$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa File: 40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa (raw, json) Hash identifier: ZikmnXAtTRMkKaQg8O01aHOb5UlYH557YM6AhBEbC9w= Subject key identifier: DE:FB:51:F3:D1:0C:3F:C7:08:C6:6C:67:EF:FE:85:DF:16:E8:5D:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB634643C7422CE478EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 20431 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b6:34:64:3c:74:22:ce:47:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=d8369f7d-eba8-4d4e-88d1-72d3b7a3b3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:d3:e8:a2:6a:11:dd:7a:5c:a3:bd:4a:9f: 3a:c5:55:7e:17:cf:ff:8d:a2:bd:20:4b:e9:c6:1e: 6d:f5:55:8c:df:b3:96:21:b3:3d:65:6e:dd:b7:3a: e9:c2:b6:0a:f4:ee:54:74:10:6d:be:58:18:96:59: 14:4b:43:72:bc:9e:00:a2:e8:4b:33:6a:e9:5e:6e: c7:80:64:85:b6:f0:9b:04:ca:4e:bb:bb:98:26:fa: fc:90:69:6f:76:7c:fc:63:94:43:f1:db:59:1e:1d: d5:d2:1f:d7:ea:7a:b3:ba:65:2b:09:22:28:5d:af: 92:a3:16:6b:ea:41:82:c2:db:6b:4e:65:e4:e8:4e: d9:45:aa:bf:ac:03:f6:27:20:16:b4:f1:f1:e8:7a: 32:34:ec:5e:66:aa:59:86:4f:a1:50:18:79:f4:db: c8:c4:7a:c9:76:9d:9b:43:bb:ec:7d:b5:f6:f2:90: 08:2e:ff:b1:93:99:d5:d7:bc:8a:b0:e5:c3:4d:c7: f8:37:22:7f:e9:de:ba:cc:09:16:ad:4e:e9:0c:8a: ed:bf:6a:69:ff:99:5e:c8:3f:d4:8e:7f:49:e2:42: 65:cd:5e:81:1e:21:b5:60:e1:dc:9a:12:29:39:4b: 1e:fb:65:64:73:45:19:6b:d7:95:fa:32:fb:c0:7c: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:51:F3:D1:0C:3F:C7:08:C6:6C:67:EF:FE:85:DF:16:E8:5D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d3:f9:ae:a1:21:95:bc:4b:bf:34:27:b3:f8:57:14:af:17: 08:2c:ab:72:03:61:12:31:e6:7b:46:6a:26:f9:1a:45:45:17: 37:91:87:32:07:73:00:7d:bf:7a:4e:8b:c1:d3:f5:07:a5:91: 2f:84:cc:cb:4b:ae:26:e7:e4:bf:ab:4b:28:9c:a9:34:90:a1: b8:8b:8d:15:7e:bb:fa:c4:c5:f4:03:4d:48:2f:4b:e5:a7:c4: 24:c8:40:8b:02:fa:00:86:ae:43:cd:52:a5:de:d0:be:04:6b: 75:67:58:1e:33:06:62:f0:51:80:f5:ce:58:81:1e:e6:f7:c0: 61:97:09:2f:70:6b:a8:d3:b2:3e:c9:fb:f6:04:ea:fd:b5:42: ab:36:00:66:94:ee:6a:18:88:20:9e:ea:86:b5:bc:fb:83:e5: a4:00:9f:6a:5f:84:da:54:b0:74:e4:2c:49:02:a9:df:3a:95: ff:21:82:37:10:66:32:1f:d4:4d:b6:41:c4:41:89:c4:9e:76: db:32:23:07:2d:2a:05:a2:0f:3a:84:aa:c9:fd:dd:8e:dc:bc: 04:fb:92:ae:ab:bf:13:b4:fa:36:bf:35:c1:55:39:f6:89:84: 3f:92:af:4d:0b:97:9e:bc:00:0b:44:80:74:12:7b:83:2d:43: 96:8d:e9:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7Y0ZDx0Is5HjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZDgzNjlmN2QtZWJhOC00ZDRlLTg4ZDEtNzJkM2I3YTNiM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGXT6KJqEd16XKO9Sp86xVV+F8//jaK9IEvp xh5t9VWM37OWIbM9ZW7dtzrpwrYK9O5UdBBtvlgYllkUS0NyvJ4AouhLM2rpXm7H gGSFtvCbBMpOu7uYJvr8kGlvdnz8Y5RD8dtZHh3V0h/X6nqzumUrCSIoXa+SoxZr 6kGCwttrTmXk6E7ZRaq/rAP2JyAWtPHx6HoyNOxeZqpZhk+hUBh59NvIxHrJdp2b Q7vsfbX28pAILv+xk5nV17yKsOXDTcf4NyJ/6d66zAkWrU7pDIrtv2pp/5leyD/U jn9J4kJlzV6BHiG1YOHcmhIpOUse+2Vkc0UZa9eV+jL7wHyYCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN77UfPRDD/HCMZsZ+/+hd8W6F3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYjdhMWUtODA2My0z YWQ2LWFjNzMtNDUwYjRhYTQyYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB40/muoSGVvEu/NCez+FcUrxcILKtyA2ESMeZ7Rmom+RpFRRc3kYcy B3MAfb96TovB0/UHpZEvhMzLS64m5+S/q0sonKk0kKG4i40Vfrv6xMX0A01IL0vl p8QkyECLAvoAhq5DzVKl3tC+BGt1Z1geMwZi8FGA9c5YgR7m98BhlwkvcGuo07I+ yfv2BOr9tUKrNgBmlO5qGIggnuqGtbz7g+WkAJ9qX4TaVLB05CxJAqnfOpX/IYI3 EGYyH9RNtkHEQYnEnnbbMiMHLSoFog86hKrJ/d2O3LwE+5Kuq78TtPo2vzXBVTn2 iYQ/kq9NC5eevAALRIB0EnuDLUOWjek/ -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:42 2025 by rpki-client