$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa File: 8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa (raw, json) Hash identifier: x65WZAwUtVbIKOWMwhnTUxn+sqdeMAEMdlTajJMQEnw= Subject key identifier: C5:C6:37:E5:36:4B:0C:E6:B6:C3:5A:4F:89:F7:5D:76:10:3C:76:71 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B03169051B0B90C8784A7ED80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 22781 IP address blocks: 173.195.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:90:51:b0:b9:0c:87:84:a7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=9590690e-1d3b-4474-9889-3212be0bf2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:05:53:3f:ed:e5:e5:d5:a6:aa:6c:12:a1: 16:61:65:9b:e0:99:bc:45:3b:ea:9b:94:56:bf:dd: 1d:92:01:21:c3:1a:ee:c4:fd:9d:70:13:e2:86:a7: 42:6e:0a:64:e5:79:48:4c:df:61:04:3b:88:30:d7: c5:cc:e8:6b:11:cb:03:99:4b:ca:69:b4:ce:dd:03: 54:29:a9:3d:36:b5:e9:a8:9f:fd:29:de:4b:19:73: 98:de:17:42:33:f3:12:80:37:54:65:ff:d4:e9:2a: eb:02:8e:49:3a:b9:43:87:ac:18:c2:70:9f:b1:7f: 60:bb:e1:36:41:f3:8f:37:e1:a9:ac:32:6b:4d:7c: fa:52:59:2e:57:67:4f:b9:c3:79:4e:9b:35:9e:c1: 91:e9:48:b0:fd:32:0f:44:fb:e8:d7:61:66:96:f6: 07:97:99:2f:ac:1b:1a:09:e5:7e:d9:76:14:4a:41: ca:9f:c0:63:4e:c8:19:ea:60:44:22:67:5e:05:5d: 14:ef:13:85:4a:e3:2f:7b:f3:ee:3e:ac:3e:50:c6: 56:b8:57:7c:47:c7:89:5a:be:26:93:95:66:03:3d: 08:d7:57:37:c7:52:a7:d6:d1:13:4c:ff:a8:41:ef: ec:d7:23:3c:31:58:3f:16:2a:9c:c1:98:2e:af:4c: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:37:E5:36:4B:0C:E6:B6:C3:5A:4F:89:F7:5D:76:10:3C:76:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.195.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:27:29:a3:10:2a:e9:54:2e:f1:48:43:c2:81:eb:c7:75:03: 96:69:f2:bb:bc:24:62:2d:c1:8e:c1:e8:f5:56:48:01:de:82: 9a:b3:31:3c:f6:d8:09:3c:bb:2a:2c:3a:98:bf:da:97:4e:f6: 6f:11:c6:6d:34:04:1d:f7:28:17:74:a9:b3:f2:27:3b:ec:8b: b7:87:fe:b2:f5:4f:65:2c:e7:6a:fb:44:cc:5d:11:a2:f2:e2: 86:eb:8e:3d:58:a2:3d:49:16:c4:fd:54:83:e2:0f:92:72:60: 46:d8:03:84:69:76:5f:83:3e:c7:21:23:7e:75:72:87:d1:0b: a0:62:71:f4:37:d2:14:da:10:67:c9:d8:06:a8:5a:39:ff:7b: 36:55:7a:06:9a:3e:ee:b4:b7:5a:e2:03:b2:59:b4:e5:42:8e: 69:74:74:73:f1:1d:7f:c0:06:58:7c:75:be:63:42:17:b5:d9: e0:7b:c1:e9:96:8d:94:d8:34:bf:83:8d:a8:cf:75:f2:f5:b0: 5c:21:5f:e5:17:a5:df:ec:c5:71:39:a3:e6:ad:17:d6:4f:c4: f4:3e:4f:af:f1:bf:bf:c6:c5:ac:bf:23:13:c3:c0:ca:88:1f: 60:00:0e:e5:76:6c:de:4e:23:d6:3b:af:f9:57:40:5c:81:d9: 75:30:89:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpBRsLkMh4Sn7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk OTU5MDY5MGUtMWQzYi00NDc0LTk4ODktMzIxMmJlMGJmMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA4FUz/t5eXVpqpsEqEWYWWb4Jm8RTvqm5RW v90dkgEhwxruxP2dcBPihqdCbgpk5XlITN9hBDuIMNfFzOhrEcsDmUvKabTO3QNU Kak9NrXpqJ/9Kd5LGXOY3hdCM/MSgDdUZf/U6SrrAo5JOrlDh6wYwnCfsX9gu+E2 QfOPN+GprDJrTXz6UlkuV2dPucN5Tps1nsGR6Uiw/TIPRPvo12FmlvYHl5kvrBsa CeV+2XYUSkHKn8BjTsgZ6mBEImdeBV0U7xOFSuMve/PuPqw+UMZWuFd8R8eJWr4m k5VmAz0I11c3x1Kn1tETTP+oQe/s1yM8MVg/FiqcwZgur0yHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXGN+U2SwzmtsNaT4n3XXYQPHZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODk0OGUxZjgtMGNhYS0z OGEwLWE1OTYtNWI2YTc4MDJiZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcnKaMQKulULvFIQ8KB68d1A5Zp8ru8JGItwY7B6PVWSAHegpqzMTz2 2Ak8uyosOpi/2pdO9m8Rxm00BB33KBd0qbPyJzvsi7eH/rL1T2Us52r7RMxdEaLy 4obrjj1Yoj1JFsT9VIPiD5JyYEbYA4Rpdl+DPschI351cofRC6BicfQ30hTaEGfJ 2AaoWjn/ezZVegaaPu60t1riA7JZtOVCjml0dHPxHX/ABlh8db5jQhe12eB7wemW jZTYNL+DjajPdfL1sFwhX+UXpd/sxXE5o+atF9ZPxPQ+T6/xv7/Gxay/IxPDwMqI H2AADuV2bN5OI9Y7r/lXQFyB2XUwies= -----END CERTIFICATE-----Generated at Fri Sep 5 19:55:18 2025 by rpki-client