$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa File: 32961140-fc1b-3f18-9ecc-e50da122d081.roa (raw, json) Hash identifier: kM9kglbYXzAnxwTWKqFxqCsfK2ePOWmtJUaV6H772js= Subject key identifier: BD:78:0A:1E:94:E5:E7:D6:24:B5:B8:46:7D:B5:23:71:D1:08:E7:3F Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584AE46128A110A57732C978DDC0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 62651 IP address blocks: 216.131.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:28:a1:10:a5:77:32:c9:78:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=245ddd58-68b3-430b-ae7e-243e5cceaaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:67:e0:18:e3:79:b2:bb:68:7e:ff:ca:2f: ba:c5:46:ab:02:33:d5:68:0a:65:d2:f7:35:d8:38: 08:9d:67:e0:23:c7:14:f7:ed:79:ea:be:a8:9f:41: 8f:9f:a2:c2:a2:be:2b:1a:d2:8a:ea:d4:f6:8c:73: 67:2f:66:9e:de:88:fe:16:e1:df:d1:c8:0d:04:32: 7a:df:14:f7:55:a3:2c:da:4b:2f:62:58:b2:2b:48: 12:4c:2c:35:cf:f9:95:58:0f:06:df:72:bd:58:7a: c2:7d:40:5a:97:db:d4:e8:e2:1e:cf:26:07:f6:eb: 10:c0:bc:c1:8d:90:9b:7b:69:91:10:88:70:bc:95: 54:12:fa:70:d0:56:70:da:04:be:f9:68:b4:02:b7: 58:70:84:c8:79:30:7d:b1:16:ab:00:f9:e6:5a:d5: ce:7e:71:8b:53:1c:fd:11:b9:0d:1c:ba:00:6e:a0: 3a:6d:93:4f:a9:9a:1b:0b:18:69:93:55:6e:25:b7: 1d:76:9a:cb:15:19:c6:3f:56:b9:64:c2:b0:01:54: 3f:af:ea:4d:22:d6:da:bc:50:44:88:39:4c:fe:ac: ce:a1:e9:f6:40:7c:76:b1:fe:73:cc:e8:0e:c8:24: ab:7d:6e:03:bb:37:13:22:cf:68:2e:3e:52:99:f7: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:0A:1E:94:E5:E7:D6:24:B5:B8:46:7D:B5:23:71:D1:08:E7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2d:3d:e8:86:68:2f:e5:22:e5:dc:3f:52:b2:c4:0a:a8:a9: a9:dd:ea:45:1c:69:ba:07:cd:05:35:2c:8a:51:f3:6c:83:b2: c9:e3:a6:0a:ca:67:17:db:fd:37:50:df:91:cb:93:0b:1b:53: a2:c5:6d:3d:21:a2:dc:f1:f8:3c:ca:c9:3d:a0:58:f6:a5:18: 80:5e:bf:e9:90:e6:44:a2:cb:63:76:72:7f:25:ed:4e:a6:9d: 84:d7:e9:33:2a:57:4d:e6:73:0c:d9:18:f5:0b:fe:49:57:aa: df:8e:a2:68:08:40:a2:13:b1:77:a9:6e:6b:d5:4c:65:e0:54: 33:c5:81:d6:b2:3d:b1:25:c4:1c:b7:d0:8f:37:61:6d:b0:b0: 37:8c:0f:e6:24:63:20:84:fd:65:20:88:07:b7:88:3d:7c:1d: b0:e3:19:63:4e:17:3d:13:15:02:d2:b8:d6:77:f9:35:1e:39: 4e:70:cb:de:9d:d4:2f:da:62:2f:30:44:53:24:0d:50:db:5a: f3:28:2e:3b:40:17:94:b7:46:bb:38:30:89:7c:d0:6e:47:a7: e0:be:86:ae:ee:97:e3:ff:23:69:9c:91:f9:87:be:9a:a8:47: b3:7c:6d:aa:90:08:fe:38:50:2f:2e:11:52:bb:83:04:9a:52: af:93:31:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSihEKV3Msl43cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ1ZGRkNTgtNjhiMy00MzBiLWFlN2UtMjQzZTVjY2VhYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb9n4BjjebK7aH7/yi+6xUarAjPVaApl0vc1 2DgInWfgI8cU9+156r6on0GPn6LCor4rGtKK6tT2jHNnL2ae3oj+FuHf0cgNBDJ6 3xT3VaMs2ksvYliyK0gSTCw1z/mVWA8G33K9WHrCfUBal9vU6OIezyYH9usQwLzB jZCbe2mREIhwvJVUEvpw0FZw2gS++Wi0ArdYcITIeTB9sRarAPnmWtXOfnGLUxz9 EbkNHLoAbqA6bZNPqZobCxhpk1VuJbcddprLFRnGP1a5ZMKwAVQ/r+pNItbavFBE iDlM/qzOoen2QHx2sf5zzOgOyCSrfW4DuzcTIs9oLj5Smfei6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL14Ch6U5efWJLW4Rn21I3HRCOc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzI5NjExNDAtZmMxYi0z ZjE4LTllY2MtZTUwZGExMjJkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACctPeiGaC/lIuXcP1KyxAqoqand6kUcaboHzQU1LIpR82yDssnjpgrK Zxfb/TdQ35HLkwsbU6LFbT0hotzx+DzKyT2gWPalGIBev+mQ5kSiy2N2cn8l7U6m nYTX6TMqV03mcwzZGPUL/klXqt+OomgIQKITsXepbmvVTGXgVDPFgdayPbElxBy3 0I83YW2wsDeMD+YkYyCE/WUgiAe3iD18HbDjGWNOFz0TFQLSuNZ3+TUeOU5wy96d 1C/aYi8wRFMkDVDbWvMoLjtAF5S3Rrs4MIl80G5Hp+C+hq7ul+P/I2mckfmHvpqo R7N8baqQCP44UC8uEVK7gwSaUq+TMRI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:15:45 2025 by rpki-client