$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa File: 2a80d895-c606-39f8-a6c7-314e5449573e.roa (raw, json) Hash identifier: DA1vU8e6DXXw273z1tyHEFCEPfWH9FXdy7lHKDbOess= Subject key identifier: 66:98:7E:89:59:4E:DA:B8:05:75:E6:01:CD:0B:25:66:49:F5:EC:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB3717F7B9F99F80AE580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 27544 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b3:71:7f:7b:9f:99:f8:0a:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=c734f5db-1d0a-4073-af68-12743cb21649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:03:aa:b6:59:2d:af:06:b2:d2:01:f1:b1: 85:a7:4c:5b:6e:9b:35:1c:a8:ff:ae:ea:92:1e:c0: 52:e5:55:52:91:1d:df:83:3b:da:01:fa:84:5c:56: c1:af:27:8b:4f:cc:56:23:e5:1d:4a:2c:4b:17:ec: 4f:8a:61:2b:f2:cf:d5:2c:ea:cf:a1:f2:45:0a:aa: 97:f0:1d:9e:96:9a:34:09:17:58:c0:ef:e1:fb:9d: 6d:29:ad:05:8d:95:1e:7a:50:09:49:b0:28:cf:c4: df:77:e4:14:69:ad:17:38:4c:7f:ac:b3:1a:0d:e4: 40:4a:fa:84:ae:51:95:dc:cd:0e:2c:62:64:a9:74: f5:57:26:68:bb:16:b2:51:50:f2:69:46:b5:52:4b: c6:fe:83:1c:c1:be:f7:0e:0a:68:47:7c:dd:fa:91: b6:f6:57:19:8d:ee:df:69:90:f4:f4:59:b0:de:06: 49:1f:52:fe:b2:c8:72:5c:62:8e:6d:6c:98:5b:be: fa:e2:64:a9:8b:0e:cb:e0:38:e5:61:65:49:8c:dd: 07:b5:30:d3:7b:62:52:11:28:30:6a:de:fd:5b:29: 33:34:54:6b:a3:ef:ea:7d:be:ab:51:f3:ee:ff:eb: 85:32:92:ab:59:5e:3e:82:c2:98:9e:c0:ee:3d:b4: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:98:7E:89:59:4E:DA:B8:05:75:E6:01:CD:0B:25:66:49:F5:EC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a80d895-c606-39f8-a6c7-314e5449573e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:65:c6:0d:42:a0:49:86:f5:0b:1f:be:ad:c3:ac:6d:14: 9f:9f:a6:5f:9e:9a:5f:64:6e:63:05:0f:1b:8c:91:17:8e:4c: 4a:bb:f4:66:73:f5:6a:b9:f2:c3:68:6d:0b:85:1e:89:74:39: 25:d8:34:5d:53:d2:c0:92:82:ee:be:82:34:37:4c:5e:02:fa: 75:db:6a:c2:bd:1e:5d:d9:73:f0:29:48:d9:7a:1f:1a:ce:78: 9f:33:b3:3b:9b:c1:2a:f7:aa:f1:9f:b7:9e:f0:6e:67:5c:cb: a6:81:53:e4:40:75:aa:39:ce:58:b8:92:41:6c:d8:6f:4c:d2: a5:3a:78:77:3d:9a:c4:08:9e:ff:53:6e:a6:59:76:2a:43:20: 71:d2:c0:a0:d0:4a:ef:5c:68:d0:51:ee:d5:57:eb:53:21:c5: 62:7e:22:e9:47:87:34:43:f4:be:4b:d8:26:e3:97:ee:d7:b4: c2:c6:62:06:7e:25:17:9a:fc:ca:4e:48:e0:a8:02:d9:28:71: 3d:2d:9a:e4:a3:da:43:0a:27:06:73:44:49:b7:77:c3:fa:1f: ec:c5:cb:e8:1f:03:11:24:c7:86:b7:eb:e0:c0:1d:31:81:0f: c8:22:ee:e7:fe:a1:05:d3:49:58:78:5d:95:18:3f:48:e0:16: 1d:0e:d4:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7Nxf3ufmfgK5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YzczNGY1ZGItMWQwYS00MDczLWFmNjgtMTI3NDNjYjIxNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQDqrZZLa8GstIB8bGFp0xbbps1HKj/ruqS HsBS5VVSkR3fgzvaAfqEXFbBryeLT8xWI+UdSixLF+xPimEr8s/VLOrPofJFCqqX 8B2elpo0CRdYwO/h+51tKa0FjZUeelAJSbAoz8Tfd+QUaa0XOEx/rLMaDeRASvqE rlGV3M0OLGJkqXT1VyZouxayUVDyaUa1UkvG/oMcwb73DgpoR3zd+pG29lcZje7f aZD09Fmw3gZJH1L+sshyXGKObWyYW7764mSpiw7L4DjlYWVJjN0HtTDTe2JSESgw at79WykzNFRro+/qfb6rUfPu/+uFMpKrWV4+gsKYnsDuPbRqGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGaYfolZTtq4BXXmAc0LJWZJ9exsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE4MGQ4OTUtYzYwNi0z OWY4LWE2YzctMzE0ZTU0NDk1NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDpWXGDUKgSYb1Cx++rcOsbRSfn6ZfnppfZG5jBQ8bjJEXjkxKu/Rm c/VqufLDaG0LhR6JdDkl2DRdU9LAkoLuvoI0N0xeAvp122rCvR5d2XPwKUjZeh8a znifM7M7m8Eq96rxn7ee8G5nXMumgVPkQHWqOc5YuJJBbNhvTNKlOnh3PZrECJ7/ U26mWXYqQyBx0sCg0ErvXGjQUe7VV+tTIcVifiLpR4c0Q/S+S9gm45fu17TCxmIG fiUXmvzKTkjgqALZKHE9LZrko9pDCicGc0RJt3fD+h/sxcvoHwMRJMeGt+vgwB0x gQ/IIu7n/qEF00lYeF2VGD9I4BYdDtQo -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:47 2025 by rpki-client