$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: fpAjSSus6VWiNEleNbBJE/bWDmnmiJFSOtjOQ28iaRg= Subject key identifier: FD:44:FB:84:AF:F9:FB:8A:83:BB:26:0C:BA:9A:6E:E0:9D:68:BE:74 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584AF521565D1F61B6FD47223D00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:56:5d:1f:61:b6:fd:47:22:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ba0632fd-6def-4077-8ef6-48a2d7d26be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:e0:32:f2:46:02:e8:ac:1c:a2:4d:dd:ce: 5f:21:95:f3:ac:89:ad:5e:a7:41:f2:c4:4f:14:b7: 82:2c:d1:cd:a6:fa:81:ce:61:cb:de:b9:8c:d5:56: 1b:c1:b9:0d:92:a4:93:54:dd:bd:42:d8:cd:cb:c3: 46:5e:4b:df:3a:c5:29:61:77:f7:d1:b2:a7:19:8b: c2:b2:bc:c8:92:68:43:f6:31:e0:22:f1:cd:42:ac: 36:ae:d5:40:70:19:d5:6a:87:00:69:f0:4d:ae:74: fa:0b:85:1e:24:d3:98:a4:c2:ee:47:ff:b0:de:c6: 6b:ca:d3:a7:46:fd:f1:7f:a5:3d:2c:51:01:71:a7: ca:02:3a:64:ca:b1:77:55:43:9e:65:c4:76:d9:fa: c0:b5:73:f8:37:9c:3c:28:68:d3:05:be:92:35:2c: 19:30:2d:3c:12:be:e6:64:90:82:06:38:3c:54:b5: 31:a1:2f:7f:54:10:70:6e:cb:62:53:1a:af:18:75: 76:3c:5c:ca:54:85:98:5a:a8:b9:64:4d:eb:34:2e: 53:17:bd:e8:7f:96:10:fb:ad:d9:20:a9:85:b3:74: db:97:6b:44:c5:33:8b:6d:04:1c:bc:81:7c:c9:53: 13:e4:01:d3:ef:45:8e:c2:ac:67:89:ab:e6:c2:f7: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:FB:84:AF:F9:FB:8A:83:BB:26:0C:BA:9A:6E:E0:9D:68:BE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:89:2a:ab:23:1f:58:e7:ca:36:b3:e2:77:a3:dd:42:49:b7: 30:74:9b:64:fe:0a:9b:ce:0e:cd:2c:f7:e7:e5:b7:7d:51:73: a6:9e:7b:70:34:9a:67:53:8b:f8:f9:0b:2a:2d:be:f3:db:fd: df:e0:a6:53:b9:12:6a:25:c8:cd:da:a6:5e:c2:53:c1:63:53: 44:c7:7f:c0:ce:13:2c:bc:8c:66:9a:dc:a9:3c:99:5f:dd:a9: 4a:a0:5d:63:ff:00:93:dd:33:b0:0b:d4:7e:58:b1:19:c8:64: 18:d8:93:28:d8:7f:87:f7:2c:00:2d:38:62:1c:6a:b6:5a:5e: 72:ec:91:ea:9c:69:35:4f:ed:dc:89:a0:f6:f4:4c:1c:d2:c1: e0:33:21:6c:fb:18:ca:fb:2e:d9:58:59:77:e5:58:c2:ca:38: bc:60:70:72:8c:2c:75:0a:26:fb:9b:08:52:2d:ae:76:7f:c5: c6:ee:1b:b3:e5:68:47:3d:31:e8:ef:4d:67:de:0c:ba:86:3a: b0:ad:bd:54:8b:63:b4:f1:46:8c:9b:98:79:e8:04:24:25:33: f1:a5:e2:d4:73:63:f8:d3:47:cc:87:ed:13:47:12:c4:08:3c: 09:fa:2c:a1:11:ad:d1:36:60:12:a7:cb:eb:e9:12:ca:68:8d: 38:fe:22:49 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr1IVZdH2G2/UciPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmEwNjMyZmQtNmRlZi00MDc3LThlZjYtNDhhMmQ3ZDI2YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTgMvJGAuisHKJN3c5fIZXzrImtXqdB8sRP FLeCLNHNpvqBzmHL3rmM1VYbwbkNkqSTVN29QtjNy8NGXkvfOsUpYXf30bKnGYvC srzIkmhD9jHgIvHNQqw2rtVAcBnVaocAafBNrnT6C4UeJNOYpMLuR/+w3sZrytOn Rv3xf6U9LFEBcafKAjpkyrF3VUOeZcR22frAtXP4N5w8KGjTBb6SNSwZMC08Er7m ZJCCBjg8VLUxoS9/VBBwbstiUxqvGHV2PFzKVIWYWqi5ZE3rNC5TF73of5YQ+63Z IKmFs3Tbl2tExTOLbQQcvIF8yVMT5AHT70WOwqxniavmwveE0wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP1E+4Sv+fuKg7smDLqabuCdaL50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdiSqrIx9Y58o2s+J3o91CSbcwdJtk/gqb zg7NLPfn5bd9UXOmnntwNJpnU4v4+QsqLb7z2/3f4KZTuRJqJcjN2qZewlPBY1NE x3/AzhMsvIxmmtypPJlf3alKoF1j/wCT3TOwC9R+WLEZyGQY2JMo2H+H9ywALThi HGq2Wl5y7JHqnGk1T+3ciaD29Ewc0sHgMyFs+xjK+y7ZWFl35VjCyji8YHByjCx1 Cib7mwhSLa52f8XG7huz5WhHPTHo701n3gy6hjqwrb1Ui2O08UaMm5h56AQkJTPx peLUc2P400fMh+0TRxLECDwJ+iyhEa3RNmASp8vr6RLKaI04/iJJ -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:16 2025 by rpki-client