$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa File: 12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json) Hash identifier: hKql7bgAhDaqzjPnPyngoNK+T+cMAFj7S8QvXOgMOVs= Subject key identifier: 6E:F0:AF:F1:A1:16:45:CF:F0:74:26:5F:87:E7:BF:9A:D0:18:A2:47 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B13D6AB2DFB6043953E6EF020 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 22781 IP address blocks: 216.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ab:2d:fb:60:43:95:3e:6e:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e836e916-199b-4dc4-93ec-4588855f831a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:80:31:33:58:95:b3:0e:8e:c3:ef:85:73: 8e:e5:58:24:06:02:a9:a5:94:eb:da:a6:d4:02:2e: ad:55:a6:79:7d:3a:78:73:d9:4c:c8:b4:48:cd:3c: 93:1b:2a:49:f1:43:5d:0c:bd:4a:24:eb:7e:a2:dc: c2:4b:be:1f:c3:82:8b:a1:dc:9e:06:0d:85:56:3c: 11:1f:2e:c6:f8:c5:f9:f1:59:1d:74:3c:b2:fa:33: 98:44:38:d1:db:50:67:e9:6a:88:cd:fa:98:ac:93: 67:12:60:48:8e:b2:c2:0f:1d:54:a9:44:00:41:ee: 2b:bf:31:23:74:d7:9b:65:f0:8f:af:a8:d8:7c:76: 63:66:72:18:bc:54:cb:b3:9e:3a:04:f6:e4:aa:94: 12:47:2f:0e:3c:8c:05:18:1e:a2:90:37:c8:1d:ee: e4:9b:b6:78:03:60:fe:45:3b:a5:d8:9a:a7:1c:50: 63:20:6a:da:a8:3a:b9:66:8a:af:93:bb:86:f3:2c: 9c:f2:88:8b:47:17:eb:9b:21:c4:52:de:30:89:7f: 4f:7b:6a:db:35:4d:0c:28:d7:1c:15:7c:8e:63:b4: 5c:04:8a:02:0f:99:39:31:ca:43:b1:2b:f0:07:df: 2b:6a:d6:3a:ac:c0:57:eb:40:b3:fc:95:12:69:b3: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F0:AF:F1:A1:16:45:CF:F0:74:26:5F:87:E7:BF:9A:D0:18:A2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3d:73:c5:c9:00:10:83:d7:bc:6e:c0:25:76:54:a4:2b:45: 31:0a:12:fb:7d:c0:27:85:48:db:f4:18:cc:a7:c9:3a:eb:59: 7d:a5:d8:79:a6:f7:b3:d2:e1:d2:93:d0:cd:36:0c:a2:ad:15: f5:3a:b3:84:0d:61:2d:2e:d0:8a:00:f1:95:00:9d:13:e4:0e: e3:d6:15:53:32:23:05:d5:b2:de:00:ab:ef:6d:62:d9:05:3f: 96:ad:e4:5c:6f:98:1f:a4:ba:4e:62:71:1d:86:40:ce:f2:21: 3e:c4:a1:8a:17:ed:6e:0d:c2:cf:28:1a:ff:e9:31:5a:0c:65: 6a:31:39:f4:42:af:55:1c:6a:0f:35:34:15:c3:23:19:1f:ef: 5b:3c:2b:bf:f5:ce:9f:ac:62:6e:15:37:86:05:30:2d:25:27: 97:80:8f:c3:b0:a1:4d:66:85:cf:e1:4c:f6:fc:49:e1:ba:b0: 02:6f:f6:1b:57:ec:7b:0c:ba:ec:07:67:1c:97:2b:da:8d:23: 52:2f:b7:12:59:78:73:cc:6e:d1:33:54:eb:eb:2f:f5:9d:53: 88:54:f9:eb:5c:90:37:07:7b:78:f5:28:cf:ff:22:2c:e7:94: 83:44:92:af:d1:5b:e5:3c:6e:2e:70:02:b2:85:29:95:24:fe: 66:22:ac:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qst+2BDlT5u8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTgzNmU5MTYtMTk5Yi00ZGM0LTkzZWMtNDU4ODg1NWY4MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biAMTNYlbMOjsPvhXOO5VgkBgKppZTr2qbU Ai6tVaZ5fTp4c9lMyLRIzTyTGypJ8UNdDL1KJOt+otzCS74fw4KLodyeBg2FVjwR Hy7G+MX58VkddDyy+jOYRDjR21Bn6WqIzfqYrJNnEmBIjrLCDx1UqUQAQe4rvzEj dNebZfCPr6jYfHZjZnIYvFTLs546BPbkqpQSRy8OPIwFGB6ikDfIHe7km7Z4A2D+ RTul2JqnHFBjIGraqDq5Zoqvk7uG8yyc8oiLRxfrmyHEUt4wiX9Pe2rbNU0MKNcc FXyOY7RcBIoCD5k5McpDsSvwB98ratY6rMBX60Cz/JUSabPxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7wr/GhFkXP8HQmX4fnv5rQGKJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc9c8XJABCD17xuwCV2VKQrRTEKEvt9wCeFSNv0GMynyTrrWX2l2Hmm 97PS4dKT0M02DKKtFfU6s4QNYS0u0IoA8ZUAnRPkDuPWFVMyIwXVst4Aq+9tYtkF P5at5FxvmB+kuk5icR2GQM7yIT7EoYoX7W4Nws8oGv/pMVoMZWoxOfRCr1Ucag81 NBXDIxkf71s8K7/1zp+sYm4VN4YFMC0lJ5eAj8OwoU1mhc/hTPb8SeG6sAJv9htX 7HsMuuwHZxyXK9qNI1IvtxJZeHPMbtEzVOvrL/WdU4hU+etckDcHe3j1KM//Iizn lINEkq/RW+U8bi5wArKFKZUk/mYirF8= -----END CERTIFICATE-----Generated at Fri Sep 5 19:57:22 2025 by rpki-client