$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa File: d4c36706-7a07-30a3-8ac0-4f853f76d634.roa (raw, json) Hash identifier: HwF6N6ZkYtbUUpDxcobX180LG/c1yxicXpmp55fXhlc= Subject key identifier: 61:5F:7C:E5:D4:7B:89:ED:F6:2C:F8:19:35:CC:D8:03:99:1D:F8:C2 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584ACCA659832D21BC0BBB44AE00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 54203 IP address blocks: 173.255.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:59:83:2d:21:bc:0b:bb:44:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=52b46750-f07d-47a5-ad2a-8d60bfba4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:8b:40:e0:68:ee:36:03:e1:07:d4:8a:cf: 96:ac:89:8c:e7:07:78:df:6f:46:05:e2:45:dc:6f: e3:39:7d:71:68:8a:6f:39:87:6d:82:c6:0e:91:69: 36:be:17:30:51:f0:18:52:b9:37:67:54:c5:55:24: 95:1e:81:3c:24:e3:12:36:5c:7d:cd:d6:7c:dd:e4: fa:bf:9f:06:9a:c4:1f:e0:6f:11:35:4d:ec:0d:16: 17:9f:b4:9e:47:54:bd:22:9b:36:be:ab:43:04:dd: c5:c3:69:c9:dc:cc:fd:70:5b:6a:01:32:5f:a0:c1: 52:da:63:3d:aa:b8:5c:d7:3b:ca:0c:8e:5e:7d:4a: 3a:bd:c4:c6:58:13:36:bb:a5:7f:f3:62:dd:90:f6: 9a:83:26:d8:17:56:93:76:31:11:86:ee:64:f4:54: 73:6c:b5:16:5b:d5:d0:1e:ed:04:9d:a2:6a:8c:49: fe:f9:01:35:ed:25:a4:3b:22:40:fe:5e:cd:11:1b: b4:13:bf:af:32:a1:3c:58:42:01:20:b3:24:13:aa: a4:a3:36:0e:8e:20:31:b5:7f:47:5c:2e:a7:1d:52: 42:2b:14:5a:62:10:71:65:df:e6:39:ae:cc:f2:c9: f1:5d:f7:45:81:9a:e3:1a:57:93:d7:31:c7:f2:92: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5F:7C:E5:D4:7B:89:ED:F6:2C:F8:19:35:CC:D8:03:99:1D:F8:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:55:62:23:42:79:c1:ef:17:84:23:56:b2:fd:24:58:54:79: 1f:ae:e5:16:b5:ec:58:f1:b3:a1:23:dd:a7:1c:31:55:46:7b: 20:63:71:35:1e:ef:c0:c3:21:8f:c5:fe:ff:29:b5:83:43:8f: 62:06:fb:86:60:27:a4:5d:52:d4:8b:51:59:fc:66:7f:19:75: 82:bd:54:27:cd:ab:cc:7d:a1:2c:71:7b:81:7b:31:c6:58:ad: a4:73:64:7d:54:9c:bb:7f:2b:dc:f6:39:4e:39:f8:b6:af:cc: e3:9e:3c:e2:00:d2:1a:51:be:8e:22:97:ca:8c:63:78:23:e1: 90:4b:7e:dd:fb:53:18:c3:55:9d:9a:ab:d9:e7:9f:f7:c9:b3: 47:75:b4:a4:33:fa:1f:19:1d:c6:d7:35:33:a4:fc:14:8f:ce: 71:d3:71:95:cb:64:53:fa:e2:7a:0f:7f:78:88:4b:38:ed:a0: 06:a1:8d:90:de:40:e8:ab:65:50:f0:2a:90:90:e5:d2:23:a9: c9:2a:35:5c:e2:29:8e:dd:69:cb:eb:20:bd:2c:bf:74:00:09: 46:47:e1:2b:1d:63:93:86:c0:06:4a:03:f0:c3:50:f1:86:d4: 27:9a:02:3a:6d:ab:e0:e8:67:5d:73:77:71:de:90:d4:c1:13: 58:47:8a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplmDLSG8C7tErgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTJiNDY3NTAtZjA3ZC00N2E1LWFkMmEtOGQ2MGJmYmE0ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ2LQOBo7jYD4QfUis+WrImM5wd4329GBeJF 3G/jOX1xaIpvOYdtgsYOkWk2vhcwUfAYUrk3Z1TFVSSVHoE8JOMSNlx9zdZ83eT6 v58GmsQf4G8RNU3sDRYXn7SeR1S9Ips2vqtDBN3Fw2nJ3Mz9cFtqATJfoMFS2mM9 qrhc1zvKDI5efUo6vcTGWBM2u6V/82LdkPaagybYF1aTdjERhu5k9FRzbLUWW9XQ Hu0EnaJqjEn++QE17SWkOyJA/l7NERu0E7+vMqE8WEIBILMkE6qkozYOjiAxtX9H XC6nHVJCKxRaYhBxZd/mOa7M8snxXfdFgZrjGleT1zHH8pLBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFffOXUe4nt9iz4GTXM2AOZHfjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzY3MDYtN2EwNy0z MGEzLThhYzAtNGY4NTNmNzZkNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxVYiNCecHvF4QjVrL9JFhUeR+u5Ra17Fjxs6Ej3accMVVGeyBjcTUe 78DDIY/F/v8ptYNDj2IG+4ZgJ6RdUtSLUVn8Zn8ZdYK9VCfNq8x9oSxxe4F7McZY raRzZH1UnLt/K9z2OU45+LavzOOePOIA0hpRvo4il8qMY3gj4ZBLft37UxjDVZ2a q9nnn/fJs0d1tKQz+h8ZHcbXNTOk/BSPznHTcZXLZFP64noPf3iISzjtoAahjZDe QOirZVDwKpCQ5dIjqckqNVziKY7dacvrIL0sv3QACUZH4SsdY5OGwAZKA/DDUPGG 1CeaAjptq+DoZ11zd3HekNTBE1hHirQ= -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:14 2025 by rpki-client