$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa File: 2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa (raw, json) Hash identifier: U/W203c5Y8ZJTz4UcS1TGxTQMUEo8KtgC8NV3wZqK98= Subject key identifier: 36:E7:72:36:65:21:78:45:8D:D8:06:BA:E6:BA:F9:9E:9A:6A:33:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB29EA30ADCA13B3E2D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396549 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b2:9e:a3:0a:dc:a1:3b:3e:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=0d0517d1-8a79-49bc-955b-da05502bae92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:ac:a3:3c:f2:ce:11:aa:66:65:31:96:d1: e5:cf:78:ba:bf:ee:b8:90:90:20:41:6a:c9:89:a4: 07:05:91:25:bc:93:d8:d2:9a:01:9a:d7:01:3a:a2: 21:40:8b:63:9d:f3:f0:37:1c:d0:e6:06:d0:1c:48: 1b:a9:5a:b4:f6:4c:86:68:da:b8:ae:ad:e3:fe:65: 37:62:ed:e9:23:66:35:c7:9c:e7:14:9a:57:a5:a2: 00:aa:e7:2f:a6:ef:06:8b:4b:b9:e0:18:ea:a1:1c: 45:8a:84:35:ce:b5:3e:d6:94:04:ad:62:51:b6:36: 09:4f:74:d7:c9:73:18:6c:a9:08:d2:e6:b6:21:e1: aa:b7:fc:15:0b:11:ce:c0:45:5e:51:93:73:d3:ae: a9:9e:1c:bf:4a:14:43:8a:23:b8:a8:35:00:f3:de: 04:b8:5b:b8:6d:da:24:d3:c1:21:20:1e:0e:76:10: d8:7c:82:15:22:a7:61:64:50:0e:b3:1b:45:8c:5b: 18:f6:50:9e:df:0d:b2:a6:fd:42:a1:04:f1:eb:10: 67:ac:b6:25:f9:61:e3:6c:7b:2c:8b:d2:4b:76:56: b6:5f:28:0c:80:27:09:4b:30:0b:18:6d:2c:8c:da: a8:37:74:e2:9c:f8:99:e8:6d:e5:1d:0e:8d:84:a1: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:72:36:65:21:78:45:8D:D8:06:BA:E6:BA:F9:9E:9A:6A:33:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:66:49:59:36:1a:fe:22:b0:e5:4d:48:40:03:31:15:4c:27: dd:fe:4e:13:72:8c:41:84:60:66:b8:97:dd:3e:d9:d3:61:bc: b4:1f:4b:d8:ef:5d:5a:c3:af:27:74:e5:b9:6f:1f:c6:93:c2: af:3d:e2:e6:71:c5:ab:01:71:e0:d5:df:28:a4:af:82:78:bd: 66:9b:6e:d3:23:61:4b:07:bb:d0:6c:09:b6:c2:e1:14:2f:7d: 73:b7:13:b8:03:83:72:1c:12:57:71:bd:0b:1c:05:8e:bd:79: 68:55:e3:82:94:ac:07:70:9a:6f:f3:08:ad:0c:26:d5:3b:29: 42:19:42:c2:bc:29:90:be:2b:61:f6:86:6c:38:15:e3:ce:53: 9a:9c:40:ac:3b:da:eb:fb:65:d2:4b:5e:58:ee:f8:38:8a:45: f8:ab:37:f4:58:b3:c4:cb:16:ae:33:5e:e6:aa:83:87:ea:fd: aa:f8:d3:0a:ec:27:56:5c:11:80:7d:25:f2:b1:0a:c2:aa:83: 65:e3:cd:99:06:f2:46:08:e0:3c:0a:75:ac:57:11:1b:03:ce: 90:20:94:f2:b9:16:3a:1c:5f:f9:aa:46:76:48:22:39:27:79: 34:1a:07:03:10:a1:88:5f:5e:38:5f:e4:92:96:e0:aa:46:7a: ef:55:bd:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7KeowrcoTs+LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MGQwNTE3ZDEtOGE3OS00OWJjLTk1NWItZGEwNTUwMmJhZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosWsozzyzhGqZmUxltHlz3i6v+64kJAgQWrJ iaQHBZElvJPY0poBmtcBOqIhQItjnfPwNxzQ5gbQHEgbqVq09kyGaNq4rq3j/mU3 Yu3pI2Y1x5znFJpXpaIAqucvpu8Gi0u54BjqoRxFioQ1zrU+1pQErWJRtjYJT3TX yXMYbKkI0ua2IeGqt/wVCxHOwEVeUZNz066pnhy/ShRDiiO4qDUA894EuFu4bdok 08EhIB4OdhDYfIIVIqdhZFAOsxtFjFsY9lCe3w2ypv1CoQTx6xBnrLYl+WHjbHss i9JLdla2XygMgCcJSzALGG0sjNqoN3TinPiZ6G3lHQ6NhKH2aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDbncjZlIXhFjdgGuua6+Z6aajOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUzOTk3MzItMmI0Mi0z MzVjLWIzZjctYmNkYTRkZDA5Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKZklZNhr+IrDlTUhAAzEVTCfd/k4TcoxBhGBmuJfdPtnTYby0H0vY 711aw68ndOW5bx/Gk8KvPeLmccWrAXHg1d8opK+CeL1mm27TI2FLB7vQbAm2wuEU L31ztxO4A4NyHBJXcb0LHAWOvXloVeOClKwHcJpv8witDCbVOylCGULCvCmQvith 9oZsOBXjzlOanECsO9rr+2XSS15Y7vg4ikX4qzf0WLPEyxauM17mqoOH6v2q+NMK 7CdWXBGAfSXysQrCqoNl482ZBvJGCOA8CnWsVxEbA86QIJTyuRY6HF/5qkZ2SCI5 J3k0GgcDEKGIX144X+SSluCqRnrvVb3r -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:53 2025 by rpki-client