$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa File: 2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa (raw, json) Hash identifier: GlykjgXxW0SIqk+K91KCZuXWi3IZAD9P4OEA9LrXfYQ= Subject key identifier: 57:13:46:68:E8:DA:4C:A5:5A:C2:99:52:0C:AC:3F:87:35:9B:2B:A3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B110BFEDBBC96A99651C4F100 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 54203 IP address blocks: 216.131.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fe:db:bc:96:a9:96:51:c4:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=fbc813e8-8225-4c26-a5e3-338fd29b61b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:78:bd:7a:18:1c:ba:d5:f6:e3:fe:42:83: f2:e4:41:35:e3:d0:c4:74:2f:de:05:47:d9:fc:b1: 6e:35:43:c1:bd:27:4d:a5:30:7b:0a:a5:65:49:90: 56:2f:6e:76:80:8f:90:2b:75:62:86:ab:66:8a:f8: 4a:72:06:75:ce:8c:7e:82:3b:92:3d:7d:60:49:16: 36:b7:1a:1a:cb:dc:25:18:84:c9:a9:3b:16:8a:93: a6:74:69:03:b4:3e:3e:4b:0d:a1:55:e4:df:6e:19: 08:c8:e1:78:3d:71:82:06:36:f3:33:40:e5:e7:c5: c0:1c:f6:26:34:45:de:78:6c:af:ab:30:60:05:22: ef:19:c9:c1:43:ea:8d:cb:66:cf:62:fa:16:64:84: c4:4b:65:53:d1:74:36:94:57:e0:66:d9:50:a1:ad: 12:1a:7b:8b:c1:15:89:06:01:13:14:8a:86:09:a8: 37:c3:35:c6:91:10:f6:5b:86:b6:4c:f5:39:ce:a4: 16:f8:01:9f:b2:34:48:89:a8:a3:d5:4c:d1:d1:01: 69:d4:2b:85:d0:19:5c:cd:11:bf:3d:8c:0c:ec:54: a3:69:58:a0:e1:18:d0:25:b7:55:30:8b:1f:9d:22: 91:cf:48:bf:d2:86:5f:e1:1a:fb:70:b2:8b:f7:09: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:46:68:E8:DA:4C:A5:5A:C2:99:52:0C:AC:3F:87:35:9B:2B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:58:bf:31:ce:15:04:ae:51:73:62:b1:ee:4c:a0:e7:ca:b9: 12:22:08:b2:4c:c3:5c:a9:3f:4b:f6:be:29:de:cf:e8:7c:69: 79:ed:f8:c4:20:9b:3f:9a:bc:b2:13:22:24:3d:5b:df:25:f7: ae:4f:9a:ec:9d:63:18:3e:b1:9c:67:6e:e5:99:ad:05:34:eb: 23:33:f8:81:2d:d9:e4:5d:7a:8a:87:20:21:dc:0f:5d:a0:d0: f9:df:40:dd:40:98:7d:41:a4:14:f3:71:d9:69:df:c7:78:ae: 10:0d:6a:69:cd:81:bc:a0:4c:a3:a3:3a:dc:7c:b0:c6:ad:62: dd:7a:1b:7a:ba:ff:53:e3:2a:85:3a:b2:39:3f:51:5d:e6:4b: 3f:88:ee:e5:a9:3a:13:8e:41:a2:29:4c:22:d1:9c:40:cf:9f: 1d:8d:4b:4b:63:49:6e:79:9b:8a:6e:27:e1:20:63:e5:ad:98: 93:59:bc:7d:16:d1:c1:04:4d:ea:75:a3:ac:cb:65:eb:0f:0e: 86:23:f0:84:b5:8b:66:dd:eb:3f:13:bd:a4:9c:64:17:96:e7: fb:44:86:21:a8:da:75:b6:c5:4a:6a:28:b2:01:bf:92:64:6e: b9:cc:b7:91:97:a1:93:13:35:5b:a3:96:ce:ff:a5:7f:c0:c2: 41:d2:ba:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/7bvJapllHE8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmJjODEzZTgtODIyNS00YzI2LWE1ZTMtMzM4ZmQyOWI2MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W14vXoYHLrV9uP+QoPy5EE149DEdC/eBUfZ /LFuNUPBvSdNpTB7CqVlSZBWL252gI+QK3VihqtmivhKcgZ1zox+gjuSPX1gSRY2 txoay9wlGITJqTsWipOmdGkDtD4+Sw2hVeTfbhkIyOF4PXGCBjbzM0Dl58XAHPYm NEXeeGyvqzBgBSLvGcnBQ+qNy2bPYvoWZITES2VT0XQ2lFfgZtlQoa0SGnuLwRWJ BgETFIqGCag3wzXGkRD2W4a2TPU5zqQW+AGfsjRIiaij1UzR0QFp1CuF0BlczRG/ PYwM7FSjaVig4RjQJbdVMIsfnSKRz0i/0oZf4Rr7cLKL9wn6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcTRmjo2kylWsKZUgysP4c1myujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjM1NWZhMjEtNzViYi0z MjM3LWI0YTAtYzYzZGEzYzMxYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERYvzHOFQSuUXNise5MoOfKuRIiCLJMw1ypP0v2vinez+h8aXnt+MQg mz+avLITIiQ9W98l965PmuydYxg+sZxnbuWZrQU06yMz+IEt2eRdeoqHICHcD12g 0PnfQN1AmH1BpBTzcdlp38d4rhANamnNgbygTKOjOtx8sMatYt16G3q6/1PjKoU6 sjk/UV3mSz+I7uWpOhOOQaIpTCLRnEDPnx2NS0tjSW55m4puJ+EgY+WtmJNZvH0W 0cEETep1o6zLZesPDoYj8IS1i2bd6z8TvaScZBeW5/tEhiGo2nW2xUpqKLIBv5Jk brnMt5GXoZMTNVujls7/pX/AwkHSuk0= -----END CERTIFICATE-----Generated at Tue Sep 9 12:21:20 2025 by rpki-client