$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/924e5f74-13de-336f-ac40-ea80f5da5093.roa File: 924e5f74-13de-336f-ac40-ea80f5da5093.roa (raw, json) Hash identifier: GWSElfGy0mO3kq1fMGEf9KUgP6ufvMkgLeGT3AFzSbE= Subject key identifier: 44:D0:6A:D8:C2:94:98:0F:BC:D8:8D:39:CC:61:6A:FC:BB:E4:95:E3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B64CC9E5A2014F5AE1E96E300 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/924e5f74-13de-336f-ac40-ea80f5da5093.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 53340 IP address blocks: 216.131.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:9e:5a:20:14:f5:ae:1e:96:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b52e99b6-b05d-4cf2-93a7-525c5d2c25de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:25:e7:71:38:99:27:95:69:27:62:4b:b7: 98:e9:5f:d6:c7:e2:05:22:7b:2b:37:ff:20:41:4e: bd:84:46:c0:49:df:e3:88:8e:1d:83:1d:f3:68:d1: 97:65:56:ba:73:f6:0f:75:d0:2b:04:08:33:f1:9e: 33:4c:99:12:df:33:b1:54:d8:11:c8:2e:62:f3:d0: a2:e3:74:7d:ad:11:cc:c3:8a:44:4a:54:6e:0a:12: 29:19:1c:17:01:eb:c3:ec:74:ee:4e:ea:52:d4:20: a2:a8:08:f3:e0:7d:79:a6:99:1d:5e:ab:bf:d7:f0: a2:2e:ad:ca:33:f9:31:18:a7:78:17:03:ec:09:7c: b4:68:95:ca:4f:05:82:2c:39:70:37:56:4c:96:15: f0:e2:73:eb:1c:3b:3a:40:e5:05:dd:a3:bb:83:cb: 62:7e:43:39:97:c7:70:91:d1:24:43:3b:80:76:e4: 4a:32:19:53:74:00:75:8f:a3:4c:13:26:fa:de:39: de:7e:a7:a0:1e:84:dc:4f:09:a4:9b:7f:0d:b9:ad: 72:1d:76:bc:93:31:62:66:1c:bb:17:f3:2e:7a:ef: 88:07:11:be:2a:f5:86:dc:8c:41:77:24:95:11:fb: 1d:23:cd:d9:c3:ae:85:37:5a:a0:f4:12:71:a0:65: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D0:6A:D8:C2:94:98:0F:BC:D8:8D:39:CC:61:6A:FC:BB:E4:95:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/924e5f74-13de-336f-ac40-ea80f5da5093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e9:84:58:5c:94:2d:00:06:84:70:98:7f:1c:f3:84:85:b7: b5:76:8c:a9:b1:1e:ae:bf:70:f5:28:1a:7d:6f:c7:01:a2:74: eb:8c:c6:56:bd:25:74:f5:38:15:d9:4e:78:df:aa:df:06:a0: f7:a8:35:99:af:5c:5c:67:2c:f1:ad:90:3b:a1:de:08:61:dd: d7:4c:b0:33:d3:b5:ae:1f:ea:5c:43:86:c5:c5:12:87:e7:b2: f6:5b:94:f3:90:8d:bc:ac:d0:11:1c:f4:b9:52:36:0d:33:ce: 50:85:dd:9e:a0:0a:de:b9:46:5f:0e:9f:93:ee:c8:e0:65:40: 7b:f6:ca:cf:e6:dc:1d:80:80:ea:06:89:45:4e:af:56:d5:ac: c8:a4:98:b6:99:5d:cc:1a:11:6d:51:c1:31:73:75:e0:5b:6c: 3e:6c:af:fe:de:ac:23:5b:52:32:0f:b2:80:a9:f1:0d:33:ba: f9:ef:10:95:40:c0:a2:f7:db:8b:f4:2b:be:f0:d1:9e:ed:a1: e0:df:57:1f:51:37:00:6b:11:34:33:28:d9:01:ef:8f:9c:2e: 86:45:1a:35:e8:a3:3b:11:94:b8:71:64:b2:1f:64:7d:80:82: 45:ce:22:70:1a:c9:30:b1:76:17:77:83:f1:b9:d2:76:d8:0d: c2:87:18:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzJ5aIBT1rh6W4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjUyZTk5YjYtYjA1ZC00Y2YyLTkzYTctNTI1YzVkMmMyNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8igl53E4mSeVaSdiS7eY6V/Wx+IFInsrN/8g QU69hEbASd/jiI4dgx3zaNGXZVa6c/YPddArBAgz8Z4zTJkS3zOxVNgRyC5i89Ci 43R9rRHMw4pESlRuChIpGRwXAevD7HTuTupS1CCiqAjz4H15ppkdXqu/1/CiLq3K M/kxGKd4FwPsCXy0aJXKTwWCLDlwN1ZMlhXw4nPrHDs6QOUF3aO7g8tifkM5l8dw kdEkQzuAduRKMhlTdAB1j6NMEyb63jnefqegHoTcTwmkm38Nua1yHXa8kzFiZhy7 F/Mueu+IBxG+KvWG3IxBdySVEfsdI83Zw66FN1qg9BJxoGW/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETQatjClJgPvNiNOcxhavy75JXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOTI0ZTVmNzQtMTNkZS0z MzZmLWFjNDAtZWE4MGY1ZGE1MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfphFhclC0ABoRwmH8c84SFt7V2jKmxHq6/cPUoGn1vxwGidOuMxla9 JXT1OBXZTnjfqt8GoPeoNZmvXFxnLPGtkDuh3ghh3ddMsDPTta4f6lxDhsXFEofn svZblPOQjbys0BEc9LlSNg0zzlCF3Z6gCt65Rl8On5PuyOBlQHv2ys/m3B2AgOoG iUVOr1bVrMikmLaZXcwaEW1RwTFzdeBbbD5sr/7erCNbUjIPsoCp8Q0zuvnvEJVA wKL324v0K77w0Z7toeDfVx9RNwBrETQzKNkB74+cLoZFGjXoozsRlLhxZLIfZH2A gkXOInAayTCxdhd3g/G50nbYDcKHGNY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:20:28 2025 by rpki-client