$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa File: 32961140-fc1b-3f18-9ecc-e50da122d081.roa (raw, json) Hash identifier: GYz2DhehECWKxWnbNnFyC3mdq5itURP+WEi/OJZ7Nag= Subject key identifier: 98:5A:F2:BA:53:60:03:FC:10:76:8B:55:29:30:D5:15:27:93:3C:23 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A03A557917C874265EB9382C0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 62651 IP address blocks: 216.131.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:57:91:7c:87:42:65:eb:93:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=67073dd8-acb6-4fb8-acdb-64ca4a9353fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:58:cf:d3:e8:5a:5d:ae:7a:e9:f1:7e:98: cd:7b:92:87:25:74:50:78:a3:4d:f2:ef:38:a8:6d: 17:ba:2c:6d:c2:89:1a:40:1f:11:6a:5f:f3:ac:ae: c3:26:98:e6:c8:89:e8:19:45:fb:3f:c3:7b:5a:52: ee:2a:ce:67:52:90:28:45:71:4f:7f:8f:a6:ee:62: 2f:ea:7a:b1:79:52:23:94:0b:5f:6a:ec:07:14:83: 7a:11:b1:6f:d9:90:de:4c:f6:39:52:d4:84:2b:a0: 94:55:48:9d:a6:cb:cd:81:67:85:18:0b:b5:21:a6: 4e:c8:12:ac:a0:f5:2a:11:48:8b:81:af:a0:ab:2c: cd:ad:de:48:67:eb:86:e4:ab:d3:fb:6b:e1:e9:a6: 3d:be:25:7a:f4:2d:28:ff:c3:00:8b:75:bb:48:2e: 4e:95:ea:71:43:31:1d:ff:f6:12:0c:1e:e8:9c:d9: 2d:43:5f:f4:1d:77:f3:29:18:31:0e:1b:88:0d:74: 96:d6:c7:6f:4b:ef:54:9a:c5:42:18:8e:7a:9b:fa: 1b:67:8f:3a:14:f1:50:6c:39:5a:63:18:6f:13:41: 65:fb:4c:e6:c9:87:30:90:dc:e4:55:a3:5f:22:8f: 4a:fc:36:68:75:14:35:ec:08:c7:6e:7f:ff:2d:99: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5A:F2:BA:53:60:03:FC:10:76:8B:55:29:30:D5:15:27:93:3C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:23:d4:cb:e2:02:12:d7:5b:fc:1b:f4:94:fc:b3:f2:52:aa: 1a:82:90:f1:9c:fe:0c:d3:15:f5:39:40:19:f5:5f:e5:fd:9f: 38:da:26:84:e0:ab:07:d3:22:63:8c:30:7e:82:ea:8f:9c:bf: 42:98:4d:20:2a:80:5f:4a:67:40:9d:ed:4a:66:ba:0b:72:84: 74:24:69:46:1a:64:45:dd:a9:6b:d2:5a:2e:a8:c3:e5:34:60: bf:f7:91:52:70:cf:c2:2b:d3:c7:a3:dd:53:f4:fe:ed:a0:c9: d5:2f:c8:9d:d2:3c:81:41:26:c7:28:34:a1:d5:2d:15:af:d1: a7:dd:2d:eb:47:83:9a:4d:ba:30:25:0e:db:6d:40:24:ab:84: ea:81:8c:44:92:35:05:83:45:7b:47:f7:13:b4:79:44:db:0d: 84:1b:12:7a:63:8b:f3:ca:75:e4:e8:6e:11:35:0e:f0:d9:67: 8b:87:90:3e:56:17:ed:b2:8c:ec:5c:ef:d9:06:24:18:33:51: 34:43:d5:c0:ac:b9:99:85:c4:67:58:79:4c:f4:44:de:dc:62: 4f:a0:da:d9:f3:39:ee:f5:f0:4d:4e:ef:01:39:94:fc:0d:20: ed:72:c7:66:82:66:75:8a:03:55:ee:13:a7:e9:00:f8:ff:f6: ff:22:a7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVeRfIdCZeuTgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjcwNzNkZDgtYWNiNi00ZmI4LWFjZGItNjRjYTRhOTM1M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW1Yz9PoWl2ueunxfpjNe5KHJXRQeKNN8u84 qG0XuixtwokaQB8Ral/zrK7DJpjmyInoGUX7P8N7WlLuKs5nUpAoRXFPf4+m7mIv 6nqxeVIjlAtfauwHFIN6EbFv2ZDeTPY5UtSEK6CUVUidpsvNgWeFGAu1IaZOyBKs oPUqEUiLga+gqyzNrd5IZ+uG5KvT+2vh6aY9viV69C0o/8MAi3W7SC5OlepxQzEd //YSDB7onNktQ1/0HXfzKRgxDhuIDXSW1sdvS+9UmsVCGI56m/obZ486FPFQbDla YxhvE0Fl+0zmyYcwkNzkVaNfIo9K/DZodRQ17AjHbn//LZnbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJha8rpTYAP8EHaLVSkw1RUnkzwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzI5NjExNDAtZmMxYi0z ZjE4LTllY2MtZTUwZGExMjJkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4j1MviAhLXW/wb9JT8s/JSqhqCkPGc/gzTFfU5QBn1X+X9nzjaJoTg qwfTImOMMH6C6o+cv0KYTSAqgF9KZ0Cd7UpmugtyhHQkaUYaZEXdqWvSWi6ow+U0 YL/3kVJwz8Ir08ej3VP0/u2gydUvyJ3SPIFBJscoNKHVLRWv0afdLetHg5pNujAl DtttQCSrhOqBjESSNQWDRXtH9xO0eUTbDYQbEnpji/PKdeTobhE1DvDZZ4uHkD5W F+2yjOxc79kGJBgzUTRD1cCsuZmFxGdYeUz0RN7cYk+g2tnzOe718E1O7wE5lPwN IO1yx2aCZnWKA1XuE6fpAPj/9v8ipzM= -----END CERTIFICATE-----Generated at Mon Jun 9 09:04:20 2025 by rpki-client