$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa File: b6b4e916-9a15-3140-9552-e4bbf7451372.roa (raw, json) Hash identifier: OFL3IgOLibVnQNf/9cgTPyriC3X/HDzvm/v33Tk85iw= Subject key identifier: 44:88:5F:45:0C:B6:06:2F:5D:2C:07:C3:79:B1:F8:77:E8:9C:0C:F2 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584A5FC5D4E5C08887E780986D00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 210873 IP address blocks: 16.10.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d4:e5:c0:88:87:e7:80:98:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=a8a91512-7971-4051-986d-a48d7d906e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:56:4d:b9:7b:c5:43:22:c8:85:48:fd:60: 1b:c0:90:45:30:3d:74:d1:da:f6:4d:7b:9e:14:35: 14:78:96:92:72:80:97:30:8e:6b:71:77:45:60:fd: 74:58:f7:27:07:4c:36:fc:b8:35:9e:5f:40:cf:da: 0d:c8:05:e4:73:65:f5:f3:c4:ba:61:1e:0f:a7:18: cf:46:36:37:03:b4:d9:b7:7b:d2:e8:0e:bf:73:9d: ac:14:76:35:6f:61:b2:07:44:35:d0:db:e8:cc:b5: 94:dc:bb:bb:b0:7a:3a:74:61:d1:cb:fe:79:28:a9: 51:04:45:10:2b:4a:02:b1:92:cb:0c:f5:bc:82:f4: 70:2e:0f:13:1d:1d:6c:29:ab:ea:13:82:d5:8b:94: be:0e:c4:07:43:5e:39:e3:1f:a3:fe:2a:92:4f:93: 57:2f:17:46:37:2a:ca:49:49:92:c9:de:cc:4b:21: aa:73:20:d8:82:88:a6:85:69:2f:f5:ac:0b:0b:c1: 55:c1:a9:20:5a:cf:09:ed:95:11:1c:84:98:c0:5c: 15:f8:e8:a9:e0:92:49:81:e8:47:46:7e:6d:c7:1b: ef:ee:3f:bf:46:ba:da:6c:fd:5d:2f:ff:34:03:9d: cb:d1:51:f0:00:a1:35:71:f7:69:87:5c:99:67:76: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:5F:45:0C:B6:06:2F:5D:2C:07:C3:79:B1:F8:77:E8:9C:0C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.10.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:de:4b:a3:0b:e2:5a:e1:d9:e3:6d:6c:c1:c5:28:26:71:c5: f0:f8:35:1a:23:93:1e:bb:07:42:d9:cc:0f:09:ac:ed:41:0d: 49:35:23:50:71:05:40:13:8a:30:8b:8c:a4:2e:be:9f:25:60: 51:d4:0a:02:e5:d3:cc:61:c9:49:6a:23:a6:79:93:4d:6a:ac: 07:90:5e:f3:41:9c:8f:1a:93:4d:0a:34:fe:5f:f4:4b:d1:d1: 9d:18:29:69:6a:90:fd:6d:ff:87:45:0f:60:46:6a:5b:32:fc: bf:d0:45:92:af:2f:73:2d:a6:db:53:c2:a8:76:f0:24:89:8d: 7b:13:14:db:e9:f9:df:19:6b:24:01:c5:9c:00:c5:b6:7d:ad: de:79:a5:e3:4e:27:f0:59:6e:c9:9e:b5:8e:8b:11:8b:14:23: 56:75:66:d1:75:a2:98:5a:50:6e:55:7f:53:27:51:33:2a:aa: 52:b2:fb:ac:97:17:9e:54:bf:f6:7f:5d:69:f5:63:91:f2:5f: 35:55:8d:65:3d:46:5f:a6:d7:5e:09:4f:59:44:11:0a:3e:25: ca:8f:d4:6a:24:60:3b:7c:0a:db:99:b2:f9:8a:51:38:f5:19: 3a:0d:0e:f8:72:9a:5b:5d:75:c2:c1:dd:7f:39:cb:89:86:09: 7f:13:a9:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdTlwIiH54CYbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YThhOTE1MTItNzk3MS00MDUxLTk4NmQtYTQ4ZDdkOTA2ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRBWTbl7xUMiyIVI/WAbwJBFMD100dr2TXue FDUUeJaScoCXMI5rcXdFYP10WPcnB0w2/Lg1nl9Az9oNyAXkc2X188S6YR4PpxjP RjY3A7TZt3vS6A6/c52sFHY1b2GyB0Q10NvozLWU3Lu7sHo6dGHRy/55KKlRBEUQ K0oCsZLLDPW8gvRwLg8THR1sKavqE4LVi5S+DsQHQ1454x+j/iqST5NXLxdGNyrK SUmSyd7MSyGqcyDYgoimhWkv9awLC8FVwakgWs8J7ZURHISYwFwV+Oip4JJJgehH Rn5txxvv7j+/RrrabP1dL/80A53L0VHwAKE1cfdph1yZZ3bvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESIX0UMtgYvXSwHw3mx+HfonAzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYjZiNGU5MTYtOWExNS0z MTQwLTk1NTItZTRiYmY3NDUxMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDeS6ML4lrh2eNtbMHFKCZxxfD4NRojkx67B0LZzA8JrO1BDUk1I1Bx BUATijCLjKQuvp8lYFHUCgLl08xhyUlqI6Z5k01qrAeQXvNBnI8ak00KNP5f9EvR 0Z0YKWlqkP1t/4dFD2BGalsy/L/QRZKvL3MtpttTwqh28CSJjXsTFNvp+d8ZayQB xZwAxbZ9rd55peNOJ/BZbsmetY6LEYsUI1Z1ZtF1ophaUG5Vf1MnUTMqqlKy+6yX F55Uv/Z/XWn1Y5HyXzVVjWU9Rl+m114JT1lEEQo+JcqP1GokYDt8CtuZsvmKUTj1 GToNDvhymltddcLB3X85y4mGCX8TqTQ= -----END CERTIFICATE-----Generated at Tue Jul 1 18:05:29 2025 by rpki-client