$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa File: 364b006a-dadb-395d-bc34-448cd3148010.roa (raw, json) Hash identifier: Jzy1hvIAN6AMDO+zY54hW3inhR67v/+0raw5hBzMamc= Subject key identifier: EB:4E:AC:51:68:60:D9:A4:A7:B3:77:E5:1E:4C:C8:11:2E:60:D9:AD Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374AC5D49FB542016DAB6200 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 62651 IP address blocks: 216.131.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c5:d4:9f:b5:42:01:6d:ab:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a3f12e83-69fc-4f80-9ad4-69dff8a370d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:ef:3e:ef:f3:e2:12:57:c8:27:b6:03:3c: d6:8b:1b:a4:46:41:ad:99:0e:d0:01:ce:7e:ba:4e: 0b:bf:41:a5:ce:31:ab:b5:35:bc:ce:8e:67:48:36: 49:dd:31:75:11:e3:10:17:62:23:f5:a8:e6:30:21: c2:8c:6c:03:36:c1:4a:14:30:74:d6:a0:14:f0:5e: aa:a4:eb:1e:97:55:ce:00:96:bd:1d:f0:c9:38:4d: 87:c5:ae:fd:ab:b7:31:2c:8d:54:dd:1d:9e:4b:0b: 84:c8:b9:86:88:cb:07:1b:b9:bc:17:e9:81:80:ca: 0b:63:c0:3d:66:2b:47:ad:40:71:a5:d0:48:14:90: 6f:26:81:e1:8d:13:3f:c4:37:9c:17:2a:5a:9d:b1: e2:a9:6e:c0:8b:f8:91:1b:21:f2:46:fc:2c:4c:60: 9a:86:8f:40:62:c9:db:f4:1b:6e:76:51:33:f4:e6: bc:62:04:eb:90:67:69:26:d6:a2:9a:d3:b2:26:3e: 90:ea:a5:77:70:7c:cd:31:23:72:88:cd:71:09:a3: 7a:46:39:b6:74:6e:97:fb:a5:b4:c2:4f:d5:76:90: cd:95:eb:5f:4f:e8:21:b8:cc:fe:c2:41:f0:6f:63: 40:58:24:09:cf:a0:03:c7:e3:2f:b2:de:55:fe:7d: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4E:AC:51:68:60:D9:A4:A7:B3:77:E5:1E:4C:C8:11:2E:60:D9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:95:81:ea:de:de:f4:cc:a5:0f:0f:18:3d:39:f9:4a:55:58: 61:7f:36:7c:7f:68:df:14:15:e4:dc:7e:ab:67:41:85:81:79: b0:9b:4c:cc:b0:25:c6:7b:1a:88:ec:1f:bb:32:81:72:a8:2d: ed:29:b2:c3:22:2a:42:ce:21:70:29:98:61:c7:73:e1:e7:07: db:c4:94:cb:44:e9:56:35:09:4a:24:d8:60:d8:35:1e:e8:99: 5b:3e:a7:b7:69:fe:08:14:57:98:5c:c4:9b:c9:9f:0a:08:3f: 35:64:01:09:f8:3c:6e:54:2a:55:11:77:b8:64:08:dc:bd:af: fc:70:06:66:ed:e4:c7:ab:6f:cf:81:e9:d1:ed:98:d3:db:ba: 72:26:2e:dc:71:bb:9b:d7:43:ec:74:14:9a:5d:d0:18:a5:e4: 92:ca:85:4d:1e:d5:a2:d2:20:76:e7:45:c5:73:74:24:fb:24: 70:1d:21:28:4d:e2:4e:1a:62:c5:60:f1:fc:ee:c1:ab:6b:dc: c5:1b:18:a8:43:c7:31:fa:5d:bb:aa:f0:60:83:00:dc:77:27: 00:0a:9a:d5:03:e5:83:ee:99:83:f6:88:73:22:9b:8f:64:e0: ed:86:e6:a4:a6:6d:57:e3:c0:fc:c4:98:21:ef:a4:19:eb:97: ab:36:b9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsXUn7VCAW2rYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTNmMTJlODMtNjlmYy00ZjgwLTlhZDQtNjlkZmY4YTM3MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB3vPu/z4hJXyCe2AzzWixukRkGtmQ7QAc5+ uk4Lv0GlzjGrtTW8zo5nSDZJ3TF1EeMQF2Ij9ajmMCHCjGwDNsFKFDB01qAU8F6q pOsel1XOAJa9HfDJOE2Hxa79q7cxLI1U3R2eSwuEyLmGiMsHG7m8F+mBgMoLY8A9 ZitHrUBxpdBIFJBvJoHhjRM/xDecFypanbHiqW7Ai/iRGyHyRvwsTGCaho9AYsnb 9BtudlEz9Oa8YgTrkGdpJtaimtOyJj6Q6qV3cHzNMSNyiM1xCaN6Rjm2dG6X+6W0 wk/VdpDNletfT+ghuMz+wkHwb2NAWCQJz6ADx+Mvst5V/n3IxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtOrFFoYNmkp7N35R5MyBEuYNmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzY0YjAwNmEtZGFkYi0z OTVkLWJjMzQtNDQ4Y2QzMTQ4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaVgere3vTMpQ8PGD05+UpVWGF/Nnx/aN8UFeTcfqtnQYWBebCbTMyw JcZ7GojsH7sygXKoLe0pssMiKkLOIXApmGHHc+HnB9vElMtE6VY1CUok2GDYNR7o mVs+p7dp/ggUV5hcxJvJnwoIPzVkAQn4PG5UKlURd7hkCNy9r/xwBmbt5Merb8+B 6dHtmNPbunImLtxxu5vXQ+x0FJpd0Bil5JLKhU0e1aLSIHbnRcVzdCT7JHAdIShN 4k4aYsVg8fzuwatr3MUbGKhDxzH6Xbuq8GCDANx3JwAKmtUD5YPumYP2iHMim49k 4O2G5qSmbVfjwPzEmCHvpBnrl6s2uV8= -----END CERTIFICATE-----Generated at Thu Jun 19 05:19:50 2025 by rpki-client