$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa File: 85aef401-6abe-34e9-8ada-bebf1cc2e924.roa (raw, json) Hash identifier: mBcYZs+idqXAZjE36F1r2PWpiAl9iU84F9C7GXCa/A0= Subject key identifier: 1D:A2:4F:19:8C:05:92:43:F4:36:7D:E2:99:A4:1B:0A:03:40:63:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB55622B0CE77B3CBA580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396569 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b5:56:22:b0:ce:77:b3:cb:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=9bff0f28-106d-4f8c-8022-8c096a18b489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:af:73:59:03:2e:8f:90:98:dd:80:d7:e0: 6e:57:1e:b4:db:25:97:43:58:ac:34:0b:d3:d8:6f: 8d:0a:a6:34:08:e7:d4:65:89:af:35:22:4e:a7:66: bb:a5:25:7a:31:0b:98:55:b5:fb:24:34:69:6c:c4: 2f:7f:4f:a0:8c:52:48:24:a9:42:6c:d0:ac:04:49: cb:bf:e2:24:b6:2a:4e:21:bc:23:57:57:a7:ca:56: d4:6b:e1:ed:e1:9a:bd:a0:18:31:1c:ba:3e:e3:13: 32:f3:82:71:8a:fa:c0:98:44:3c:ba:c4:22:a8:2f: ba:c9:98:66:22:25:8e:ed:d2:2f:c4:46:5c:26:a0: 4d:73:eb:8e:da:d7:34:6a:25:df:18:d2:aa:a9:15: 03:8d:c9:5d:f4:c7:95:fd:cd:7b:a7:75:12:95:00: 1c:b3:e3:b5:7a:e8:56:0c:8e:90:36:4d:a3:2b:c3: 4e:60:a3:3d:7d:2b:29:cc:f6:13:70:c1:cd:e6:1f: 54:ef:ba:06:1d:ac:02:fe:ee:c7:21:31:30:be:fe: ab:79:08:07:9d:e2:f5:c0:14:c2:9a:75:cf:19:5a: 99:9d:e9:7e:c9:ec:15:48:9b:da:0d:da:35:9f:90: ff:97:27:c3:7a:7d:72:c6:b1:ac:bf:82:f3:6a:78: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:4F:19:8C:05:92:43:F4:36:7D:E2:99:A4:1B:0A:03:40:63:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85aef401-6abe-34e9-8ada-bebf1cc2e924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:06:e8:f7:31:1a:40:33:31:c0:1b:62:66:a6:e6:f3:c7:40: 5f:75:2c:17:44:06:db:a8:8f:98:f0:90:34:a0:80:b9:dd:9d: 2f:ce:6b:cb:7c:2a:cf:8f:91:f7:4c:c5:33:e6:14:b0:0d:09: bd:0e:d9:22:d6:31:bc:4a:57:dd:52:d7:3a:a5:d6:b6:68:b1: 5a:02:29:da:03:cf:88:00:74:df:45:d7:0f:d0:df:64:29:e0: fd:4a:7b:02:66:70:b3:2c:f8:ec:b3:53:43:70:51:f0:75:23: cb:21:e1:d4:fb:97:17:c6:2a:24:44:b7:a3:e1:49:1d:f5:ae: 29:91:e0:da:7d:90:b7:10:f6:eb:a6:89:f5:31:41:78:92:f2: dc:04:52:02:79:c1:75:c4:dc:cc:4d:a9:6d:cb:e4:80:67:12: 77:c2:dc:07:f2:97:9f:b1:2b:a5:4e:0d:7c:c4:e4:0e:4e:af: f5:d3:90:23:bf:a2:63:9d:e4:9c:4b:84:c3:ee:b1:9c:de:5d: 28:0c:e8:d5:6c:89:a4:77:15:3a:56:6f:41:5f:4a:9d:9c:44: 95:7c:ab:ad:93:ed:a6:d9:9e:66:34:53:7b:ec:eb:8e:47:cd: 6d:12:6d:e1:c6:26:80:e7:51:bb:69:b5:c5:51:ae:d6:d3:65: 81:70:b4:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7VWIrDOd7PLpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk OWJmZjBmMjgtMTA2ZC00ZjhjLTgwMjItOGMwOTZhMThiNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyvc1kDLo+QmN2A1+BuVx602yWXQ1isNAvT 2G+NCqY0COfUZYmvNSJOp2a7pSV6MQuYVbX7JDRpbMQvf0+gjFJIJKlCbNCsBEnL v+IktipOIbwjV1enylbUa+Ht4Zq9oBgxHLo+4xMy84JxivrAmEQ8usQiqC+6yZhm IiWO7dIvxEZcJqBNc+uO2tc0aiXfGNKqqRUDjcld9MeV/c17p3USlQAcs+O1euhW DI6QNk2jK8NOYKM9fSspzPYTcMHN5h9U77oGHawC/u7HITEwvv6reQgHneL1wBTC mnXPGVqZnel+yewVSJvaDdo1n5D/lyfDen1yxrGsv4LzangsUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB2iTxmMBZJD9DZ94pmkGwoDQGNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhZWY0MDEtNmFiZS0z NGU5LThhZGEtYmViZjFjYzJlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApBuj3MRpAMzHAG2Jmpubzx0BfdSwXRAbbqI+Y8JA0oIC53Z0vzmvL fCrPj5H3TMUz5hSwDQm9Dtki1jG8SlfdUtc6pda2aLFaAinaA8+IAHTfRdcP0N9k KeD9SnsCZnCzLPjss1NDcFHwdSPLIeHU+5cXxiokRLej4Ukd9a4pkeDafZC3EPbr pon1MUF4kvLcBFICecF1xNzMTalty+SAZxJ3wtwH8pefsSulTg18xOQOTq/105Aj v6JjneScS4TD7rGc3l0oDOjVbImkdxU6Vm9BX0qdnESVfKutk+2m2Z5mNFN77OuO R81tEm3hxiaA51G7abXFUa7W02WBcLSq -----END CERTIFICATE-----Generated at Wed Aug 6 07:53:19 2025 by rpki-client