$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa File: 364b006a-dadb-395d-bc34-448cd3148010.roa (raw, json) Hash identifier: brljDWr5YpY5FmVeIF7GaJoe5ml5HvbymJ5Lj7pSbNM= Subject key identifier: 24:73:68:91:A4:39:FA:12:D0:AC:71:82:27:41:2D:74:52:08:C6:0D Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C48EA49DF87F25A7AA80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.131.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c4:8e:a4:9d:f8:7f:25:a7:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ee66a3a9-903a-45d1-baa2-8780061550b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:38:27:77:76:a3:17:e6:5e:94:e8:7c:26: a8:7e:80:59:44:b9:5d:94:cc:05:4f:fd:fc:9a:65: bb:ba:6a:57:7f:90:d0:48:c2:00:ed:d6:21:b5:07: 4d:f0:51:a0:77:a4:b3:81:76:69:f3:be:e4:3b:57: 36:4b:e4:ab:21:02:e1:50:10:d9:84:53:d6:c6:e9: cd:85:83:e4:20:31:91:df:1b:0f:08:60:33:50:0b: 3e:9f:cc:8b:85:dd:c5:b1:7a:fd:b0:5e:1f:d3:df: 60:a4:0a:0e:d6:49:98:65:81:42:1c:55:60:4c:13: 5f:c4:f7:88:73:2c:7c:97:b4:56:f0:99:98:95:c0: 16:df:7f:0b:bc:f9:27:63:88:51:58:7a:1d:51:ec: 31:fc:24:fb:ff:ac:92:1e:5b:ae:0a:87:93:03:79: b9:55:83:21:48:a7:07:97:e0:13:c8:bf:67:95:97: 60:10:a0:33:cb:c2:f6:5b:77:e5:74:35:81:ff:fb: 6a:58:51:70:80:00:67:e1:a5:62:0a:d9:3d:0c:9e: b5:7a:10:e9:58:46:8d:c5:ee:2c:b4:1b:79:c0:cd: 0b:1f:cc:0a:00:0e:05:86:28:4f:b7:3a:1b:83:d2: 3e:8a:d6:f0:81:04:4d:fe:6f:24:d6:e7:dd:8a:41: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:68:91:A4:39:FA:12:D0:AC:71:82:27:41:2D:74:52:08:C6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9d:ef:3f:01:f3:75:6c:35:78:4a:47:18:67:95:02:75:38: 29:4d:fc:7f:d0:04:3e:c5:5d:61:59:cb:ac:d2:5f:22:11:e7: 61:92:6d:19:97:e1:c6:a6:e1:d6:67:05:1a:ad:3b:a8:14:35: fe:6a:61:18:5a:50:a5:cb:80:d4:be:63:f6:3f:d0:dc:9b:13: 1e:43:f9:25:0e:1b:95:76:95:87:3f:bc:57:05:65:7d:42:75: db:ab:44:da:6f:8e:c8:bb:19:de:7e:4b:6a:ea:43:bd:e9:c6: fd:47:4f:c6:9c:20:c1:f7:14:aa:9b:91:f8:36:de:0b:e9:70: e9:e5:69:01:7d:c5:6c:f1:29:ae:04:4e:1b:a5:19:0a:7e:4d: 06:b3:d7:95:59:33:d0:ed:98:34:5f:41:3a:4e:e9:fc:81:88: 1c:bd:74:27:91:64:d6:3a:2e:cb:5a:a5:ee:c0:82:40:14:ca: 61:5a:1b:d8:40:7d:32:a8:42:9a:c2:d9:29:55:a9:d8:c0:da: 87:e2:7c:66:52:b4:2c:95:71:12:9a:3c:e5:df:ce:8b:50:cc: 45:c2:a1:82:05:d6:56:12:f8:17:e4:12:33:c1:8d:07:80:24: 20:0e:d4:bb:ed:b9:b6:0b:00:94:4c:12:54:a8:ab:93:cc:b9: cf:83:c2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsSOpJ34fyWnqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWU2NmEzYTktOTAzYS00NWQxLWJhYTItODc4MDA2MTU1MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus84J3d2oxfmXpTofCaofoBZRLldlMwFT/38 mmW7umpXf5DQSMIA7dYhtQdN8FGgd6SzgXZp877kO1c2S+SrIQLhUBDZhFPWxunN hYPkIDGR3xsPCGAzUAs+n8yLhd3FsXr9sF4f099gpAoO1kmYZYFCHFVgTBNfxPeI cyx8l7RW8JmYlcAW338LvPknY4hRWHodUewx/CT7/6ySHluuCoeTA3m5VYMhSKcH l+ATyL9nlZdgEKAzy8L2W3fldDWB//tqWFFwgABn4aViCtk9DJ61ehDpWEaNxe4s tBt5wM0LH8wKAA4FhihPtzobg9I+itbwgQRN/m8k1ufdikGMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRzaJGkOfoS0KxxgidBLXRSCMYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzY0YjAwNmEtZGFkYi0z OTVkLWJjMzQtNDQ4Y2QzMTQ4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABud7z8B83VsNXhKRxhnlQJ1OClN/H/QBD7FXWFZy6zSXyIR52GSbRmX 4cam4dZnBRqtO6gUNf5qYRhaUKXLgNS+Y/Y/0NybEx5D+SUOG5V2lYc/vFcFZX1C ddurRNpvjsi7Gd5+S2rqQ73pxv1HT8acIMH3FKqbkfg23gvpcOnlaQF9xWzxKa4E ThulGQp+TQaz15VZM9DtmDRfQTpO6fyBiBy9dCeRZNY6Lstape7AgkAUymFaG9hA fTKoQprC2SlVqdjA2ofifGZStCyVcRKaPOXfzotQzEXCoYIF1lYS+BfkEjPBjQeA JCAO1LvtubYLAJRMElSoq5PMuc+Dwv8= -----END CERTIFICATE-----Generated at Sun Sep 7 19:19:03 2025 by rpki-client