$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa File: 3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa (raw, json) Hash identifier: 7TFkRYRFHJPkH+W5eKkJsmm3eMwRE/9sXEdqK3l+AYY= Subject key identifier: D1:9B:9F:A7:E8:DC:04:90:14:E7:2B:10:C5:3B:39:95:5D:59:2A:D2 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374ACC275F104F4311921500 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 62651 IP address blocks: 216.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cc:27:5f:10:4f:43:11:92:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=0d523d39-7bbf-4f9d-842f-495a4a5a2c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:5a:f2:91:db:03:c3:4c:ee:49:b5:bb:05: 94:60:06:26:27:42:76:80:59:3d:df:64:99:05:96: 2f:22:f9:d0:49:51:2b:15:83:e2:03:b0:22:be:04: 2c:a8:44:52:d8:7c:7a:49:7a:b2:f3:27:0c:48:ca: ce:cd:a7:62:ee:b9:43:72:76:d9:47:ad:1f:77:7b: aa:8c:b9:eb:97:16:60:11:3a:29:d8:68:d0:a2:8c: 29:0c:15:8b:84:3d:57:7d:d4:55:aa:61:aa:5d:4f: 61:da:56:1d:68:72:60:77:d6:17:20:91:c6:72:d9: 7d:97:a2:5b:2b:84:ae:54:2b:09:e3:f3:f3:f0:48: a7:55:87:a1:39:fc:7c:25:a1:b6:15:cd:ba:11:6f: 17:60:17:77:c8:2d:2a:24:00:6a:f7:20:0e:e2:66: fa:58:1e:0b:1b:16:14:2c:8f:34:04:d0:fb:83:ca: ac:f7:0c:00:eb:e3:a8:d0:90:89:7a:c3:0d:24:bc: e3:62:84:e8:32:06:5c:f0:9b:c0:81:84:b3:8c:b5: b2:f2:71:bd:3c:db:ef:b7:33:89:0c:7a:ac:02:2a: 3f:f6:b1:b3:83:c6:b3:1e:08:92:ff:82:e8:10:32: 06:04:94:3b:19:81:c2:cc:ea:1f:2d:4b:9f:e4:ad: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9B:9F:A7:E8:DC:04:90:14:E7:2B:10:C5:3B:39:95:5D:59:2A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:46:00:c8:42:80:9e:ca:ba:1d:a4:0c:82:76:c2:64:e0:53: 58:8f:5f:83:45:40:b0:77:59:e4:7a:fb:7e:07:e0:6d:63:e3: c6:c9:79:d6:19:35:66:7b:72:18:9b:1c:be:c9:ef:b7:ff:be: dc:cd:d9:17:4f:16:ad:65:fb:37:a8:53:23:33:f8:ac:1a:f9: e1:9f:e4:7d:9c:1f:21:2f:95:f8:1d:59:d5:ae:be:d2:83:b8: 2a:ff:bc:9e:3e:f1:0f:d8:da:1e:94:ba:cb:59:23:a6:e4:33: c4:c9:ff:fe:47:46:12:b2:f2:fb:93:34:ba:6b:a0:a2:38:99: b1:9b:7c:22:08:52:00:49:a3:1a:3f:94:71:59:56:68:0c:26: 43:4b:bc:a0:29:02:cc:df:29:89:5c:b2:e3:bc:bc:92:53:97: db:0a:88:51:9a:a3:ba:fb:88:32:90:27:2f:6f:8f:67:7f:c5: 9f:cc:85:c1:68:d3:a5:48:f9:6b:00:1d:4e:8a:91:41:3e:71: 2c:e6:f5:c5:cc:5b:58:26:2b:c4:f7:2b:a8:2c:32:22:b6:7b: f6:e6:47:de:8c:cf:76:73:0d:9a:e1:58:b1:cc:af:6b:0a:28: 02:1f:79:48:4d:2a:ea:e8:55:e6:a9:24:1d:0b:00:2e:ad:0b: 96:0c:75:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SswnXxBPQxGSFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MGQ1MjNkMzktN2JiZi00ZjlkLTg0MmYtNDk1YTRhNWEyYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT5a8pHbA8NM7km1uwWUYAYmJ0J2gFk932SZ BZYvIvnQSVErFYPiA7AivgQsqERS2Hx6SXqy8ycMSMrOzadi7rlDcnbZR60fd3uq jLnrlxZgETop2GjQoowpDBWLhD1XfdRVqmGqXU9h2lYdaHJgd9YXIJHGctl9l6Jb K4SuVCsJ4/Pz8EinVYehOfx8JaG2Fc26EW8XYBd3yC0qJABq9yAO4mb6WB4LGxYU LI80BND7g8qs9wwA6+Oo0JCJesMNJLzjYoToMgZc8JvAgYSzjLWy8nG9PNvvtzOJ DHqsAio/9rGzg8azHgiS/4LoEDIGBJQ7GYHCzOofLUuf5K1L4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGbn6fo3ASQFOcrEMU7OZVdWSrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2YzYWU5YzUtN2NhYi0z NWU3LWE3NmYtNGY3OTJjY2I3NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJGAMhCgJ7Kuh2kDIJ2wmTgU1iPX4NFQLB3WeR6+34H4G1j48bJedYZ NWZ7chibHL7J77f/vtzN2RdPFq1l+zeoUyMz+Kwa+eGf5H2cHyEvlfgdWdWuvtKD uCr/vJ4+8Q/Y2h6UustZI6bkM8TJ//5HRhKy8vuTNLproKI4mbGbfCIIUgBJoxo/ lHFZVmgMJkNLvKApAszfKYlcsuO8vJJTl9sKiFGao7r7iDKQJy9vj2d/xZ/MhcFo 06VI+WsAHU6KkUE+cSzm9cXMW1gmK8T3K6gsMiK2e/bmR96Mz3ZzDZrhWLHMr2sK KAIfeUhNKuroVeapJB0LAC6tC5YMdcM= -----END CERTIFICATE-----Generated at Tue Jul 1 13:01:34 2025 by rpki-client