$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa File: 1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa (raw, json) Hash identifier: dZl/C24cl+yLGIWYO7qve7uS0hInqJrLfiXEHyPGBi8= Subject key identifier: AC:A4:D3:A7:57:4E:8C:C4:DB:43:6E:2A:A5:AB:58:EE:C3:B1:16:A3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C472F42B2120D0A337A0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c4:72:f4:2b:21:20:d0:a3:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b82d3dfe-b235-4558-ae2c-ee391d3fc06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:4a:e7:ab:70:2d:bb:c4:b7:1f:14:ab:db: 86:10:5c:03:b7:79:8f:d9:a8:ec:05:18:0f:e4:6d: db:c8:14:ad:ee:24:be:a2:d3:40:78:01:e7:99:7d: ba:f5:d2:e0:a7:95:3e:a4:d7:58:f2:9b:f1:e6:28: a3:bb:8e:e3:4a:ed:1b:6d:8e:c4:b1:11:bc:d9:b6: 54:87:c0:9e:6e:7a:3f:9b:c0:39:b9:36:16:3a:09: 8d:d4:9f:b7:e6:cb:65:e3:2c:20:3f:a6:d0:b9:8f: ca:d3:2f:34:28:97:d5:a4:8c:5b:2a:2f:91:94:a1: f7:03:a0:b0:1b:04:62:0c:08:e6:33:d9:0d:8e:e2: 18:aa:f7:8b:fc:b5:f8:e1:70:e3:05:f5:ab:d8:24: 9f:96:b4:ad:8e:47:aa:24:ca:2b:0d:9c:66:7b:13: 1b:ba:37:8f:34:27:03:6d:4a:8a:19:21:5f:6c:7c: 5e:6c:54:65:bb:72:08:0e:72:ff:f3:32:9c:d5:67: e8:76:61:06:f4:90:7e:6b:2d:56:a6:fa:b1:5e:40: 15:77:18:82:e1:0b:75:58:66:4b:be:39:68:fd:8e: 33:44:89:e2:c5:87:20:1e:a0:92:ef:7b:1b:b2:f7: c7:04:37:0f:02:f9:f8:fa:6f:d6:fa:ac:43:1f:76: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:D3:A7:57:4E:8C:C4:DB:43:6E:2A:A5:AB:58:EE:C3:B1:16:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3c:2f:a0:1b:f6:f7:63:8b:f1:79:ff:5f:44:f0:c5:8d:ba: 21:0f:7c:89:2d:ee:3f:02:8c:c5:ac:70:34:0c:c1:2a:61:74: 8e:66:b5:18:87:a5:eb:01:04:b4:f6:25:1b:9b:ed:c4:5a:5d: ae:2b:9f:0d:d0:ff:28:53:db:0b:47:7d:5c:91:d2:6f:77:99: b9:2f:cd:16:7c:08:36:fc:fa:d5:5d:d5:82:41:10:5d:18:a1: 4c:79:2e:b5:f0:95:5a:92:15:9e:07:e4:20:94:ef:2e:9d:8d: 2c:c1:75:e8:ad:47:e6:64:94:fd:2f:6f:41:c1:e5:ac:37:07: 47:9d:d3:bb:d1:87:b2:03:f7:a9:36:5c:50:b6:05:e4:68:25: 34:cc:f1:a1:ff:2d:44:1a:9b:7a:53:69:4e:69:23:61:b7:34: d0:5b:fa:63:b7:af:6d:57:1d:15:00:4b:92:72:c7:34:75:6c: 7c:f0:b9:d8:21:16:45:83:f6:aa:c4:a3:72:84:cc:dd:48:43: 9d:a5:30:a1:bb:07:43:0c:ca:24:d7:f6:16:0c:63:9b:86:c0: 98:62:de:a9:ac:c3:7e:ec:e1:5e:8f:fe:fa:13:2c:85:ef:f9: 2e:48:18:02:5d:b3:26:f5:73:0a:35:25:ec:aa:49:fb:a8:05: 1b:c8:c0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsRy9CshINCjN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjgyZDNkZmUtYjIzNS00NTU4LWFlMmMtZWUzOTFkM2ZjMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bVK56twLbvEtx8Uq9uGEFwDt3mP2ajsBRgP 5G3byBSt7iS+otNAeAHnmX269dLgp5U+pNdY8pvx5iiju47jSu0bbY7EsRG82bZU h8Cebno/m8A5uTYWOgmN1J+35stl4ywgP6bQuY/K0y80KJfVpIxbKi+RlKH3A6Cw GwRiDAjmM9kNjuIYqveL/LX44XDjBfWr2CSflrStjkeqJMorDZxmexMbujePNCcD bUqKGSFfbHxebFRlu3IIDnL/8zKc1WfodmEG9JB+ay1WpvqxXkAVdxiC4Qt1WGZL vjlo/Y4zRInixYcgHqCS73sbsvfHBDcPAvn4+m/W+qxDH3bCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyk06dXTozE20NuKqWrWO7DsRajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWRjNDBmZDgtOTFmZC0z ZDBmLTkzZjktMmMzYjA0ZjUyZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI8L6Ab9vdji/F5/19E8MWNuiEPfIkt7j8CjMWscDQMwSphdI5mtRiH pesBBLT2JRub7cRaXa4rnw3Q/yhT2wtHfVyR0m93mbkvzRZ8CDb8+tVd1YJBEF0Y oUx5LrXwlVqSFZ4H5CCU7y6djSzBdeitR+ZklP0vb0HB5aw3B0ed07vRh7ID96k2 XFC2BeRoJTTM8aH/LUQam3pTaU5pI2G3NNBb+mO3r21XHRUAS5JyxzR1bHzwudgh FkWD9qrEo3KEzN1IQ52lMKG7B0MMyiTX9hYMY5uGwJhi3qmsw37s4V6P/voTLIXv +S5IGAJdsyb1cwo1JeyqSfuoBRvIwKc= -----END CERTIFICATE-----Generated at Fri Oct 24 10:34:54 2025 by rpki-client