$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: SLqPK5BouJVUedUNdJ27U5ufLMzaLme2FX2NoFgddPo= Subject key identifier: E9:73:EB:0D:2B:65:8E:B7:ED:D8:24:A0:96:B8:58:31:32:48:FC:3C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A331AE8E41B60A37EA16EF553 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e8:e4:1b:60:a3:7e:a1:6e:f5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=43af58f5-bcf7-4a49-8f4f-16497cf2ac66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:aa:a8:b7:d5:c0:c1:63:05:42:1a:d9:74: d9:42:25:0a:44:1b:2c:2c:69:59:91:66:da:76:18: 2a:3f:de:87:4e:3d:b9:a3:ba:35:6c:ed:43:d6:d7: 89:a9:27:d9:4e:2f:58:7e:15:41:3f:a3:e8:d3:9f: 20:6a:ab:7e:f2:d6:46:20:2f:2d:54:e8:6d:a7:ef: b1:3b:ab:3d:05:4c:a0:59:df:06:b0:23:4c:70:d9: 69:8f:1a:5d:a2:d9:1d:ed:08:70:51:b1:04:29:95: e5:8f:c8:a2:5d:a5:ea:1d:e6:c8:b4:24:97:e2:74: db:ce:9f:c3:ab:b6:2f:c3:f2:a0:5f:56:9e:f8:ac: bc:a1:cf:f7:de:11:02:19:12:a9:34:01:6d:67:1d: cd:c9:80:54:97:28:2b:ed:d1:78:60:cc:d8:54:7c: c9:ab:0f:1f:a6:ce:96:25:b5:36:b4:99:8d:86:8f: 4c:f4:e5:9d:aa:bb:6c:1e:26:af:e3:66:d2:b0:c0: 30:11:09:0f:ea:ab:1b:96:66:aa:0e:37:83:55:70: 54:4e:21:ee:5c:8e:dd:3c:59:36:f1:f2:2f:fc:d5: 51:14:37:b0:86:f2:20:6d:c7:83:30:2c:76:27:6d: 0f:9a:78:c5:d0:1b:a9:26:53:ce:a0:13:7e:38:6e: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:73:EB:0D:2B:65:8E:B7:ED:D8:24:A0:96:B8:58:31:32:48:FC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a1:c2:fe:fe:8c:f0:96:6c:00:f8:59:2e:20:01:30:9a:96: 5e:84:7c:db:31:6b:86:25:50:2c:6b:f6:50:a3:e1:3d:63:20: 4a:8f:68:25:bd:0d:e2:0b:99:a3:56:44:96:ca:09:58:fd:d6: 46:5a:77:79:db:e4:cd:4e:05:92:23:15:8b:91:e2:7c:42:7b: ea:56:96:4b:0d:23:49:06:0c:04:fc:74:09:bf:ec:12:a1:17: 95:62:e0:dc:4e:1e:f8:03:c5:25:8a:0e:f8:c1:16:00:7a:26: da:c6:3b:89:95:c3:f2:6d:c5:bb:4d:52:d3:ae:46:26:47:e4: fe:39:14:5a:9f:00:a8:99:75:e8:bd:30:96:e6:ed:09:4f:9f: 36:3f:99:02:d5:ef:46:69:5d:eb:75:b6:8d:84:ea:94:61:34: 65:73:e7:08:e9:49:62:11:5f:83:44:bb:b7:c4:e8:b7:b1:f9: 5a:c1:02:00:47:0a:6c:af:38:42:29:f1:83:78:bc:a1:a6:bd: b5:d3:66:be:95:f6:c1:72:9d:ca:54:a4:48:9d:b7:63:d3:ff: fe:3e:1e:5a:72:90:cf:35:56:1c:5f:89:ea:b8:2e:c6:08:2a: a4:98:68:34:d7:98:2d:47:70:7b:bc:f7:96:28:bb:0d:3b:18: 68:83:7c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGujkG2CjfqFu9VMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NDNhZjU4ZjUtYmNmNy00YTQ5LThmNGYtMTY0OTdjZjJhYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEmqqLfVwMFjBUIa2XTZQiUKRBssLGlZkWba dhgqP96HTj25o7o1bO1D1teJqSfZTi9YfhVBP6Po058gaqt+8tZGIC8tVOhtp++x O6s9BUygWd8GsCNMcNlpjxpdotkd7QhwUbEEKZXlj8iiXaXqHebItCSX4nTbzp/D q7Yvw/KgX1ae+Ky8oc/33hECGRKpNAFtZx3NyYBUlygr7dF4YMzYVHzJqw8fps6W JbU2tJmNho9M9OWdqrtsHiav42bSsMAwEQkP6qsblmaqDjeDVXBUTiHuXI7dPFk2 8fIv/NVRFDewhvIgbceDMCx2J20PmnjF0BupJlPOoBN+OG7rbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlz6w0rZY637dgkoJa4WDEySPw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADahwv7+jPCWbAD4WS4gATCall6EfNsxa4YlUCxr9lCj4T1jIEqPaCW9 DeILmaNWRJbKCVj91kZad3nb5M1OBZIjFYuR4nxCe+pWlksNI0kGDAT8dAm/7BKh F5Vi4NxOHvgDxSWKDvjBFgB6JtrGO4mVw/JtxbtNUtOuRiZH5P45FFqfAKiZdei9 MJbm7QlPnzY/mQLV70ZpXet1to2E6pRhNGVz5wjpSWIRX4NEu7fE6Lex+VrBAgBH CmyvOEIp8YN4vKGmvbXTZr6V9sFyncpUpEidt2PT//4+HlpykM81Vhxfieq4LsYI KqSYaDTXmC1HcHu895Youw07GGiDfJU= -----END CERTIFICATE-----Generated at Mon Jun 16 22:12:40 2025 by rpki-client