$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa File: 9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa (raw, json) Hash identifier: KTKqqJ41jyK1qzf/w/3FUrAFfEnH0c+WRbY8dOQV1qs= Subject key identifier: D1:F9:32:19:12:62:2F:FE:EB:D9:B1:17:F6:97:12:73:32:5F:FE:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB464600E8DA3BA51D100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36618 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b4:64:60:0e:8d:a3:ba:51:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=7dd2c71b-6ac3-4396-9940-d894978b7a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:2c:19:d1:72:cf:8b:6a:1f:fb:d0:a8:46: b0:98:d9:c4:18:4b:da:54:e6:45:cf:12:78:2e:30: 00:1d:07:ee:f4:df:d7:d8:f4:5e:91:d4:5f:a2:66: 5a:80:ca:be:15:46:82:f1:e7:55:05:97:0c:bc:21: 0f:39:90:aa:d4:d9:86:c6:e4:f1:bf:fe:a9:74:7e: b7:a4:50:5c:72:43:2a:cd:ed:b4:8e:f7:36:4b:53: 97:b4:53:de:9a:ca:e9:ed:65:23:99:69:e2:22:bd: ea:49:37:e5:0a:ec:b1:85:dc:54:40:a1:56:62:4b: 90:61:2c:bc:37:0a:f1:b6:15:fd:f3:bb:c7:43:90: a3:61:c6:5f:05:e2:07:5f:50:34:49:3d:44:01:10: 1f:85:a2:0e:29:1f:fc:68:a4:96:48:01:24:80:98: 89:bc:01:5b:1b:ea:d1:cc:68:35:50:38:da:82:bb: b0:32:ba:ad:fa:92:ee:84:92:7f:f9:cf:eb:04:12: d2:97:d9:96:60:82:4c:30:a1:04:91:9c:13:fd:61: 67:0a:06:ae:bc:ab:6a:2c:b7:a6:22:13:3c:1b:44: 62:62:22:ae:6f:58:56:53:c5:be:15:cb:45:4e:ad: ae:dd:5b:3b:a7:0a:ea:52:87:29:bf:b1:3e:64:d2: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:32:19:12:62:2F:FE:EB:D9:B1:17:F6:97:12:73:32:5F:FE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b0:c5:a7:c8:4e:81:fb:20:37:9b:16:3e:53:e7:3b:f8:60: 25:16:39:97:51:17:ec:94:14:99:57:27:7e:12:39:00:c0:88: 46:92:78:c0:60:22:30:0e:db:b8:bf:61:3c:45:54:1e:92:89: 00:f5:d8:db:1b:a9:bd:89:f0:3c:bd:cc:bd:82:8f:9d:2d:2f: d9:09:27:a7:8b:cf:c7:34:2f:cf:bc:35:8f:91:6c:86:64:58: cc:99:e4:75:c6:83:87:b7:50:25:a5:e7:d4:b6:73:5a:b9:57: 88:9e:1b:9b:28:50:a3:6f:3a:c9:5f:77:85:43:d5:78:e6:e9: e9:44:5e:fa:ce:16:d6:34:5b:73:4c:ec:c9:69:30:f1:c4:86: fb:eb:50:ab:64:3d:4e:97:69:dd:6e:da:c8:af:ae:d2:7a:91: 11:87:5c:74:29:ae:10:d9:53:4a:bd:77:3f:46:6c:0b:53:8b: e2:7e:a4:e1:29:54:af:eb:1a:ca:1e:52:a2:ae:87:d7:5f:51: 73:8d:f6:09:0e:6b:e6:ce:9f:3e:2b:64:6d:99:47:ff:7f:52: cf:00:b0:18:a3:2d:58:58:ea:13:e1:05:58:bc:df:6f:04:1a: 19:1e:5d:11:de:10:63:bf:2d:ca:29:3d:a1:d9:27:57:44:b4: 94:c4:29:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7RkYA6No7pR0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk N2RkMmM3MWItNmFjMy00Mzk2LTk5NDAtZDg5NDk3OGI3YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju4sGdFyz4tqH/vQqEawmNnEGEvaVOZFzxJ4 LjAAHQfu9N/X2PRekdRfomZagMq+FUaC8edVBZcMvCEPOZCq1NmGxuTxv/6pdH63 pFBcckMqze20jvc2S1OXtFPemsrp7WUjmWniIr3qSTflCuyxhdxUQKFWYkuQYSy8 NwrxthX987vHQ5CjYcZfBeIHX1A0ST1EARAfhaIOKR/8aKSWSAEkgJiJvAFbG+rR zGg1UDjagruwMrqt+pLuhJJ/+c/rBBLSl9mWYIJMMKEEkZwT/WFnCgauvKtqLLem IhM8G0RiYiKub1hWU8W+FctFTq2u3Vs7pwrqUocpv7E+ZNJPBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNH5MhkSYi/+69mxF/aXEnMyX/4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWIyMjMzZjEtYTU0Zi0z N2NjLWJlYWYtMmFjZGE3YTNmNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAysMWnyE6B+yA3mxY+U+c7+GAlFjmXURfslBSZVyd+EjkAwIhGknjA YCIwDtu4v2E8RVQekokA9djbG6m9ifA8vcy9go+dLS/ZCSeni8/HNC/PvDWPkWyG ZFjMmeR1xoOHt1AlpefUtnNauVeInhubKFCjbzrJX3eFQ9V45unpRF76zhbWNFtz TOzJaTDxxIb761CrZD1Ol2ndbtrIr67SepERh1x0Ka4Q2VNKvXc/RmwLU4vifqTh KVSv6xrKHlKirofXX1FzjfYJDmvmzp8+K2RtmUf/f1LPALAYoy1YWOoT4QVYvN9v BBoZHl0R3hBjvy3KKT2h2SdXRLSUxCnr -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:55 2025 by rpki-client