$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa File: c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa (raw, json) Hash identifier: m5z5NwmGEFF2uOLhHm++m0wE+jnbz09MfJ6PXDIRIVg= Subject key identifier: 67:82:AC:71:40:17:0C:3E:6F:B3:D2:33:52:EC:CB:DB:93:A6:EA:EA Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A2C201ACE8391DD7BBD810540 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 22781 IP address blocks: 108.171.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1a:ce:83:91:dd:7b:bd:81:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=b31212b0-af6b-4c94-8591-4b32f4681491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:44:7c:bb:e0:eb:27:ef:64:a4:fb:30:c2: ee:af:be:12:3b:bb:6e:3a:c8:07:4c:2e:9f:75:1f: 5b:d8:a3:dc:05:36:27:30:c6:e0:54:18:70:1b:79: ee:ba:1d:02:a8:4c:fd:2b:7e:81:3c:b1:ab:ab:d9: ab:4c:2b:85:3b:d5:57:e2:34:49:a2:f7:ec:4c:78: 9c:af:81:0f:f0:f2:bc:9a:fb:c8:62:5d:38:db:02: 50:80:83:44:51:06:00:5e:56:0b:b2:9a:99:90:a4: fa:7b:7d:27:84:90:32:b3:80:80:84:21:7d:68:8d: 80:a5:3a:26:e5:a4:70:5c:1c:66:4e:9e:8b:8f:ea: df:6b:2b:a3:58:e1:0f:70:79:01:c2:81:12:18:38: ee:85:d1:02:8a:fc:c4:c4:94:66:08:e5:49:05:e0: 15:14:f4:a0:49:d6:80:b1:5d:35:8f:dd:1b:88:7c: 6d:37:b8:3a:ce:f6:3e:fa:80:01:31:e5:b9:27:cb: f7:11:c1:ae:02:a4:3c:58:9a:71:f3:75:04:8f:39: 24:87:84:cd:28:3b:96:f1:7b:27:4f:3b:17:95:cc: e1:bd:7a:d8:5a:10:a2:ac:59:a2:42:17:1b:a3:82: 4f:45:0e:ee:b1:31:8f:c5:06:57:84:8b:84:73:dc: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:82:AC:71:40:17:0C:3E:6F:B3:D2:33:52:EC:CB:DB:93:A6:EA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2d:aa:47:97:55:9a:65:67:cb:c7:a7:5f:53:7b:c0:b4:5e: 6b:c1:1b:a8:df:1f:8d:a5:b8:80:4a:37:3f:0e:80:43:65:2f: 00:d0:24:e0:78:17:8d:ac:f3:9c:f0:0c:57:dc:54:60:c7:03: 4f:79:7a:a6:51:0b:99:2e:64:7d:ed:ff:10:b2:28:f0:2c:e5: d9:7c:a3:7e:2a:f9:0e:22:dd:f1:0c:34:7d:ec:91:dc:d3:4c: 68:b1:69:05:57:f7:04:4b:4e:c9:64:66:c0:fe:a2:ec:5c:15: f9:ff:5e:8b:fa:d7:f4:0d:f1:01:52:bc:d0:eb:86:1f:1c:b3: 63:2f:af:93:81:2d:e3:d1:ff:d7:5c:2c:8b:08:8b:c5:33:74: 45:48:84:4e:45:02:5a:2a:f5:13:0e:0a:5b:da:58:f1:9d:d0: 80:9f:15:9a:d0:b4:bb:45:aa:b6:13:36:4b:d7:a3:51:38:61: 33:09:d9:04:a9:7a:41:c7:30:39:0a:65:cd:45:5b:57:e3:6b: a1:38:83:55:31:68:11:76:c5:ec:a3:60:02:81:c2:f1:79:90: 43:25:90:eb:a3:a7:fd:43:13:3b:8c:80:f7:e1:0a:18:22:e0: b9:fd:14:9d:c0:c9:8d:dc:1b:ad:8a:3e:c5:65:f8:da:d5:83: 35:f6:8f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBrOg5Hde72BBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YjMxMjEyYjAtYWY2Yi00Yzk0LTg1OTEtNGIzMmY0NjgxNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKBEfLvg6yfvZKT7MMLur74SO7tuOsgHTC6f dR9b2KPcBTYnMMbgVBhwG3nuuh0CqEz9K36BPLGrq9mrTCuFO9VX4jRJovfsTHic r4EP8PK8mvvIYl042wJQgINEUQYAXlYLspqZkKT6e30nhJAys4CAhCF9aI2ApTom 5aRwXBxmTp6Lj+rfayujWOEPcHkBwoESGDjuhdECivzExJRmCOVJBeAVFPSgSdaA sV01j90biHxtN7g6zvY++oABMeW5J8v3EcGuAqQ8WJpx83UEjzkkh4TNKDuW8Xsn TzsXlczhvXrYWhCirFmiQhcbo4JPRQ7usTGPxQZXhIuEc9xAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeCrHFAFww+b7PSM1Lsy9uTpurqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzc0MzhmMDktMzJhNC0z MDk3LWI5YjQtZmEwN2FjN2EyMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAstqkeXVZplZ8vHp19Te8C0XmvBG6jfH42luIBKNz8OgENlLwDQJOB4 F42s85zwDFfcVGDHA095eqZRC5kuZH3t/xCyKPAs5dl8o34q+Q4i3fEMNH3skdzT TGixaQVX9wRLTslkZsD+ouxcFfn/Xov61/QN8QFSvNDrhh8cs2Mvr5OBLePR/9dc LIsIi8UzdEVIhE5FAloq9RMOClvaWPGd0ICfFZrQtLtFqrYTNkvXo1E4YTMJ2QSp ekHHMDkKZc1FW1fja6E4g1UxaBF2xeyjYAKBwvF5kEMlkOujp/1DEzuMgPfhChgi 4Ln9FJ3AyY3cG62KPsVl+NrVgzX2j5A= -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:30 2025 by rpki-client