$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa File: 2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa (raw, json) Hash identifier: 4B2Hia8ULgcHoo1MTDBIfY6qqDKZndW+kl6nJdO5m5A= Subject key identifier: 34:F5:B0:B9:F0:31:55:56:A5:E2:E9:F1:8C:F2:7F:7B:8D:A7:7C:FE Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A3050333AAACF90EBFED81200 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 54203 IP address blocks: 216.131.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:33:3a:aa:cf:90:eb:fe:d8:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=5213e57e-b73c-455d-9de1-ac1d065ccfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:a6:a2:fa:33:35:89:d3:f6:5a:b7:d4:7a: 58:e4:7d:af:e2:e4:ff:56:6e:38:41:40:5d:64:07: 9d:5b:d3:53:25:1e:c8:78:cb:e6:e7:65:8d:7a:48: e5:70:8d:ef:8d:36:7b:0c:26:33:74:a3:63:db:7a: 41:91:b3:7c:88:93:27:1b:fc:f1:b9:20:7e:13:c8: a0:da:81:a0:80:db:6b:fd:97:b6:2b:35:c0:04:08: a4:07:ce:29:b1:d8:e8:c1:56:2d:76:72:68:76:d5: 2d:cf:d7:d4:81:87:be:58:af:48:55:49:63:07:e1: 2b:8a:6b:5b:14:95:4a:3c:20:8d:8e:6d:2b:d0:75: ed:10:a7:7b:ec:a8:9e:29:c4:57:ea:45:a9:37:9b: d1:66:2c:f4:7d:78:0a:8d:44:15:27:a4:a1:05:86: f4:b0:48:26:2a:82:93:98:f3:06:a6:84:68:91:1e: 8c:db:2b:ed:7c:91:8d:21:b4:ed:28:05:ea:c6:9c: a1:af:64:60:34:6d:38:d4:2f:f3:12:e1:b8:a8:40: 70:ff:42:98:35:3d:d1:c3:10:f6:29:fc:54:e5:ba: c8:42:4f:95:43:db:1f:1b:f3:81:98:31:a6:7d:d7: c2:49:83:6e:92:08:8f:92:44:05:71:0b:cf:5f:4a: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:B0:B9:F0:31:55:56:A5:E2:E9:F1:8C:F2:7F:7B:8D:A7:7C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5c:e3:20:d7:44:94:88:a7:17:97:a6:bc:6e:05:8a:1f:be: 13:3f:53:04:73:82:95:c7:c5:1c:30:92:dc:5a:e0:05:46:48: 58:80:a9:a2:25:fd:93:46:27:32:f3:1d:a8:f0:8b:98:4e:1a: a3:88:71:6d:23:e0:3e:14:a6:a6:04:3e:79:4a:d6:a7:c2:db: 58:ea:82:89:f4:e7:41:57:65:62:7a:b2:f5:d0:1c:48:98:6c: 8d:39:e6:d8:a3:4a:fa:f0:d4:ca:cf:a9:5b:9c:66:7c:32:4c: 5b:ca:53:85:95:6f:34:0c:04:7f:67:3f:91:4e:da:4d:e5:66: aa:ef:cd:1b:eb:e3:d5:49:ec:08:83:c0:92:ad:c2:1f:2b:f1: 98:61:54:08:25:01:70:0b:62:ed:e9:59:e3:5a:ae:87:bb:57: 60:a0:8e:90:d9:17:b1:53:b7:14:d8:05:1d:dd:63:29:05:ab: 6f:f1:c3:76:e6:e8:a0:44:c2:1f:cf:96:a2:12:37:f2:89:53: ac:2e:05:7d:da:57:8a:d5:de:10:e6:b7:f9:57:55:0e:02:ff: 9d:2f:1f:db:c8:c2:43:67:f0:13:5c:3f:0c:c3:ec:6d:75:5f: fb:08:c2:1e:fd:e0:ab:c0:34:21:d9:fe:6b:aa:46:8d:34:8c: c0:35:00:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDM6qs+Q6/7YEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTIxM2U1N2UtYjczYy00NTVkLTlkZTEtYWMxZDA2NWNjZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IemovozNYnT9lq31HpY5H2v4uT/Vm44QUBd ZAedW9NTJR7IeMvm52WNekjlcI3vjTZ7DCYzdKNj23pBkbN8iJMnG/zxuSB+E8ig 2oGggNtr/Ze2KzXABAikB84psdjowVYtdnJodtUtz9fUgYe+WK9IVUljB+Erimtb FJVKPCCNjm0r0HXtEKd77KieKcRX6kWpN5vRZiz0fXgKjUQVJ6ShBYb0sEgmKoKT mPMGpoRokR6M2yvtfJGNIbTtKAXqxpyhr2RgNG041C/zEuG4qEBw/0KYNT3RwxD2 KfxU5brIQk+VQ9sfG/OBmDGmfdfCSYNukgiPkkQFcQvPX0rKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT1sLnwMVVWpeLp8Yzyf3uNp3z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjM1NWZhMjEtNzViYi0z MjM3LWI0YTAtYzYzZGEzYzMxYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZc4yDXRJSIpxeXprxuBYofvhM/UwRzgpXHxRwwktxa4AVGSFiAqaIl /ZNGJzLzHajwi5hOGqOIcW0j4D4UpqYEPnlK1qfC21jqgon050FXZWJ6svXQHEiY bI055tijSvrw1MrPqVucZnwyTFvKU4WVbzQMBH9nP5FO2k3lZqrvzRvr49VJ7AiD wJKtwh8r8ZhhVAglAXALYu3pWeNaroe7V2CgjpDZF7FTtxTYBR3dYykFq2/xw3bm 6KBEwh/PlqISN/KJU6wuBX3aV4rV3hDmt/lXVQ4C/50vH9vIwkNn8BNcPwzD7G11 X/sIwh794KvANCHZ/muqRo00jMA1AOs= -----END CERTIFICATE-----Generated at Tue Jun 17 15:03:39 2025 by rpki-client