$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa File: 88e6bfd7-3571-39f4-907b-8e5977091f1f.roa (raw, json) Hash identifier: w1F7lnsbdYMVr+kpHQWBI2di8lYaVWdK3Mw183ITRUg= Subject key identifier: 16:6E:21:C5:6D:C2:43:C4:19:6C:30:5C:C3:F4:D9:13:9C:78:7D:87 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849A4BA4AF4C3507A1858F4F740 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 174 IP address blocks: 216.131.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4a:f4:c3:50:7a:18:58:f4:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f9e65e0e-a823-4612-af64-da82bffe608d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:be:73:71:d8:03:63:ff:a0:14:a8:ed:f0: fe:25:bb:cc:c5:9c:a2:01:8c:aa:22:fc:fe:76:2e: 4f:82:bf:82:99:f6:3f:dd:c1:a0:1f:67:d0:63:fa: 27:f7:e2:dd:9f:f6:12:a2:f1:b1:01:25:a3:c7:a0: e9:da:50:3a:53:ab:a2:35:3b:82:82:c3:77:0b:da: 8c:6e:a2:ec:97:5b:72:6b:60:71:92:bb:77:88:b6: d9:6a:6f:96:f5:17:36:ba:74:17:cc:71:51:c3:e6: b0:c4:98:60:2d:63:5f:cf:95:26:03:8a:22:07:ad: fc:c2:32:b8:d1:85:85:e7:de:71:ea:10:84:41:58: 88:5a:c8:51:19:f3:bb:1d:94:17:d8:4f:48:a1:e7: 10:15:39:53:12:93:c2:ca:ca:96:0f:47:63:dd:7a: c1:d8:81:72:c7:31:39:c6:08:63:aa:8b:57:39:14: 77:20:80:2b:07:76:8a:57:16:d6:96:b7:c1:8c:ab: 81:e4:92:98:0a:0a:78:50:92:02:e2:fd:32:ed:fb: 47:85:5b:87:26:96:ff:2a:a2:8c:c1:f3:07:43:07: 07:cb:71:3e:68:82:7c:4f:7b:01:91:85:58:7f:ac: 24:b4:76:63:dc:96:b4:2c:3c:8e:77:3b:2c:d2:de: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6E:21:C5:6D:C2:43:C4:19:6C:30:5C:C3:F4:D9:13:9C:78:7D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:43:11:6b:36:d9:96:9f:66:c4:d8:29:10:b3:2a:57:2c:29: 57:6d:39:9b:65:8b:01:e7:25:80:c3:fb:dd:a5:1e:7e:f6:a9: c6:f6:c3:0d:28:01:1c:e5:38:c7:46:25:c6:3f:5c:7e:57:4d: 66:b5:a7:dc:2a:e6:40:d2:2b:bd:01:b1:63:90:88:f7:99:eb: 4e:14:25:cc:97:43:d4:bc:2b:18:76:cf:de:67:37:a6:a8:0e: 92:0c:96:c4:fa:2f:e5:fc:c5:49:54:f1:84:5f:ba:0f:23:52: 5e:68:5e:80:09:e0:e2:ed:6f:7b:7b:24:53:17:a6:e5:ac:b1: 17:55:9f:5d:ff:87:e8:64:93:d0:36:d8:f5:a1:e1:16:f5:e2: a2:9a:37:cf:b0:aa:ca:87:6e:fa:a2:66:ad:19:a3:25:13:ce: 08:7e:9e:d6:39:91:36:a0:42:e6:b3:f9:0e:cf:df:c5:eb:fb: 96:57:bd:28:cd:20:9e:c2:95:c2:f9:3d:88:35:85:ea:b0:4d: e0:75:0d:e6:9a:f8:0b:7b:f6:1c:ff:37:d3:88:ee:8b:5a:a3: 56:36:48:c8:d3:a9:f5:51:49:0f:99:0e:ea:30:b9:9a:8e:b2: e8:76:0b:58:2a:78:69:88:cf:f5:10:71:68:c6:24:98:0f:19: 50:83:37:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukr0w1B6GFj090AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjllNjVlMGUtYTgyMy00NjEyLWFmNjQtZGE4MmJmZmU2MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTq+c3HYA2P/oBSo7fD+JbvMxZyiAYyqIvz+ di5Pgr+CmfY/3cGgH2fQY/on9+Ldn/YSovGxASWjx6Dp2lA6U6uiNTuCgsN3C9qM bqLsl1tya2Bxkrt3iLbZam+W9Rc2unQXzHFRw+awxJhgLWNfz5UmA4oiB638wjK4 0YWF595x6hCEQViIWshRGfO7HZQX2E9IoecQFTlTEpPCysqWD0dj3XrB2IFyxzE5 xghjqotXORR3IIArB3aKVxbWlrfBjKuB5JKYCgp4UJIC4v0y7ftHhVuHJpb/KqKM wfMHQwcHy3E+aIJ8T3sBkYVYf6wktHZj3Ja0LDyOdzss0t4flQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZuIcVtwkPEGWwwXMP02ROceH2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODhlNmJmZDctMzU3MS0z OWY0LTkwN2ItOGU1OTc3MDkxZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9DEWs22ZafZsTYKRCzKlcsKVdtOZtliwHnJYDD+92lHn72qcb2ww0o ARzlOMdGJcY/XH5XTWa1p9wq5kDSK70BsWOQiPeZ604UJcyXQ9S8Kxh2z95nN6ao DpIMlsT6L+X8xUlU8YRfug8jUl5oXoAJ4OLtb3t7JFMXpuWssRdVn13/h+hkk9A2 2PWh4Rb14qKaN8+wqsqHbvqiZq0ZoyUTzgh+ntY5kTagQuaz+Q7P38Xr+5ZXvSjN IJ7ClcL5PYg1heqwTeB1Deaa+At79hz/N9OI7otao1Y2SMjTqfVRSQ+ZDuowuZqO suh2C1gqeGmIz/UQcWjGJJgPGVCDN18= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:42 2025 by rpki-client