$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa File: 04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa (raw, json) Hash identifier: KUWkhTy7L4Ein2AdG7IwpA6EUpk+fR27+59Cd6xjtiM= Subject key identifier: AE:F1:D0:75:00:A5:BF:F0:09:67:3D:FC:6D:39:9E:6A:56:7B:AF:54 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374ACC933986019464281EC0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 62651 IP address blocks: 216.131.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cc:93:39:86:01:94:64:28:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=fc842fda-cefc-44a5-bae3-e18231ca0f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:16:34:3c:73:03:b8:bc:24:af:bf:5d:f2: 96:cb:8b:98:c3:50:28:bb:6a:10:b3:40:fc:a1:f6: 41:5f:15:28:95:4e:5a:97:76:6d:3e:65:c5:78:dc: b8:36:83:30:76:c8:d7:62:4c:f7:2e:40:25:f8:f5: 2f:9b:62:c7:0a:e2:38:d3:13:8b:82:54:06:35:3b: 02:f6:bf:c7:bf:14:c7:20:ee:fe:ec:ba:77:f7:24: 00:83:bc:fb:69:ea:08:ee:00:b7:bc:a9:b1:93:19: a9:78:6d:ef:98:7f:23:2d:86:85:32:fb:74:34:6c: 11:04:9b:14:b3:3e:eb:9e:11:cc:76:24:d0:38:da: ea:ef:5b:65:09:cb:27:a7:06:eb:30:53:7c:d8:76: ee:36:de:99:0c:39:a6:75:ad:76:7b:0e:e2:13:3e: 2d:53:79:ff:f2:33:8b:2b:83:63:8f:90:3b:1b:74: 7f:5a:b6:30:6b:7e:49:56:26:4c:ad:96:73:3e:17: 47:1b:af:ae:2c:9d:4e:07:28:f8:5f:12:cc:98:96: f2:2b:11:3f:51:3f:72:d1:02:d8:c8:e0:cb:d0:85: ab:7a:07:31:55:2b:bd:03:9e:e9:89:ce:b7:ed:04: ac:a9:65:54:d3:80:76:3a:b4:c5:35:d4:cb:8f:0d: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:D0:75:00:A5:BF:F0:09:67:3D:FC:6D:39:9E:6A:56:7B:AF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:84:44:a0:18:8e:5d:08:11:21:16:cd:37:44:58:2f:a3:2d: 9c:a6:4b:c9:2f:02:a2:04:ba:c9:9c:58:03:c6:c2:bb:4d:6c: d3:52:16:74:81:0b:30:db:90:15:e1:61:7b:5d:82:dc:c5:39: fc:9e:a4:51:f8:e7:92:cb:cc:70:27:f8:ad:52:11:72:69:72: 3b:0f:17:02:43:1e:f6:31:ea:4c:5d:af:d6:f0:a6:f6:f2:2b: de:1b:de:93:bc:16:8f:99:97:4c:2c:12:8a:43:65:f1:27:fc: 75:3e:48:cc:30:f6:60:83:c3:c3:3b:a0:0c:27:69:15:53:f8: 52:43:f2:4e:96:a1:a4:b0:25:49:0a:ab:5e:c0:37:b2:88:94: d3:34:c2:14:ec:74:5c:38:72:a5:e5:19:55:9b:a0:1b:6b:ed: bc:20:7a:14:bb:76:e5:91:91:12:40:10:e1:9e:9d:91:d8:ed: 41:ad:cf:6c:c2:b1:77:61:10:75:dc:21:a9:41:37:a5:fd:8d: 1e:7c:7e:a2:66:e7:94:59:91:c5:ec:ba:b9:32:f0:3a:6a:8a: 48:f6:d6:6f:1b:cd:57:eb:53:2b:45:51:6d:99:f2:03:cf:a3: f4:91:fd:4b:0a:bf:50:34:e9:e2:49:49:59:80:95:ac:37:45: 18:35:3a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsyTOYYBlGQoHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZmM4NDJmZGEtY2VmYy00NGE1LWJhZTMtZTE4MjMxY2EwZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa0WNDxzA7i8JK+/XfKWy4uYw1Aou2oQs0D8 ofZBXxUolU5al3ZtPmXFeNy4NoMwdsjXYkz3LkAl+PUvm2LHCuI40xOLglQGNTsC 9r/HvxTHIO7+7Lp39yQAg7z7aeoI7gC3vKmxkxmpeG3vmH8jLYaFMvt0NGwRBJsU sz7rnhHMdiTQONrq71tlCcsnpwbrMFN82HbuNt6ZDDmmda12ew7iEz4tU3n/8jOL K4Njj5A7G3R/WrYwa35JViZMrZZzPhdHG6+uLJ1OByj4XxLMmJbyKxE/UT9y0QLY yODL0IWregcxVSu9A57pic637QSsqWVU04B2OrTFNdTLjw2+2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7x0HUApb/wCWc9/G05nmpWe69UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRhOTE5MjMtNjVjYy0z ZDI0LWExZTktY2JlMGRhM2FmNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaERKAYjl0IESEWzTdEWC+jLZymS8kvAqIEusmcWAPGwrtNbNNSFnSB CzDbkBXhYXtdgtzFOfyepFH455LLzHAn+K1SEXJpcjsPFwJDHvYx6kxdr9bwpvby K94b3pO8Fo+Zl0wsEopDZfEn/HU+SMww9mCDw8M7oAwnaRVT+FJD8k6WoaSwJUkK q17AN7KIlNM0whTsdFw4cqXlGVWboBtr7bwgehS7duWRkRJAEOGenZHY7UGtz2zC sXdhEHXcIalBN6X9jR58fqJm55RZkcXsurky8Dpqikj21m8bzVfrUytFUW2Z8gPP o/SR/UsKv1A06eJJSVmAlaw3RRg1OpA= -----END CERTIFICATE-----Generated at Mon Jun 30 18:29:44 2025 by rpki-client