$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa File: 684a7ddc-fe37-3898-a92f-52690e597b61.roa (raw, json) Hash identifier: AW3XNyT4zxN9XjOnxP/tV2dGIz5w3egseeBkSraTSYo= Subject key identifier: 21:6B:00:92:6E:1B:05:35:19:91:04:C3:79:84:9B:5C:04:08:20:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB8190AEA260922DAE200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396587 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b8:19:0a:ea:26:09:22:da:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=02716367-f3c1-4afb-a554-6329d2a545d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:10:15:74:1f:6d:e7:79:79:3b:0d:06:7f: 20:09:23:73:06:81:00:b0:e9:13:10:19:ee:a7:b5: f0:4c:54:a4:39:ad:52:53:41:91:9c:a9:f3:34:f1: 83:4c:09:df:21:74:ab:3f:9e:93:56:db:f8:bc:93: 30:38:8a:83:8f:c8:20:c7:51:6d:4a:39:89:f0:41: 29:f8:f1:dc:5b:9b:70:71:df:82:8c:6a:d9:6d:65: 07:c9:c1:25:e1:e9:ee:6f:c0:09:38:2d:ce:aa:d3: 85:99:ae:99:44:85:f8:1a:31:01:95:85:60:56:82: 73:15:a8:68:22:15:80:da:68:54:45:e5:df:e7:6d: ba:6f:77:0e:a7:62:b5:f3:79:a8:b1:13:a4:6d:ec: 37:55:47:f7:a4:0b:a9:fd:b2:28:5d:fa:25:f2:08: 92:a1:e7:50:c7:25:2f:07:68:ba:6b:55:aa:ef:dd: f0:13:14:b6:9f:14:e2:b7:29:57:c6:58:9e:04:75: 04:71:17:fb:b8:32:de:d9:7e:51:0c:66:c1:09:d5: 9e:69:47:c8:ff:59:13:9b:e8:50:da:e0:16:ba:45: 31:e6:a1:b3:13:45:ec:95:f2:0d:be:21:27:c7:1c: 5e:a3:eb:e3:c0:db:9e:e0:54:d4:90:d9:f9:32:0b: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:00:92:6E:1B:05:35:19:91:04:C3:79:84:9B:5C:04:08:20:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:27:ab:0b:20:1c:54:e6:8f:f1:c8:ee:10:42:4b:27:ed:26: a3:e2:6a:b7:ed:33:fa:a7:0b:a6:af:b3:d9:13:6a:19:9a:44: f9:10:f8:36:bb:b1:a4:43:50:f8:08:33:4b:28:36:5a:55:ff: 82:8f:d8:4c:d9:2b:14:41:1d:f4:e4:28:8f:3b:cb:fb:6a:75: 4a:27:77:fd:6d:c8:03:d8:0f:31:bc:d3:11:e7:19:de:1b:2d: 4f:4f:5a:f5:81:72:18:15:dd:c5:6a:15:7d:02:8b:49:8e:e6: 87:cd:b8:83:e0:ea:61:8a:de:47:41:fb:45:40:f4:1c:55:88: 02:26:5d:38:91:b9:ef:9f:c5:53:af:26:3b:8c:c8:c0:dd:e5: 5b:26:63:be:ec:4c:cb:8e:2e:21:c3:b1:5d:3a:34:94:df:e5: 97:aa:33:a3:57:b0:c4:19:ce:05:00:fa:22:8c:72:dd:53:9b: fc:26:5b:b6:9b:cb:07:0a:3f:da:2c:54:9b:ad:d9:d5:57:9a: f4:8f:d2:86:18:9a:ea:1a:63:89:bc:5f:dc:b1:19:9b:a4:c1: 81:7d:80:2f:46:fe:37:e0:fa:25:20:e2:17:77:e1:15:18:b7: df:a3:db:fb:20:f4:ce:3b:d0:2b:01:4d:1c:a5:70:8a:6a:33: 69:3a:e5:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7gZCuomCSLa4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MDI3MTYzNjctZjNjMS00YWZiLWE1NTQtNjMyOWQyYTU0NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYUQFXQfbed5eTsNBn8gCSNzBoEAsOkTEBnu p7XwTFSkOa1SU0GRnKnzNPGDTAnfIXSrP56TVtv4vJMwOIqDj8ggx1FtSjmJ8EEp +PHcW5twcd+CjGrZbWUHycEl4enub8AJOC3OqtOFma6ZRIX4GjEBlYVgVoJzFaho IhWA2mhUReXf5226b3cOp2K183mosROkbew3VUf3pAup/bIoXfol8giSoedQxyUv B2i6a1Wq793wExS2nxTitylXxlieBHUEcRf7uDLe2X5RDGbBCdWeaUfI/1kTm+hQ 2uAWukUx5qGzE0XslfINviEnxxxeo+vjwNue4FTUkNn5MgvqJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCFrAJJuGwU1GZEEw3mEm1wECCCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjg0YTdkZGMtZmUzNy0z ODk4LWE5MmYtNTI2OTBlNTk3YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4J6sLIBxU5o/xyO4QQksn7Saj4mq37TP6pwumr7PZE2oZmkT5EPg2 u7GkQ1D4CDNLKDZaVf+Cj9hM2SsUQR305CiPO8v7anVKJ3f9bcgD2A8xvNMR5xne Gy1PT1r1gXIYFd3FahV9AotJjuaHzbiD4Ophit5HQftFQPQcVYgCJl04kbnvn8VT ryY7jMjA3eVbJmO+7EzLji4hw7FdOjSU3+WXqjOjV7DEGc4FAPoijHLdU5v8Jlu2 m8sHCj/aLFSbrdnVV5r0j9KGGJrqGmOJvF/csRmbpMGBfYAvRv434PolIOIXd+EV GLffo9v7IPTOO9ArAU0cpXCKajNpOuX+ -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:39 2025 by rpki-client