$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa File: 88e6bfd7-3571-39f4-907b-8e5977091f1f.roa (raw, json) Hash identifier: 9v6B5PEwRUBbm0tZS2YgFMfdeFpT8/XZ8wSxUIi94w8= Subject key identifier: 79:11:60:B4:3F:53:E9:B7:67:7F:CB:2E:52:21:AC:B8:39:D7:20:D2 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A8410DC807410ABF820E03400 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 174 IP address blocks: 216.131.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:dc:80:74:10:ab:f8:20:e0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=49a56bd4-ae45-461e-a28e-28a4ffb91065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:af:95:28:53:30:76:b0:b8:31:03:27:60: 0c:d4:6e:eb:08:c9:92:f6:a4:ac:30:78:78:54:ea: 35:26:52:18:d8:6c:21:72:e3:88:bd:93:9e:6b:31: 30:22:fe:90:9f:47:89:a5:ea:17:fe:a4:3e:5c:9e: 48:c0:6d:cb:6b:3d:81:1e:bd:58:c1:8d:52:18:46: 29:d3:04:f2:b7:7a:0c:2f:f1:27:01:86:af:9e:17: fe:7e:6a:b4:c4:8d:67:bf:4b:b3:5c:73:9e:d1:cb: 90:1b:b2:c4:2a:53:64:ea:b0:88:6c:fd:bb:b3:e1: 70:82:d2:17:99:3c:4a:32:85:e6:77:67:2a:a2:81: 13:52:2b:c5:0a:e9:2b:f0:91:52:d6:f7:85:c3:34: 21:c0:74:dd:b0:0f:c8:cb:42:2e:f9:5e:79:d6:59: 0d:eb:3e:98:28:25:eb:f2:a4:1e:37:ce:c8:87:96: 6c:62:f4:ae:bf:25:f8:be:be:dc:3a:02:38:a8:d5: 8d:5d:7f:bb:d6:2f:85:25:28:b8:9b:82:93:c7:59: 5a:6a:78:dc:94:b2:f0:c5:4a:14:88:9c:82:75:bd: b6:a1:5b:87:19:e0:37:62:49:83:84:bb:f4:af:45: 45:13:e9:10:15:02:43:57:5b:38:7f:32:88:eb:50: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:60:B4:3F:53:E9:B7:67:7F:CB:2E:52:21:AC:B8:39:D7:20:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0b:0e:2a:5a:74:e0:cf:5c:ce:7e:1e:43:e7:74:9a:28:36: 06:c9:eb:af:51:ae:4a:e2:5f:2e:ec:06:a3:55:65:85:7a:80: 65:ac:34:6b:e5:48:a8:be:5a:bf:a0:aa:59:50:6a:f8:3a:8d: 66:7d:2f:16:2a:78:a3:01:29:08:13:e7:6f:1d:24:17:dd:c6: 66:2c:40:59:20:4f:22:73:7e:ba:3e:02:25:89:43:58:73:eb: df:88:56:5d:bc:35:df:2b:54:97:4e:47:63:e9:20:16:e5:84: a3:16:b2:91:92:d1:ff:a0:e1:4f:96:e7:ae:a3:2e:69:bf:a7: ea:33:f5:00:7d:47:aa:fc:c4:55:4b:00:dd:22:8c:c9:de:31: 25:ef:4d:cb:4e:f3:a2:01:d1:b7:a6:5c:35:6e:aa:3d:13:87: f7:d8:55:0d:f9:18:71:88:80:49:0f:4d:3d:4b:bb:c3:68:7c: 03:ce:6b:62:d4:d4:62:e2:49:8a:2d:1e:cb:88:4f:86:ba:b5: 7e:54:9e:cd:64:b9:12:a8:37:2c:0d:3a:6a:33:de:d9:f5:40: 8f:b6:e0:f3:02:f5:b6:e5:df:30:7a:b9:f0:41:6e:de:b8:16: 52:bc:55:5a:e1:c7:22:0f:6f:2a:24:93:90:17:47:fa:18:ad: 5c:85:32:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENyAdBCr+CDgNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDlhNTZiZDQtYWU0NS00NjFlLWEyOGUtMjhhNGZmYjkxMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLWvlShTMHawuDEDJ2AM1G7rCMmS9qSsMHh4 VOo1JlIY2GwhcuOIvZOeazEwIv6Qn0eJpeoX/qQ+XJ5IwG3Laz2BHr1YwY1SGEYp 0wTyt3oML/EnAYavnhf+fmq0xI1nv0uzXHOe0cuQG7LEKlNk6rCIbP27s+FwgtIX mTxKMoXmd2cqooETUivFCukr8JFS1veFwzQhwHTdsA/Iy0Iu+V551lkN6z6YKCXr 8qQeN87Ih5ZsYvSuvyX4vr7cOgI4qNWNXX+71i+FJSi4m4KTx1laanjclLLwxUoU iJyCdb22oVuHGeA3YkmDhLv0r0VFE+kQFQJDV1s4fzKI61C7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkRYLQ/U+m3Z3/LLlIhrLg51yDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODhlNmJmZDctMzU3MS0z OWY0LTkwN2ItOGU1OTc3MDkxZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4LDipadODPXM5+HkPndJooNgbJ669RrkriXy7sBqNVZYV6gGWsNGvl SKi+Wr+gqllQavg6jWZ9LxYqeKMBKQgT528dJBfdxmYsQFkgTyJzfro+AiWJQ1hz 69+IVl28Nd8rVJdOR2PpIBblhKMWspGS0f+g4U+W566jLmm/p+oz9QB9R6r8xFVL AN0ijMneMSXvTctO86IB0bemXDVuqj0Th/fYVQ35GHGIgEkPTT1Lu8NofAPOa2LU 1GLiSYotHsuIT4a6tX5Uns1kuRKoNywNOmoz3tn1QI+24PMC9bbl3zB6ufBBbt64 FlK8VVrhxyIPbyokk5AXR/oYrVyFMo0= -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:28 2025 by rpki-client