$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: neQu1PQ2XsryN3JP3cmlh853NUwoM6CGvqdNK2FHgRA= Subject key identifier: 82:9A:75:26:3A:6F:1C:F8:B0:41:11:DB:E5:3F:F7:50:10:84:A8:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB73335AFAEC654492D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b7:33:35:af:ae:c6:54:49:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=63cb2967-5490-491e-8a1d-553a8f2ce309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:cd:9c:83:c2:d8:f4:37:5f:61:0f:55:ce: 8f:fd:95:8e:17:b6:3f:67:11:8f:79:1b:df:6b:f1: 62:3e:58:e7:5e:3c:b7:8a:d8:1c:ba:f0:18:ec:8c: e2:d2:28:70:ba:66:6c:30:4a:b9:3b:ed:ae:22:84: 6a:94:b9:27:d5:50:6f:9a:65:52:2a:99:a6:ab:f2: 02:ff:c9:fa:d7:66:0e:9b:60:9f:3b:5f:03:cb:71: 1e:e3:d7:b1:04:b4:93:74:d6:2c:41:f5:7b:8d:a4: 70:0f:1b:be:99:7c:33:a9:3a:77:26:67:b9:bf:b7: e6:39:70:9f:31:af:04:e3:77:2b:e9:ed:a1:59:72: a0:98:6a:b4:77:22:0f:1f:58:c7:df:52:bb:10:06: 78:b2:1c:da:e3:28:93:44:d8:c8:27:7b:8f:d6:48: 72:8e:78:e1:09:d5:33:6c:82:14:cd:e3:50:a9:38: 40:5c:47:c7:ad:d1:6a:a5:cf:6d:df:f1:df:28:56: d5:04:ac:37:84:79:8a:23:ff:2c:56:94:96:ca:25: 80:92:ed:85:f5:20:aa:ef:d2:8b:3d:5c:b8:33:53: e0:91:44:86:f4:9c:e1:c6:50:33:8c:b3:0d:b4:67: ed:cc:3a:8e:89:7b:59:ea:9c:64:1a:e0:42:40:c7: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9A:75:26:3A:6F:1C:F8:B0:41:11:DB:E5:3F:F7:50:10:84:A8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e7:6e:80:40:4e:98:3f:49:a9:ed:76:e9:c2:76:56:c0:41: c7:87:b9:fd:87:f1:be:64:d4:f4:7b:7f:61:5e:2a:44:9d:34: 27:81:69:be:b4:fe:bf:df:bc:99:73:8e:34:14:00:87:14:a5: ba:af:70:b8:12:a3:41:c9:75:a9:07:94:bc:03:7a:2d:5c:03: 3f:5a:3c:c6:fb:94:1f:6e:a5:4f:46:73:e7:ac:cc:18:19:0c: e3:f0:60:4a:d4:b6:89:1f:82:f1:f5:07:c1:51:9c:44:2b:44: c0:72:54:f8:25:f8:a0:45:29:1d:3f:77:3c:3d:47:2f:a1:ca: 11:ab:1a:c7:67:da:2a:03:ce:05:e8:7e:cb:48:6b:43:cb:93: 71:5d:b6:6c:2a:ae:a1:d9:5f:fa:09:10:74:b6:26:69:86:5a: 62:e5:cd:32:ac:c2:7c:5e:39:54:f9:20:0d:f9:3c:09:f1:61: ed:9b:b9:0e:68:a4:5e:d1:74:b0:fe:3b:84:03:e2:02:3c:94: 45:cb:77:7a:83:48:53:bb:0b:24:a0:26:d6:e5:00:e0:8d:8f: 3f:e9:b9:8c:03:8c:45:12:83:62:d4:5b:6a:b3:5e:da:76:e3: da:aa:cf:8f:3e:88:56:9e:dc:f0:63:84:9f:95:4e:9e:0b:a9: f1:0c:58:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7czNa+uxlRJLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NjNjYjI5NjctNTQ5MC00OTFlLThhMWQtNTUzYThmMmNlMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg3NnIPC2PQ3X2EPVc6P/ZWOF7Y/ZxGPeRvf a/FiPljnXjy3itgcuvAY7Izi0ihwumZsMEq5O+2uIoRqlLkn1VBvmmVSKpmmq/IC /8n612YOm2CfO18Dy3Ee49exBLSTdNYsQfV7jaRwDxu+mXwzqTp3Jme5v7fmOXCf Ma8E43cr6e2hWXKgmGq0dyIPH1jH31K7EAZ4shza4yiTRNjIJ3uP1khyjnjhCdUz bIIUzeNQqThAXEfHrdFqpc9t3/HfKFbVBKw3hHmKI/8sVpSWyiWAku2F9SCq79KL PVy4M1PgkUSG9JzhxlAzjLMNtGftzDqOiXtZ6pxkGuBCQMf2AQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIKadSY6bxz4sEER2+U/91AQhKizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAG526AQE6YP0mp7XbpwnZWwEHHh7n9h/G+ZNT0e39hXipEnTQngWm+ tP6/37yZc440FACHFKW6r3C4EqNByXWpB5S8A3otXAM/WjzG+5QfbqVPRnPnrMwY GQzj8GBK1LaJH4Lx9QfBUZxEK0TAclT4JfigRSkdP3c8PUcvocoRqxrHZ9oqA84F 6H7LSGtDy5NxXbZsKq6h2V/6CRB0tiZphlpi5c0yrMJ8XjlU+SAN+TwJ8WHtm7kO aKRe0XSw/juEA+ICPJRFy3d6g0hTuwskoCbW5QDgjY8/6bmMA4xFEoNi1Ftqs17a duPaqs+PPohWntzwY4SflU6eC6nxDFjC -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:33 2025 by rpki-client