44:a5:5e:2f:07:a1:c7:fb: bd:c4:fc:a6:71:89:d3:64:93:e5:23:0a:fe:f5:3d: 30:61:6c:54:38:76:21:0e:d3:77:dc:8a:87:ca:2b: 09:cb:ac:6e:82:9e:66:9b:eb:0b:4d:13:de:5a:7d: a5:cb:1d:05:84:a1:a6:57:d1:87:04:c3:22:ff:9e: 9e:1d:d1:72:c6:f4:42:97:4d:38:28:69:c8:c8:c9: 94:fc:51:3c:4c:68:03:63:c0:54:c9:79:92:65:42: e3:90:24:2d:8e:52:fd:cf:87:58:9e:77:c3:9f:db: 65:55:16:bf:96:24:67:7e:f4:22:db:4e:40:94:0e: 8f:a4:9d:dd:83:15:64:1c:a4:5f:b6:f4:f3:92:53: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F3:E7:15:A5:74:81:42:7B:04:55:2A:4C:1C:9D:90:F2:A0:DC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e0:bd:21:dc:6c:3b:09:41:44:e0:b4:80:48:39:d3:29:7b: 4c:6c:af:73:ac:a3:e6:31:6f:9d:92:ab:15:53:9b:a6:3c:32: 1c:7e:44:28:e4:67:11:71:ab:28:94:17:c5:bb:78:4a:e1:4c: 53:51:31:12:5c:70:01:d5:b9:2c:9c:96:be:81:2b:ce:86:1d: 69:6b:28:84:b8:8c:0b:2f:ca:c9:10:76:56:3d:89:8f:93:f9: 04:64:6f:b5:0a:a1:d7:d9:8d:18:08:cf:5e:18:42:4b:cb:5a: 93:4f:51:7b:a0:c6:6f:4f:ca:f3:ce:d3:6d:b8:bf:2e:73:9d: bb:08:95:94:41:27:44:17:43:07:1f:6e:ac:c8:b9:12:51:41: bc:fb:ba:f1:98:11:03:f5:fe:f9:7b:9b:e5:dd:fb:ad:51:01: ed:b9:1f:bd:d3:e1:ac:c0:d6:f9:f8:fa:e5:c2:99:67:bf:88: 28:dc:9d:95:59:cc:8a:d4:8e:1d:52:ad:2e:2b:a0:7e:1d:12: 3c:1f:50:0c:8d:64:12:bc:8c:b4:b8:79:24:b8:95:54:c9:98: 9e:00:c7:fd:d8:54:26:fb:be:62:ac:fe:fa:c1:06:fa:a2:f7: 89:0a:6d:1b:00:07:88:57:35:ca:e3:1a:d5:4c:e4:d9:bc:96: 9d:df:16:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmFTL5pQ4uhrnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDk3OGRkZTEtMDE3Yy00ZDNkLThiZGMtNWIwZGNhMzcxNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVKNCfr12+cu6fcorv9AQ4Vtzb6+FuXmrTla WkSBX4Nsx4zDOE3lr1FFDpJD9tSAYHjSKhr6KcENjzy8BpsAGZwLOSU8Pwc/myPx fmyYToQblY/skjDTs7EhE6uaPniZyoOEymRL/Ej76307B3c2RKVeLwehx/u9xPym cYnTZJPlIwr+9T0wYWxUOHYhDtN33IqHyisJy6xugp5mm+sLTRPeWn2lyx0FhKGm V9GHBMMi/56eHdFyxvRCl004KGnIyMmU/FE8TGgDY8BUyXmSZULjkCQtjlL9z4dY nnfDn9tlVRa/liRnfvQi205AlA6PpJ3dgxVkHKRftvTzklO6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPz5xWldIFCewRVKkwcnZDyoNw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODc1ZmI4YmEtY2M5ZC0z ZTgwLWExZDMtYzEwODU0ZGIxNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvgvSHcbDsJQUTgtIBIOdMpe0xsr3Oso+Yxb52SqxVTm6Y8Mhx+RCjk ZxFxqyiUF8W7eErhTFNRMRJccAHVuSyclr6BK86GHWlrKIS4jAsvyskQdlY9iY+T +QRkb7UKodfZjRgIz14YQkvLWpNPUXugxm9PyvPO0224vy5znbsIlZRBJ0QXQwcf bqzIuRJRQbz7uvGYEQP1/vl7m+Xd+61RAe25H73T4azA1vn4+uXCmWe/iCjcnZVZ zIrUjh1SrS4roH4dEjwfUAyNZBK8jLS4eSS4lVTJmJ4Ax/3YVCb7vmKs/vrBBvqi 94kKbRsAB4hXNcrjGtVM5Nm8lp3fFpA= -----END CERTIFICATE-----Generated at Sun May 11 15:12:12 2025 by rpki-client