$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa File: 23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa (raw, json) Hash identifier: 3xP/HTqoaxGmXI/fXPdO2kcji2IzfpS/L5COGg6vEjs= Subject key identifier: F1:D2:1B:41:EC:B9:9A:DC:9E:DA:DC:1C:46:BB:43:C7:50:25:8E:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB7C9DD3C65D06DA9E250 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396566 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b7:c9:dd:3c:65:d0:6d:a9:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=ab2fb12c-5fc1-471f-8f4d-09a873e83eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:42:89:0f:47:52:ea:07:a9:af:de:bb:60: 50:07:b0:4e:28:02:22:ba:90:32:5a:13:85:dc:99: 14:14:c9:f6:94:67:76:a5:a5:e4:66:8e:cf:8f:64: 0e:3a:d3:36:08:13:76:0b:5c:a9:f2:03:40:89:ab: c2:e5:80:84:7c:6d:5b:70:f5:20:dd:cf:b3:4c:f3: 5a:4f:83:1b:d4:b3:e5:b1:aa:e6:82:56:37:2e:c9: f2:d3:0d:12:95:97:24:02:3d:a6:47:56:dc:1f:c5: bc:a6:f0:66:fa:ee:d3:a0:f8:bc:18:02:cd:57:07: 0f:fb:a2:69:55:2e:19:4a:7c:fd:c9:9d:5d:9b:97: 5b:24:c4:91:9f:cd:3a:89:59:80:f3:97:1c:22:f8: ce:f7:00:51:1d:35:85:fc:b2:01:14:76:5b:c9:2b: 7e:30:16:98:73:b5:fe:40:f5:fa:e1:0d:10:6e:6f: 23:f3:2b:e1:bc:00:9a:bc:47:91:9a:2c:d8:48:94: 91:fc:0c:26:30:17:78:cc:2e:c8:07:25:60:40:42: 81:4f:bf:58:9b:eb:d4:d6:42:2f:9d:b6:d7:58:d2: 3e:ca:76:7e:81:4d:86:58:ba:2a:96:27:4b:31:33: 7c:7c:1b:84:a0:90:d1:5c:c2:48:4d:81:17:f3:98: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:1B:41:EC:B9:9A:DC:9E:DA:DC:1C:46:BB:43:C7:50:25:8E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23bb599a-94f4-3ac4-8cb1-07b20c9c7a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cc:4b:ca:da:99:15:1c:c9:3a:8d:16:6a:96:08:9f:b2:97: 75:fd:72:00:1a:19:39:f3:f4:2e:56:e2:a2:40:a2:70:a6:99: ec:8d:8c:94:ae:92:ab:6a:fe:e9:f2:ca:2f:09:c4:85:56:de: 28:54:4d:f9:80:b8:df:18:fc:c5:11:79:a9:e3:a3:be:28:5c: 48:f7:ae:28:cf:ca:78:fb:a4:d6:83:36:9c:a3:44:7b:d0:41: 68:17:83:54:95:ef:9c:bc:18:d0:d3:99:aa:6e:38:bf:61:2e: 77:f2:cd:32:46:89:ae:75:e6:30:b4:89:01:de:9d:d7:4c:cf: 21:48:9b:26:2a:f4:48:a3:e1:95:7c:4d:2e:ab:fd:0b:28:36: 9b:f5:ce:fc:dc:ae:52:6c:97:aa:1b:95:1f:66:d9:84:30:c1: b9:96:64:dc:3a:6c:2f:7a:82:de:dd:9f:18:e4:39:9d:16:12: 2c:dc:45:c1:cc:d1:68:50:ee:f2:dc:35:c9:79:05:8f:8c:8c: 78:59:b7:67:fd:94:ea:15:86:d8:d3:43:a6:c6:fe:96:bb:0e: 62:c6:9d:bd:fd:57:2f:f5:32:f8:6a:06:ee:36:46:42:e4:ba: ef:2e:73:b3:d2:ab:c0:33:df:7f:b9:9f:7c:ae:4e:13:a4:8e: f3:a5:86:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7fJ3Txl0G2p4lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YWIyZmIxMmMtNWZjMS00NzFmLThmNGQtMDlhODczZTgzZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJlCiQ9HUuoHqa/eu2BQB7BOKAIiupAyWhOF 3JkUFMn2lGd2paXkZo7Pj2QOOtM2CBN2C1yp8gNAiavC5YCEfG1bcPUg3c+zTPNa T4Mb1LPlsarmglY3Lsny0w0SlZckAj2mR1bcH8W8pvBm+u7ToPi8GALNVwcP+6Jp VS4ZSnz9yZ1dm5dbJMSRn806iVmA85ccIvjO9wBRHTWF/LIBFHZbySt+MBaYc7X+ QPX64Q0Qbm8j8yvhvACavEeRmizYSJSR/AwmMBd4zC7IByVgQEKBT79Ym+vU1kIv nbbXWNI+ynZ+gU2GWLoqlidLMTN8fBuEoJDRXMJITYEX85gfnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPHSG0HsuZrcntrcHEa7Q8dQJY7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNiYjU5OWEtOTRmNC0z YWM0LThjYjEtMDdiMjBjOWM3YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByzEvK2pkVHMk6jRZqlgifspd1/XIAGhk58/QuVuKiQKJwppnsjYyU rpKrav7p8sovCcSFVt4oVE35gLjfGPzFEXmp46O+KFxI964oz8p4+6TWgzaco0R7 0EFoF4NUle+cvBjQ05mqbji/YS538s0yRomudeYwtIkB3p3XTM8hSJsmKvRIo+GV fE0uq/0LKDab9c783K5SbJeqG5UfZtmEMMG5lmTcOmwveoLe3Z8Y5DmdFhIs3EXB zNFoUO7y3DXJeQWPjIx4Wbdn/ZTqFYbY00Omxv6Wuw5ixp29/Vcv9TL4agbuNkZC 5LrvLnOz0qvAM99/uZ98rk4TpI7zpYbV -----END CERTIFICATE-----Generated at Mon Aug 4 15:42:02 2025 by rpki-client