$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa File: 0426ee1e-c925-39bb-b48e-4ca686717e3d.roa (raw, json) Hash identifier: awuhbSYIUUS2WdOS9F16zTmc2rLXd6iT4eoeQIpxxYs= Subject key identifier: DD:12:CD:65:C0:46:E1:10:39:FC:2E:16:64:AF:61:4C:FE:DE:7D:BA Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806CC657F15022966F92880 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.131.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cc:65:7f:15:02:29:66:f9:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=3032740f-8921-40e2-b4fa-ad83fd7577cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:91:c0:52:67:f6:47:7e:cd:cf:2d:9a:1c: 7f:74:ba:7b:4c:52:89:b4:7e:19:fa:7e:7e:e5:97: 63:79:68:8a:3a:df:e2:2f:ff:f9:00:3d:e9:c6:cd: 9a:d4:76:75:00:26:b3:79:f2:1c:ba:1e:dc:db:47: 28:b7:69:4b:d7:0b:66:b7:44:25:ba:db:f8:0d:7c: 0d:ee:ad:aa:b4:0e:84:6b:33:d3:94:20:26:db:22: c8:87:c9:81:13:00:9a:19:c9:72:f5:f6:29:fe:a0: fb:ee:81:23:d8:8a:3c:8a:18:7f:ca:99:58:44:37: 55:c0:79:c0:86:6f:e3:f0:74:98:67:91:ef:b5:15: 6c:ef:8a:88:f3:bd:c5:67:51:3b:63:72:ab:15:4a: 20:a7:5b:6c:76:1e:c0:e2:5c:4d:df:65:81:72:c4: d5:17:9c:19:e9:61:f1:5d:61:16:da:57:f3:e3:e8: d2:bb:60:49:d8:fb:aa:e2:c2:e3:27:3f:14:ff:7e: 5f:57:5e:1c:ed:a7:4b:82:e6:90:a5:17:d6:18:8d: 27:87:6f:e5:94:43:99:9b:0c:0b:c8:33:b7:b9:f5: f6:4d:2e:2c:65:76:c0:a6:b7:8d:3e:75:90:e4:98: 48:8a:7c:c4:00:24:12:a5:5d:0b:5c:4e:d2:c5:c2: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:12:CD:65:C0:46:E1:10:39:FC:2E:16:64:AF:61:4C:FE:DE:7D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:66:2b:52:d8:cc:b5:be:58:73:3b:58:05:ec:19:a5:84:69: c8:68:33:a7:23:a2:9c:6f:8a:1a:86:06:30:0a:91:f9:aa:e9: 84:3a:e0:e9:1b:32:e1:52:49:dc:0d:10:cc:1c:47:6c:cf:c9: 78:5e:c1:71:a6:43:a6:ba:95:05:0c:78:48:c5:8d:59:f2:ba: 4c:3a:15:0b:cd:ca:84:c7:01:eb:77:44:5f:44:75:4e:6d:78: 06:90:44:d6:a6:78:9d:46:16:39:c5:c1:29:63:8c:56:54:64: ab:33:f2:97:3a:20:fc:6c:e2:85:0f:c3:2c:15:1f:99:7d:b1: d2:b8:67:eb:bc:02:b1:af:08:b7:b1:2d:26:83:a7:81:87:3a: 6a:68:2f:5e:14:e8:4f:a2:5a:6e:7f:5c:63:63:4f:61:3b:aa: 6f:39:bb:d3:f0:b0:a1:03:c8:a7:e8:89:ae:56:d6:b7:dd:39: b0:b1:fc:35:97:e1:57:ee:8a:46:02:f2:f8:53:4c:4c:4d:36: 97:8f:b9:60:e3:4a:43:27:a1:8d:aa:44:3d:c4:8a:63:e9:bd: 06:f6:76:73:15:fa:a3:5c:0d:6d:dd:f0:d8:e1:97:45:fa:80: bc:ca:2c:4a:b0:ed:b9:c1:b3:dc:d7:f3:54:d1:03:ed:96:f8: a0:9d:f3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsxlfxUCKWb5KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzAzMjc0MGYtODkyMS00MGUyLWI0ZmEtYWQ4M2ZkNzU3N2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyRwFJn9kd+zc8tmhx/dLp7TFKJtH4Z+n5+ 5ZdjeWiKOt/iL//5AD3pxs2a1HZ1ACazefIcuh7c20cot2lL1wtmt0Qlutv4DXwN 7q2qtA6EazPTlCAm2yLIh8mBEwCaGcly9fYp/qD77oEj2Io8ihh/yplYRDdVwHnA hm/j8HSYZ5HvtRVs74qI873FZ1E7Y3KrFUogp1tsdh7A4lxN32WBcsTVF5wZ6WHx XWEW2lfz4+jSu2BJ2Puq4sLjJz8U/35fV14c7adLguaQpRfWGI0nh2/llEOZmwwL yDO3ufX2TS4sZXbApreNPnWQ5JhIinzEACQSpV0LXE7SxcJqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0SzWXARuEQOfwuFmSvYUz+3n26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDQyNmVlMWUtYzkyNS0z OWJiLWI0OGUtNGNhNjg2NzE3ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJmK1LYzLW+WHM7WAXsGaWEachoM6cjopxvihqGBjAKkfmq6YQ64Okb MuFSSdwNEMwcR2zPyXhewXGmQ6a6lQUMeEjFjVnyukw6FQvNyoTHAet3RF9EdU5t eAaQRNameJ1GFjnFwSljjFZUZKsz8pc6IPxs4oUPwywVH5l9sdK4Z+u8ArGvCLex LSaDp4GHOmpoL14U6E+iWm5/XGNjT2E7qm85u9PwsKEDyKfoia5W1rfdObCx/DWX 4VfuikYC8vhTTExNNpePuWDjSkMnoY2qRD3EimPpvQb2dnMV+qNcDW3d8Njhl0X6 gLzKLEqw7bnBs9zX81TRA+2W+KCd8yM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:40 2025 by rpki-client