$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa File: d08c84e2-cf05-324f-9e29-a1020bf31620.roa (raw, json) Hash identifier: w6elemPvBqgli/4Q8q1R5svToiXcj8FbRZKAmT1DLpA= Subject key identifier: A5:5D:52:D6:3C:43:FE:45:F9:3C:0D:4C:23:62:DD:8F:A6:DF:A0:B7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584AF52156395A73A41616735600 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 22781 IP address blocks: 216.131.118.0/24 maxlen: 24 2606:b300:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:56:39:5a:73:a4:16:16:73:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=fe20aab3-fc69-43d9-9c07-5c9eeaa8b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:7d:17:5f:1b:8e:d7:28:46:93:d0:c1:01: ad:c8:a8:21:8b:dd:ea:c1:3f:9d:32:ec:ab:3e:72: af:ad:bd:2d:7e:be:6a:23:22:56:7a:96:0e:11:7d: 3a:65:37:7e:f9:d8:0b:0d:61:f9:fb:61:44:43:70: 06:b3:41:a2:21:6b:8d:8b:dc:27:ba:5d:a1:05:c2: 28:ea:23:ae:6b:51:a7:26:94:ca:9c:ce:bf:86:b0: 4e:e3:17:00:da:54:b7:64:f8:52:13:bd:ff:6a:de: 0f:ff:c1:53:e7:51:6c:23:f5:9e:06:1e:89:16:92: c3:99:63:e9:40:6c:9c:6c:c7:4b:13:0f:2c:94:cb: d8:1f:8e:14:6b:8e:e3:30:d3:db:23:0e:3a:06:c1: c6:3a:25:51:9e:bf:e2:2f:2b:16:15:c7:cd:13:4b: bd:94:d4:d3:8c:3d:32:74:93:32:16:83:fa:92:eb: 5c:30:3e:14:f9:4b:ad:11:cc:b7:ad:a2:7a:67:e1: 6f:10:92:68:79:8a:ea:bf:cf:d0:8f:7d:8e:f5:54: 76:d5:97:c6:2d:6b:09:cf:34:a7:23:7e:a1:87:43: 5a:13:79:ad:76:66:99:ce:5d:90:3f:7f:7d:7a:e2: 4b:ea:a1:13:65:d3:95:b5:2a:df:d9:a7:53:a4:b5: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5D:52:D6:3C:43:FE:45:F9:3C:0D:4C:23:62:DD:8F:A6:DF:A0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.118.0/24 IPv6: 2606:b300:8100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:dc:f3:b3:ba:aa:4a:00:b7:c7:7d:d8:36:51:44:58:6e:8c: ca:af:f0:51:db:ae:91:09:bf:0e:7a:3c:14:6e:02:e1:16:4a: 7d:53:4a:ae:ba:a6:39:a9:fb:ed:7a:c7:a2:c3:97:b2:f7:49: a6:14:de:34:5e:39:a1:e2:f0:c4:ba:bc:3f:3f:86:13:fb:d9: 59:e7:40:95:03:a7:83:67:8c:69:89:bc:0a:45:ad:17:5c:9f: a1:1d:d3:59:b8:c1:a9:cc:36:e0:52:74:97:50:5c:8f:09:7f: 6d:c4:e4:f2:ab:d8:ba:44:4f:7a:99:94:34:c5:a1:21:fe:ec: b8:89:55:df:4b:81:bb:9c:78:22:e6:a1:2f:df:ea:7d:8a:f9: ae:d8:38:99:70:13:02:95:0e:78:40:b4:76:69:ef:5d:d4:f7: b3:53:f9:bb:fa:8c:62:f4:95:1e:b6:57:ea:a4:24:1d:65:d7: 0c:33:19:5c:30:53:12:50:12:e4:23:e6:42:56:d3:38:97:b5: 57:60:67:be:f5:69:58:44:2a:27:94:69:9a:b4:94:6f:e7:78: ee:63:f2:a5:7f:04:d5:36:93:1e:0c:fe:1a:63:8f:f7:81:e4: 79:4f:1d:7e:73:cd:85:55:22:5a:19:57:52:81:cb:0a:a5:28: 02:33:e9:58 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr1IVY5WnOkFhZzVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmUyMGFhYjMtZmM2OS00M2Q5LTljMDctNWM5ZWVhYThiOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGB9F18bjtcoRpPQwQGtyKghi93qwT+dMuyr PnKvrb0tfr5qIyJWepYOEX06ZTd++dgLDWH5+2FEQ3AGs0GiIWuNi9wnul2hBcIo 6iOua1GnJpTKnM6/hrBO4xcA2lS3ZPhSE73/at4P/8FT51FsI/WeBh6JFpLDmWPp QGycbMdLEw8slMvYH44Ua47jMNPbIw46BsHGOiVRnr/iLysWFcfNE0u9lNTTjD0y dJMyFoP6kutcMD4U+UutEcy3raJ6Z+FvEJJoeYrqv8/Qj32O9VR21ZfGLWsJzzSn I36hh0NaE3mtdmaZzl2QP399euJL6qETZdOVtSrf2adTpLVxqwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKVdUtY8Q/5F+TwNTCNi3Y+m36C3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDA4Yzg0ZTItY2YwNS0z MjRmLTllMjktYTEwMjBiZjMxNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN2MA4E AgACMAgDBgAmBrMAgTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC3POzuqpKALfHfdg2UURYbozKr/BR266R Cb8OejwUbgLhFkp9U0quuqY5qfvteseiw5ey90mmFN40Xjmh4vDEurw/P4YT+9lZ 50CVA6eDZ4xpibwKRa0XXJ+hHdNZuMGpzDbgUnSXUFyPCX9txOTyq9i6RE96mZQ0 xaEh/uy4iVXfS4G7nHgi5qEv3+p9ivmu2DiZcBMClQ54QLR2ae9d1PezU/m7+oxi 9JUetlfqpCQdZdcMMxlcMFMSUBLkI+ZCVtM4l7VXYGe+9WlYRConlGmatJRv53ju Y/KlfwTVNpMeDP4aY4/3geR5Tx1+c82FVSJaGVdSgcsKpSgCM+lY -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:48 2025 by rpki-client