$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa File: 7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa (raw, json) Hash identifier: mj/CF9RF9bMcjh/IQ6wLo+BLrrsLVhfKeEKvoOz2gkA= Subject key identifier: 41:2B:BC:B1:2E:78:F7:5C:09:59:04:34:6E:2A:98:81:B4:CB:7B:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB23341A55D470F504DB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 397194 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b2:33:41:a5:5d:47:0f:50:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=b813d32a-c904-4074-9d9e-00b44088c492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:16:7d:2a:f5:8e:8f:66:0e:7f:38:a2:c8: 01:61:58:c7:e5:6c:10:22:74:58:65:95:8d:63:11: 6a:c8:88:c7:2d:e2:0a:6c:b9:58:02:1b:d1:ff:e4: ec:83:9d:ad:b4:24:9b:09:8f:26:1b:c6:35:ef:5e: 7d:c3:a6:ce:20:4b:5b:7c:8e:42:a1:b2:de:b6:c6: c8:5c:f3:0a:31:5d:3c:4d:12:f5:dd:b2:fb:8a:9c: d5:0f:ba:ce:23:b1:cd:f0:6c:d4:f9:cd:c3:4a:bb: a7:32:f7:48:61:47:23:ae:77:98:8b:0e:b0:f7:87: bc:6f:b7:b9:d0:52:f1:28:6d:b8:71:b6:17:20:24: 42:70:05:48:83:0c:f8:ad:2e:11:b3:34:1a:7b:7f: ef:df:a3:45:24:6c:16:fe:b3:1f:50:32:03:ec:7a: 9e:0d:e0:78:53:66:f9:59:d0:7a:d5:1b:80:4f:6c: 87:83:b7:08:c0:f9:e5:7c:0b:44:2b:3f:15:42:1b: cb:48:3e:f8:e6:df:97:68:19:67:71:99:d9:c3:11: e6:75:95:a3:26:d2:9b:fa:3c:a6:89:84:dd:03:99: 27:d0:7a:73:01:57:42:e6:c9:24:64:83:84:9e:ea: 35:31:f2:91:0a:b7:ff:83:75:e4:f3:5a:fd:10:e0: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2B:BC:B1:2E:78:F7:5C:09:59:04:34:6E:2A:98:81:B4:CB:7B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7a:12:36:4f:26:14:c4:a7:82:5e:0c:45:f7:89:e3:36:3d: 69:d0:e0:26:f2:f4:54:a1:13:a8:81:00:c9:5d:3b:02:3f:4a: 11:d4:0f:e7:9f:ec:bc:e3:46:45:c8:6f:b6:90:fc:10:95:08: 35:28:f7:a1:9f:59:54:3f:3d:b1:8d:1b:90:bc:ca:51:0e:72: 5e:bc:7f:4d:61:f3:a9:a8:ff:0d:4f:ac:60:e3:c8:3a:47:1f: 8d:cc:49:3a:7b:ac:77:0b:ea:71:9e:cb:6f:ca:e5:15:15:06: c0:66:f0:b7:06:7f:5c:7e:78:ab:d3:ce:48:34:29:3e:d9:97: ac:2d:54:b0:48:00:9e:4d:92:e4:ac:57:8d:6d:0d:a7:c6:da: cc:d0:a4:e5:91:da:b1:0a:cf:88:96:90:9d:27:79:b6:cc:b5: 7b:0d:e3:a5:56:2f:97:f5:7a:bb:70:56:13:9c:46:b0:79:de: 98:90:1a:9e:23:03:de:38:a9:ce:b0:4a:58:76:3b:58:b6:7f: b6:e9:79:fa:af:8b:aa:ac:10:85:0e:4d:1a:dd:ce:1e:3b:39: b6:75:56:cf:7f:e3:8f:59:1f:82:a4:76:b3:56:d8:d1:8d:65: 06:67:08:3f:07:a0:a4:e2:f0:30:68:a7:d0:fd:7e:b0:fc:1f: c4:dc:ad:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7IzQaVdRw9QTbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YjgxM2QzMmEtYzkwNC00MDc0LTlkOWUtMDBiNDQwODhjNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLwWfSr1jo9mDn84osgBYVjH5WwQInRYZZWN YxFqyIjHLeIKbLlYAhvR/+Tsg52ttCSbCY8mG8Y17159w6bOIEtbfI5CobLetsbI XPMKMV08TRL13bL7ipzVD7rOI7HN8GzU+c3DSrunMvdIYUcjrneYiw6w94e8b7e5 0FLxKG24cbYXICRCcAVIgwz4rS4RszQae3/v36NFJGwW/rMfUDID7HqeDeB4U2b5 WdB61RuAT2yHg7cIwPnlfAtEKz8VQhvLSD745t+XaBlncZnZwxHmdZWjJtKb+jym iYTdA5kn0HpzAVdC5skkZIOEnuo1MfKRCrf/g3Xk81r9EODs/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEErvLEuePdcCVkENG4qmIG0y3voMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2EzMzdiOTMtMmJkZS0z YTAwLWI3NDQtZGRkMTkyYmE0ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFehI2TyYUxKeCXgxF94njNj1p0OAm8vRUoROogQDJXTsCP0oR1A/n n+y840ZFyG+2kPwQlQg1KPehn1lUPz2xjRuQvMpRDnJevH9NYfOpqP8NT6xg48g6 Rx+NzEk6e6x3C+pxnstvyuUVFQbAZvC3Bn9cfnir085INCk+2ZesLVSwSACeTZLk rFeNbQ2nxtrM0KTlkdqxCs+IlpCdJ3m2zLV7DeOlVi+X9Xq7cFYTnEawed6YkBqe IwPeOKnOsEpYdjtYtn+26Xn6r4uqrBCFDk0a3c4eOzm2dVbPf+OPWR+CpHazVtjR jWUGZwg/B6Ck4vAwaKfQ/X6w/B/E3K0W -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:46 2025 by rpki-client