$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa File: 3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa (raw, json) Hash identifier: sZmPFHNrxN6gZ8rX1S6mSIdUdpLA2ivVo6cqjXj5Rpo= Subject key identifier: D8:25:16:A4:6F:08:F8:77:AA:6B:08:65:6F:AA:DD:67:29:02:74:17 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806CC23DD2AE691B4895A40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cc:23:dd:2a:e6:91:b4:89:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=7a8adf09-3e26-4c4d-9156-f7eda3ffa7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:3f:63:b2:ca:a1:15:af:68:bc:73:ce:52: 39:ab:63:23:4d:b4:67:c3:b2:2f:68:8f:08:db:cc: 82:ac:b4:35:0a:6b:0c:d9:43:a7:a1:72:c9:d2:f4: 70:7f:0b:2e:cd:41:df:2b:d3:88:9d:91:00:8d:50: 01:74:ca:4b:a2:e2:90:6a:78:2b:be:5a:81:8b:c6: 40:8e:db:10:26:6c:9a:9f:c7:c7:e1:a8:50:70:09: 5d:4d:20:84:36:bc:0e:4d:9c:52:d1:db:34:c8:3a: 8b:44:f4:34:d6:de:ac:63:f8:f0:9c:fd:d8:60:3d: d5:61:3c:0d:02:bf:fc:53:77:e0:8f:8b:a8:e8:55: 53:56:1d:5f:40:e0:0c:26:db:41:9c:20:fb:ad:b3: 81:09:02:aa:d6:fe:8e:80:88:ee:9d:fa:a4:5b:e2: 0d:cf:d8:74:aa:4b:06:00:19:0c:56:e2:25:72:0c: 81:7f:14:6c:2b:77:89:44:c9:95:66:99:9e:88:31: ee:fb:a4:01:e5:b9:f1:47:33:53:b3:52:5c:93:46: 09:44:f4:e7:3c:27:3a:78:39:fc:f6:82:00:c8:f7: be:80:42:9b:25:34:d4:6d:0c:96:1b:6f:44:b3:29: 8f:52:7b:1a:fc:46:5d:44:e2:27:23:47:93:fe:c9: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:25:16:A4:6F:08:F8:77:AA:6B:08:65:6F:AA:DD:67:29:02:74:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a5:a6:67:15:0d:83:af:81:5f:0f:72:72:cf:dc:07:9c:67: bc:ec:4a:e2:3d:29:47:e7:bc:56:9f:e3:2f:e0:7f:43:93:6e: 02:13:da:51:3b:15:ea:a3:2a:e1:60:c1:7f:06:85:11:e0:ea: fb:3c:e5:75:d5:5f:8f:e8:bb:d5:35:bf:f6:36:c1:77:02:c6: ee:59:6b:0d:be:5e:e5:86:52:08:dd:00:ad:e0:b0:57:6c:b3: e9:34:60:2d:f6:e9:65:50:39:2e:f6:ca:96:3a:42:70:bf:0a: f7:f8:8b:5c:eb:ae:1b:ee:29:2a:a0:9f:1e:18:7c:1b:14:d8: 3a:5e:19:47:d0:99:b5:b0:45:b0:9f:f3:a4:72:a2:35:4e:e4: 50:13:cf:c6:cb:6e:3d:cb:ec:1a:b9:a0:24:e4:aa:9d:2f:fe: 16:a6:74:04:3c:f0:ea:2b:84:34:d3:e9:91:25:23:d8:8f:26: c4:2e:ba:40:9c:e8:70:2e:58:7a:3c:15:83:bd:e0:ca:82:45: 35:a4:6b:99:70:f9:a3:03:e5:e4:88:9b:38:a3:02:24:7a:b9: 4c:8b:cf:d9:fb:48:a4:8a:4f:b0:9d:e7:71:5d:a1:79:e9:53: 74:f5:06:6e:d0:8a:85:58:55:c2:89:f7:c7:9f:39:af:06:37: d5:18:74:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBswj3SrmkbSJWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2E4YWRmMDktM2UyNi00YzRkLTkxNTYtZjdlZGEzZmZhN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjc/Y7LKoRWvaLxzzlI5q2MjTbRnw7IvaI8I 28yCrLQ1CmsM2UOnoXLJ0vRwfwsuzUHfK9OInZEAjVABdMpLouKQangrvlqBi8ZA jtsQJmyan8fH4ahQcAldTSCENrwOTZxS0ds0yDqLRPQ01t6sY/jwnP3YYD3VYTwN Ar/8U3fgj4uo6FVTVh1fQOAMJttBnCD7rbOBCQKq1v6OgIjunfqkW+INz9h0qksG ABkMVuIlcgyBfxRsK3eJRMmVZpmeiDHu+6QB5bnxRzNTs1Jck0YJRPTnPCc6eDn8 9oIAyPe+gEKbJTTUbQyWG29EsymPUnsa/EZdROInI0eT/skYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNglFqRvCPh3qmsIZW+q3WcpAnQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2YzYWU5YzUtN2NhYi0z NWU3LWE3NmYtNGY3OTJjY2I3NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABClpmcVDYOvgV8PcnLP3AecZ7zsSuI9KUfnvFaf4y/gf0OTbgIT2lE7 FeqjKuFgwX8GhRHg6vs85XXVX4/ou9U1v/Y2wXcCxu5Zaw2+XuWGUgjdAK3gsFds s+k0YC326WVQOS72ypY6QnC/Cvf4i1zrrhvuKSqgnx4YfBsU2DpeGUfQmbWwRbCf 86RyojVO5FATz8bLbj3L7Bq5oCTkqp0v/hamdAQ88OorhDTT6ZElI9iPJsQuukCc 6HAuWHo8FYO94MqCRTWka5lw+aMD5eSImzijAiR6uUyLz9n7SKSKT7Cd53FdoXnp U3T1Bm7QioVYVcKJ98efOa8GN9UYdEg= -----END CERTIFICATE-----Generated at Fri Oct 24 10:40:34 2025 by rpki-client