$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa File: 12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json) Hash identifier: wgRhRz2a7o+qKVerJh0JuDHyY7Yo8Oby9n7mR3qr5bw= Subject key identifier: A1:5C:3D:12:C8:0F:3E:72:BC:AD:1F:D5:82:4A:66:17:57:82:53:35 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A331AE0B70E34452F9F76D7EC Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 22781 IP address blocks: 216.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e0:b7:0e:34:45:2f:9f:76:d7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=83c49f9b-7111-42f8-91f4-f8a6e00b6897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:60:5f:d9:d4:02:73:cb:a1:46:e1:d0:30: e8:88:aa:a6:bd:8c:f9:81:f6:a7:be:40:3e:f5:74: 80:39:2b:68:b2:aa:c2:cc:8e:a3:46:db:98:2d:5a: 2d:2d:f4:23:72:d8:02:17:e5:61:5c:4c:7d:33:b8: 8f:e3:51:4e:4f:fc:c7:51:cd:5b:63:15:ec:37:cf: 00:6b:03:41:d0:88:c0:75:50:a9:d5:2b:7c:09:cc: 33:3d:c6:7f:f1:21:cf:ba:16:77:66:e1:51:f0:5f: 54:3f:28:c3:68:32:42:0f:0d:84:c8:be:05:e0:30: 79:ac:67:26:19:c7:43:57:8f:fb:b8:c7:58:f3:0d: 52:c1:dd:1d:9a:41:4f:fb:fa:b3:fa:14:b7:45:89: ab:fc:54:50:79:9c:99:86:02:9a:64:a3:de:17:3e: 40:36:13:41:01:7c:17:62:1a:4d:45:5f:82:9e:b9: c7:ff:7a:39:69:5d:3e:fc:b3:a0:e7:61:17:31:21: cd:71:36:b0:df:90:c0:f4:91:ad:3c:e0:54:a7:62: b8:89:4a:7f:9a:f5:a5:79:02:37:c9:f3:72:2c:ec: 66:bc:b4:5c:5a:af:10:18:87:3b:8b:b9:d0:67:15: f3:2a:ca:b9:05:b9:66:4c:f6:5d:85:5c:49:00:0c: 50:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5C:3D:12:C8:0F:3E:72:BC:AD:1F:D5:82:4A:66:17:57:82:53:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:84:e6:9a:aa:9f:ed:50:5a:2c:08:95:4c:55:4e:59:13:3f: 3b:87:9c:17:cb:32:a9:53:52:5a:7e:34:8c:76:62:9f:17:2a: ca:82:32:35:e8:36:e5:a3:55:d7:7e:0f:95:fc:35:18:e5:b0: 6d:a9:d4:98:f6:66:c9:7d:9c:80:1a:54:e0:21:2b:95:07:07: eb:83:43:fa:ee:a5:13:17:0d:78:64:d4:2c:b9:41:cd:be:a2: e3:b0:37:ca:94:f5:66:27:bf:e4:78:a0:e6:b3:78:ce:ce:97: d4:77:07:99:5f:7e:8c:eb:48:3c:5d:8d:5f:d2:fd:fb:70:2a: e0:fe:75:22:32:2d:6e:c0:1a:9e:d1:10:3e:e3:6a:41:ba:4a: 51:8f:28:aa:23:b1:e2:cc:fa:4b:47:10:44:6b:e4:8d:87:a3: 1e:d2:d9:44:87:fe:8d:02:d2:e4:0e:ab:e4:3a:37:06:3f:8f: 10:1a:d9:18:47:fb:56:0f:ba:ee:ad:eb:7c:70:e4:58:e8:5c: e3:29:b6:5c:89:e4:08:fa:5a:80:9e:be:6b:e7:c7:ed:1e:23: 56:79:e6:99:23:2a:f5:66:7b:bb:96:89:a6:11:8f:88:37:3a: a7:b5:20:1b:22:76:e2:d5:43:57:f2:4e:15:66:97:88:15:32: 33:1d:cc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuC3DjRFL5921+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ODNjNDlmOWItNzExMS00MmY4LTkxZjQtZjhhNmUwMGI2ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1JgX9nUAnPLoUbh0DDoiKqmvYz5gfanvkA+ 9XSAOStosqrCzI6jRtuYLVotLfQjctgCF+VhXEx9M7iP41FOT/zHUc1bYxXsN88A awNB0IjAdVCp1St8CcwzPcZ/8SHPuhZ3ZuFR8F9UPyjDaDJCDw2EyL4F4DB5rGcm GcdDV4/7uMdY8w1Swd0dmkFP+/qz+hS3RYmr/FRQeZyZhgKaZKPeFz5ANhNBAXwX YhpNRV+CnrnH/3o5aV0+/LOg52EXMSHNcTaw35DA9JGtPOBUp2K4iUp/mvWleQI3 yfNyLOxmvLRcWq8QGIc7i7nQZxXzKsq5BblmTPZdhVxJAAxQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFcPRLIDz5yvK0f1YJKZhdXglM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2E5pqqn+1QWiwIlUxVTlkTPzuHnBfLMqlTUlp+NIx2Yp8XKsqCMjXo NuWjVdd+D5X8NRjlsG2p1Jj2Zsl9nIAaVOAhK5UHB+uDQ/rupRMXDXhk1Cy5Qc2+ ouOwN8qU9WYnv+R4oOazeM7Ol9R3B5lffozrSDxdjV/S/ftwKuD+dSIyLW7AGp7R ED7jakG6SlGPKKojseLM+ktHEERr5I2Hox7S2USH/o0C0uQOq+Q6NwY/jxAa2RhH +1YPuu6t63xw5FjoXOMptlyJ5Aj6WoCevmvnx+0eI1Z55pkjKvVme7uWiaYRj4g3 Oqe1IBsiduLVQ1fyThVml4gVMjMdzD0= -----END CERTIFICATE-----Generated at Wed Jun 18 23:20:24 2025 by rpki-client