$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa File: 4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa (raw, json) Hash identifier: J8bLJr8wZZSlyPOiLJ2Mp9yb55d9JRq5cdN7clF3/FY= Subject key identifier: B5:6C:18:D0:3F:5E:A2:15:FD:AB:FB:A4:71:00:39:DF:C8:9C:57:C5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A2C201ABF567DEA5C8142AE00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 22781 IP address blocks: 108.171.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1a:bf:56:7d:ea:5c:81:42:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=2d454773-04b7-4969-8f12-a1348390b0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:83:9c:3c:40:ab:85:da:89:12:76:66:a8: b4:8c:2b:55:45:95:be:86:d4:00:ae:b8:b0:45:98: f3:0e:17:ad:03:f0:fa:8d:f5:1e:ed:c0:e0:e5:fa: b9:9e:9b:54:90:56:62:ee:38:7b:91:90:03:c1:53: bd:3b:3a:4a:99:44:45:48:f6:24:09:50:28:5c:87: 52:ae:e1:45:7c:32:84:9a:3c:4c:ac:94:07:05:c9: cf:36:ee:de:04:3f:59:e1:62:a2:34:5e:78:ff:58: 4c:12:39:0c:bc:8b:44:93:a2:de:5e:99:39:7e:2c: cd:77:71:6f:db:46:dd:5d:59:f8:fa:d7:c2:27:fe: 55:62:72:d6:3d:fd:73:b7:20:c1:cd:b5:0a:fd:38: 1a:b7:2c:11:d8:1f:4f:97:77:be:f0:cd:9d:da:12: 72:b2:d4:33:43:75:43:d2:26:ad:92:31:d9:ae:7d: cf:14:59:05:ef:f7:f7:9f:63:55:b5:ff:b7:fe:8d: 30:04:be:d1:3e:05:95:96:d1:4b:b2:21:91:d1:17: f4:0a:32:68:65:bd:ca:17:40:2c:44:8b:bc:fa:26: 59:c4:f9:2e:07:00:f8:78:22:fd:67:c9:82:ca:c2: cb:10:48:0c:ff:03:fd:5e:2d:06:e5:c8:44:c1:97: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:18:D0:3F:5E:A2:15:FD:AB:FB:A4:71:00:39:DF:C8:9C:57:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:26:1b:37:24:44:1e:1a:58:1b:21:95:4b:e7:21:75:ff:e3: 16:f2:8e:b3:5a:4c:bd:8f:da:83:73:80:5a:09:1b:4b:6e:a6: e7:11:36:f8:85:7e:ef:da:29:e9:48:13:0d:3b:ea:77:a3:ea: c3:a2:a1:8f:60:0d:ef:67:5d:38:cf:60:0e:07:cd:69:14:db: 35:6e:5a:44:54:82:ae:ea:3a:e6:c0:0a:4f:dd:e9:6c:0d:5a: 2a:50:bb:0d:4a:0c:af:0c:2b:b8:9b:a3:98:57:61:b3:48:ee: 51:34:02:21:8e:9b:0b:9c:3b:d5:d4:20:dc:7e:1a:ec:f3:d3: f4:b6:30:9c:69:49:4e:85:3e:c8:91:ce:05:c4:ec:d7:6c:e9: 98:cf:bc:25:e0:e2:46:66:a0:6a:d0:cc:cd:5d:ae:65:54:7d: cc:5c:68:2b:5a:e9:2c:2d:6e:37:cb:f4:36:f7:35:12:e3:ed: a3:b5:b5:7c:99:7e:8e:61:02:92:c6:bd:2c:f0:45:fe:b7:a2: 98:8a:36:d7:1b:4c:27:a0:72:f5:b3:69:fb:ac:c8:b2:df:97: 4a:1e:44:15:c7:a4:a9:04:c1:18:36:be:79:39:86:34:87:38: d9:9d:65:33:b5:2b:c9:e4:c0:d6:51:7d:05:75:49:da:3d:cd: 06:c6:52:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBq/Vn3qXIFCrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MmQ0NTQ3NzMtMDRiNy00OTY5LThmMTItYTEzNDgzOTBiMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZmDnDxAq4XaiRJ2Zqi0jCtVRZW+htQArriw RZjzDhetA/D6jfUe7cDg5fq5nptUkFZi7jh7kZADwVO9OzpKmURFSPYkCVAoXIdS ruFFfDKEmjxMrJQHBcnPNu7eBD9Z4WKiNF54/1hMEjkMvItEk6LeXpk5fizNd3Fv 20bdXVn4+tfCJ/5VYnLWPf1ztyDBzbUK/TgatywR2B9Pl3e+8M2d2hJystQzQ3VD 0iatkjHZrn3PFFkF7/f3n2NVtf+3/o0wBL7RPgWVltFLsiGR0Rf0CjJoZb3KF0As RIu8+iZZxPkuBwD4eCL9Z8mCysLLEEgM/wP9Xi0G5chEwZdrzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVsGNA/XqIV/av7pHEAOd/InFfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNGM1ZTE4MWEtN2Q4Yi0z NmQ0LWI3N2QtYzIxM2VjMjkwYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUmGzckRB4aWBshlUvnIXX/4xbyjrNaTL2P2oNzgFoJG0tupucRNviF fu/aKelIEw076nej6sOioY9gDe9nXTjPYA4HzWkU2zVuWkRUgq7qOubACk/d6WwN WipQuw1KDK8MK7ibo5hXYbNI7lE0AiGOmwucO9XUINx+Guzz0/S2MJxpSU6FPsiR zgXE7Nds6ZjPvCXg4kZmoGrQzM1drmVUfcxcaCta6SwtbjfL9Db3NRLj7aO1tXyZ fo5hApLGvSzwRf63opiKNtcbTCegcvWzafusyLLfl0oeRBXHpKkEwRg2vnk5hjSH ONmdZTO1K8nkwNZRfQV1Sdo9zQbGUqc= -----END CERTIFICATE-----Generated at Tue Jun 17 11:37:18 2025 by rpki-client