$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa File: 9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa (raw, json) Hash identifier: zNPcvaz9ws4N52YVdK6JkFWaAvMSvrMF66YqoSDnM8Y= Subject key identifier: 59:FC:1A:47:6A:71:AC:A0:A9:15:22:26:4F:04:77:30:2A:44:8D:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB119ED82C0F0DB17F440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 397203 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b1:19:ed:82:c0:f0:db:17:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=994c47e1-6d85-4257-a1b1-703bc8108e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:45:31:ba:ab:8b:12:f9:99:ad:8b:10:ab: 71:25:48:b5:2d:47:ac:f4:80:f8:00:46:9e:02:c8: 68:97:81:13:ef:f8:7b:82:3e:3f:ea:ff:46:89:38: f5:b9:6e:c5:cd:bc:3c:37:17:76:59:fb:60:0f:c0: 2f:b9:ae:03:08:16:0f:96:10:a8:c3:b8:18:07:ff: 43:07:46:2a:ad:ff:a5:e9:5f:c7:c2:f1:4d:cc:e1: d4:8f:4e:90:6c:81:b2:81:b8:e4:68:e1:a0:e2:c5: 0a:e0:57:bb:00:e1:61:31:b8:22:25:23:88:95:5d: 6a:69:c8:32:a6:80:44:5d:1b:7e:74:1b:80:2d:f6: 8e:7c:c4:c7:cb:75:5a:d5:df:a1:a1:ec:de:4e:42: a5:0e:9d:c2:b3:c7:f6:85:7c:ef:f0:00:91:57:f7: ba:c9:ab:e2:aa:f8:3c:38:96:51:f1:fd:4a:55:37: ec:32:b8:2e:cd:bf:8b:4a:16:61:2c:0a:4f:9a:2d: dd:ee:58:e1:fd:53:de:87:3c:a1:05:1b:b5:dd:fc: cb:e7:19:97:ff:f6:40:d8:2d:24:89:1f:ad:25:e0: 87:67:bd:29:ff:d8:3f:a1:fd:43:eb:93:2b:87:ee: 74:1b:93:b9:ec:58:98:8f:5f:36:19:92:aa:88:11: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FC:1A:47:6A:71:AC:A0:A9:15:22:26:4F:04:77:30:2A:44:8D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:59:36:dc:b8:9e:ad:3b:13:2d:44:9d:31:4d:75:2c:3c:a7: 59:5a:d6:f5:2d:5c:fe:e8:35:40:9b:7c:33:d2:c4:2c:7f:83: 86:f9:72:11:28:b3:b8:72:e9:13:41:e7:48:cd:bd:f2:c4:27: a2:9f:16:17:9c:3d:24:74:c6:3e:b1:96:39:16:3e:29:f1:35: bf:d9:c3:b4:68:80:92:38:b2:b8:22:b1:da:77:42:34:35:bf: 20:45:9a:73:82:d0:c8:59:2f:0e:78:a9:17:77:cd:42:1e:ff: 7e:54:4c:55:ae:3e:22:b4:be:5a:e4:b3:56:2f:03:f7:fd:48: f2:45:86:91:9e:9a:80:16:3b:01:81:33:16:ff:a1:b2:24:17: f2:db:d1:13:76:13:2d:fe:2b:91:c3:38:86:1f:e9:23:ab:0a: ae:d2:f6:06:94:26:df:2e:1e:3e:b7:51:99:d9:c2:ae:b7:08: 78:cd:1a:a0:26:27:41:bd:da:a6:b8:0c:59:fa:c7:37:d3:1c: 92:b4:0e:40:a3:5d:2b:e4:e3:f5:70:ee:46:e4:92:d9:0a:65: 7c:03:f3:4c:74:0e:28:8c:59:dd:57:c6:15:c4:0c:6d:46:80: a6:4b:e8:6a:af:79:48:54:37:0d:3a:2c:58:07:14:9b:e0:8a: 3c:3b:b7:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7EZ7YLA8NsX9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk OTk0YzQ3ZTEtNmQ4NS00MjU3LWExYjEtNzAzYmM4MTA4ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOVFMbqrixL5ma2LEKtxJUi1LUes9ID4AEae Ashol4ET7/h7gj4/6v9GiTj1uW7Fzbw8Nxd2WftgD8Avua4DCBYPlhCow7gYB/9D B0Yqrf+l6V/HwvFNzOHUj06QbIGygbjkaOGg4sUK4Fe7AOFhMbgiJSOIlV1qacgy poBEXRt+dBuALfaOfMTHy3Va1d+hoezeTkKlDp3Cs8f2hXzv8ACRV/e6yaviqvg8 OJZR8f1KVTfsMrguzb+LShZhLApPmi3d7ljh/VPehzyhBRu13fzL5xmX//ZA2C0k iR+tJeCHZ70p/9g/of1D65Mrh+50G5O57FiYj182GZKqiBHguQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFn8GkdqcaygqRUiJk8EdzAqRI33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWMyMTY2NjAtZTRiOC0z ZTM3LTlmOWEtMmI5OWQ5MWE5MTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCWTbcuJ6tOxMtRJ0xTXUsPKdZWtb1LVz+6DVAm3wz0sQsf4OG+XIR KLO4cukTQedIzb3yxCeinxYXnD0kdMY+sZY5Fj4p8TW/2cO0aICSOLK4IrHad0I0 Nb8gRZpzgtDIWS8OeKkXd81CHv9+VExVrj4itL5a5LNWLwP3/UjyRYaRnpqAFjsB gTMW/6GyJBfy29ETdhMt/iuRwziGH+kjqwqu0vYGlCbfLh4+t1GZ2cKutwh4zRqg JidBvdqmuAxZ+sc30xyStA5Ao10r5OP1cO5G5JLZCmV8A/NMdA4ojFndV8YVxAxt RoCmS+hqr3lIVDcNOixYBxSb4Io8O7dJ -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:46 2025 by rpki-client