$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa File: 40f3801f-2fad-3546-9954-90e36fe46778.roa (raw, json) Hash identifier: k2JTzFzv1BEV00LWnddwG4yRN+fP1UqBjmsdttuObMs= Subject key identifier: CB:5F:FB:A8:EF:B4:30:0D:3D:01:0C:BE:11:03:C6:2B:80:A5:41:BD Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A225AC0E0D20B6CE0AC48B8A0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 22781 IP address blocks: 108.171.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c0:e0:d2:0b:6c:e0:ac:48:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=c95882f7-8f3b-40bf-a2ad-3a4c7858ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:d9:68:30:4a:98:fb:58:a7:cf:98:2e:69: f9:48:b3:93:fb:b3:d7:a7:9f:9f:b1:7f:20:3f:5a: d7:16:1b:2a:eb:f6:09:69:a9:89:b0:a9:00:f6:ac: 81:30:2a:c4:2d:a0:04:19:4d:34:11:1f:47:3f:eb: 5f:5d:7f:fc:6f:c1:8c:d6:3a:61:df:c1:ab:49:a8: f9:c3:74:9a:20:e8:f3:0a:91:d0:a2:f2:7d:9c:92: 23:a6:41:99:c4:fb:a6:6c:b1:bb:02:5e:e3:09:98: 96:30:1e:6a:86:36:6d:1c:4e:6a:e6:6a:63:a0:c0: f4:49:3c:0c:1a:55:73:29:7c:00:75:af:31:8c:36: d6:6a:b1:c7:1c:35:e3:6a:0e:b0:2a:de:e8:ad:7d: 27:91:54:29:ad:b0:96:d8:6a:48:2a:c2:b8:bd:2b: ee:c7:9f:3b:d1:2e:dd:73:2a:17:46:a6:19:df:58: c6:c0:aa:cb:9f:cf:45:d0:30:57:4f:85:18:24:20: 4e:81:8d:02:62:fa:b7:27:58:99:73:06:07:ee:f2: e1:37:66:ab:af:40:88:67:8a:ee:24:5c:ce:88:a8: 1e:d0:c9:11:b3:19:48:5f:f7:b0:96:ab:a2:8c:f7: 38:f5:a8:ca:4a:4b:84:c7:fa:a0:a3:c0:25:54:4f: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:FB:A8:EF:B4:30:0D:3D:01:0C:BE:11:03:C6:2B:80:A5:41:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f9:7d:7f:61:19:6c:2e:06:3b:bb:ad:0f:3c:c5:d2:f8:45: 51:5d:2e:07:a5:d6:df:55:f9:da:c9:ff:3c:07:29:a3:69:a0: c9:fa:85:7d:78:78:7f:b2:86:7b:43:4d:d9:c2:79:49:5f:19: c3:84:0f:62:f7:09:4b:4c:85:36:8d:e0:0d:2e:65:32:37:4e: a1:c2:fc:f2:62:3b:b6:61:f5:cb:69:ad:ae:95:bb:60:d7:7c: 48:ce:bb:11:59:d6:0f:1e:76:40:5c:64:64:d1:4a:ef:0d:fa: 9c:2c:64:24:66:5a:71:00:23:aa:ae:5e:e1:c2:0d:17:96:52: 85:9e:39:4d:df:29:06:fe:1b:1d:60:e3:a8:2b:34:26:f9:0c: 59:68:b2:e4:93:95:58:4b:95:53:79:a0:22:78:56:3a:f8:9e: 1e:14:00:24:34:56:46:c1:30:7b:58:85:f1:c1:b3:36:28:bf: dd:bf:3a:d9:2c:8b:44:66:ce:ba:81:6c:65:8b:89:d2:4b:1f: 41:8d:bb:f2:3c:d6:5c:0f:24:c4:99:04:58:12:c5:c4:fe:22: f8:52:10:02:4f:12:ab:1d:db:1b:fc:2f:25:e1:a4:ef:51:e9: 38:ae:99:10:76:8b:e0:02:0b:b7:d2:a8:f2:57:fe:da:91:81: e9:fa:88:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsDg0gts4KxIuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk Yzk1ODgyZjctOGYzYi00MGJmLWEyYWQtM2E0Yzc4NThiYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvojZaDBKmPtYp8+YLmn5SLOT+7PXp5+fsX8g P1rXFhsq6/YJaamJsKkA9qyBMCrELaAEGU00ER9HP+tfXX/8b8GM1jph38GrSaj5 w3SaIOjzCpHQovJ9nJIjpkGZxPumbLG7Al7jCZiWMB5qhjZtHE5q5mpjoMD0STwM GlVzKXwAda8xjDbWarHHHDXjag6wKt7orX0nkVQprbCW2GpIKsK4vSvux5870S7d cyoXRqYZ31jGwKrLn89F0DBXT4UYJCBOgY0CYvq3J1iZcwYH7vLhN2arr0CIZ4ru JFzOiKge0MkRsxlIX/ewlquijPc49ajKSkuEx/qgo8AlVE8+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtf+6jvtDANPQEMvhEDxiuApUG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDBmMzgwMWYtMmZhZC0z NTQ2LTk5NTQtOTBlMzZmZTQ2Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF35fX9hGWwuBju7rQ88xdL4RVFdLgel1t9V+drJ/zwHKaNpoMn6hX14 eH+yhntDTdnCeUlfGcOED2L3CUtMhTaN4A0uZTI3TqHC/PJiO7Zh9ctpra6Vu2DX fEjOuxFZ1g8edkBcZGTRSu8N+pwsZCRmWnEAI6quXuHCDReWUoWeOU3fKQb+Gx1g 46grNCb5DFlosuSTlVhLlVN5oCJ4Vjr4nh4UACQ0VkbBMHtYhfHBszYov92/Otks i0RmzrqBbGWLidJLH0GNu/I81lwPJMSZBFgSxcT+IvhSEAJPEqsd2xv8LyXhpO9R 6TiumRB2i+ACC7fSqPJX/tqRgen6iMs= -----END CERTIFICATE-----Generated at Fri Jun 20 14:28:38 2025 by rpki-client