$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa File: 04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa (raw, json) Hash identifier: 2t03ihzWG/yAtpigBfU+hMEZW23uozITNo77sK8lGjc= Subject key identifier: 14:7F:9E:4E:AF:F0:74:A4:BE:81:87:E5:BF:E1:D4:E7:6A:3E:46:A9 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806CC9529D4F06496C02680 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.131.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cc:95:29:d4:f0:64:96:c0:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=36bbc8ba-c100-4faa-94eb-45ea025831a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:5c:7d:a1:2e:9b:49:0f:7f:36:a7:10:e3: ad:10:10:99:70:cd:38:8f:5e:6e:44:c0:9a:58:51: 99:33:fa:3e:61:e0:d0:a3:92:1d:7a:94:65:21:03: 0c:92:96:b0:9a:f0:83:47:8c:04:b1:89:2e:0a:0d: d2:49:9a:67:4a:18:bf:17:a6:e1:01:0c:16:75:45: 69:7b:91:44:d6:80:e8:36:23:9b:af:0a:95:be:66: 62:de:82:2d:54:b2:7c:14:7d:c3:28:83:21:e2:0d: e9:5f:8b:41:35:bc:d1:23:00:5f:d2:23:82:f1:e5: 7f:cd:e1:3a:83:f6:82:f8:1e:3f:2e:9a:c0:7a:48: a4:cd:93:fa:34:aa:3c:99:79:d2:b2:74:bc:f9:cb: 8b:97:e0:47:3d:55:9e:95:2f:db:0b:ce:fd:1a:aa: e3:a2:ba:49:d4:de:e9:ab:74:f0:13:a1:f8:94:59: 96:35:a5:97:8e:a9:b2:b3:e9:51:23:3f:93:cd:d3: 43:4c:e8:23:6a:65:37:ca:82:29:f9:9d:ad:f6:e4: 99:14:a6:1c:6a:2b:cd:1d:b0:d9:7e:58:92:ee:29: 62:51:39:1f:85:45:20:b8:63:aa:42:7f:0f:c2:48: 68:17:9b:52:1c:b8:b1:1f:d4:be:11:67:9a:a3:05: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:9E:4E:AF:F0:74:A4:BE:81:87:E5:BF:E1:D4:E7:6A:3E:46:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:59:76:f0:f2:7d:9a:ce:32:ef:21:00:64:b3:1a:25:a7:76: 7c:09:1b:4a:30:c7:f0:64:48:1b:32:fc:7f:7d:18:c7:5d:ad: 20:29:29:3f:3d:a9:70:3a:9d:a8:7e:c8:8f:95:b5:76:5c:8f: 97:05:05:95:44:08:28:62:ab:e6:f5:9e:f3:b4:3b:6f:3c:7a: cc:c6:9e:d7:87:ff:20:37:1b:71:f4:8a:22:5d:84:b4:8c:30: cd:3c:21:94:7b:de:d6:32:24:de:45:2b:d6:b2:8e:59:3c:65: d3:7c:1c:80:44:bf:9a:11:63:ea:ec:d9:6d:19:01:ae:d0:f6: 59:67:4b:bc:eb:60:30:df:5c:08:45:0e:47:8d:e4:37:7a:65: 2a:07:39:9d:30:ac:0e:c9:ee:c4:28:8f:e9:2b:2a:91:a5:19: 29:ff:4a:df:14:c5:f3:92:b0:85:c5:e8:f3:ca:13:2f:69:0f: 42:a2:09:f4:53:ba:d7:81:3b:0c:b1:40:db:0b:24:bb:3d:0b: 98:f4:07:d7:52:56:34:37:1d:0e:c8:74:75:97:80:18:0e:51: 05:83:68:f6:95:e5:27:f5:8c:fe:88:28:6c:41:78:3a:ad:8c: 44:0f:73:3e:7c:33:d5:c8:ab:d4:86:84:e4:cf:90:29:4c:8d: 60:23:d1:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsyVKdTwZJbAJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzZiYmM4YmEtYzEwMC00ZmFhLTk0ZWItNDVlYTAyNTgzMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06lcfaEum0kPfzanEOOtEBCZcM04j15uRMCa WFGZM/o+YeDQo5IdepRlIQMMkpawmvCDR4wEsYkuCg3SSZpnShi/F6bhAQwWdUVp e5FE1oDoNiObrwqVvmZi3oItVLJ8FH3DKIMh4g3pX4tBNbzRIwBf0iOC8eV/zeE6 g/aC+B4/LprAekikzZP6NKo8mXnSsnS8+cuLl+BHPVWelS/bC879GqrjorpJ1N7p q3TwE6H4lFmWNaWXjqmys+lRIz+TzdNDTOgjamU3yoIp+Z2t9uSZFKYcaivNHbDZ fliS7iliUTkfhUUguGOqQn8PwkhoF5tSHLixH9S+EWeaowXHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR/nk6v8HSkvoGH5b/h1OdqPkapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRhOTE5MjMtNjVjYy0z ZDI0LWExZTktY2JlMGRhM2FmNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVZdvDyfZrOMu8hAGSzGiWndnwJG0owx/BkSBsy/H99GMddrSApKT89 qXA6nah+yI+VtXZcj5cFBZVECChiq+b1nvO0O288eszGnteH/yA3G3H0iiJdhLSM MM08IZR73tYyJN5FK9ayjlk8ZdN8HIBEv5oRY+rs2W0ZAa7Q9llnS7zrYDDfXAhF DkeN5Dd6ZSoHOZ0wrA7J7sQoj+krKpGlGSn/St8UxfOSsIXF6PPKEy9pD0KiCfRT uteBOwyxQNsLJLs9C5j0B9dSVjQ3HQ7IdHWXgBgOUQWDaPaV5Sf1jP6IKGxBeDqt jEQPcz58M9XIq9SGhOTPkClMjWAj0WY= -----END CERTIFICATE-----Generated at Sun Sep 7 19:17:34 2025 by rpki-client