$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa File: a604b849-d354-3512-a814-e9b2ed363ed3.roa (raw, json) Hash identifier: vJ2IfTPU6rmDj6bqN1xJExC+IdnStCIUcsBf8Uzzhww= Subject key identifier: D5:2E:3D:F2:9C:11:61:58:13:49:D8:1C:2C:BD:B7:B3:23:1D:07:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB321D0DD9B90C6A08C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36624 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b3:21:d0:dd:9b:90:c6:a0:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=f775d9b4-b5b1-48f6-9f41-3ac2a6970616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:7e:94:95:34:6b:47:cc:d5:05:95:ce:9f: b7:61:04:e2:6d:e4:42:64:63:28:62:d3:ea:83:ab: 42:47:85:f0:f5:0e:92:4d:ac:d4:92:d5:8b:e2:c1: ac:b9:3f:ec:3d:e1:76:9d:a2:93:b0:42:d8:15:fc: 79:64:90:03:38:ef:6d:0d:83:3d:4f:20:aa:78:6b: ae:c0:3e:68:79:d3:31:fc:9b:d4:28:bf:7d:3f:3d: 3c:5f:4c:43:46:c2:95:31:43:c8:b6:a4:70:44:8a: 1f:67:49:c9:fa:c6:d2:6d:cf:2a:82:2e:6a:d1:61: 79:8d:7b:f6:f9:96:06:bb:d9:a4:95:7f:73:0d:8c: a9:ef:74:5c:46:85:c0:b6:3d:53:a0:71:63:9d:5d: bb:95:6b:8d:3e:53:b2:f6:de:93:d1:d8:0d:79:ba: dd:59:57:c1:ca:39:87:0a:2a:5b:87:fc:c3:82:22: 75:3f:2c:9b:0c:ae:89:b0:7e:8a:3c:4c:ed:49:7e: 86:78:76:47:36:cf:01:f8:57:0e:6a:55:01:f6:f6: 5e:52:90:a5:34:af:55:dd:6f:75:bb:73:63:72:2f: a9:5c:c1:58:73:e5:c1:ad:d9:a0:b3:d0:c4:60:26: e2:e8:44:8a:ba:1a:79:52:6a:02:9b:d6:dc:47:61: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:3D:F2:9C:11:61:58:13:49:D8:1C:2C:BD:B7:B3:23:1D:07:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2a:b2:93:de:4f:c1:ed:47:1b:75:19:18:18:af:bc:92:46: 84:f5:db:dc:5a:63:a6:62:b9:bf:9b:bf:f3:34:3e:b8:5c:ba: 60:65:99:33:d8:08:79:7f:f4:56:1d:f1:f5:ca:20:f1:1c:7c: 48:4e:96:4a:c7:b5:8c:72:2a:b8:0d:26:8a:b7:d5:45:11:8b: 9c:df:a5:f0:3a:4a:d0:65:0a:67:42:b4:f9:d4:01:3f:7e:be: 99:4d:24:2e:c7:cb:50:cc:e4:ae:51:15:85:e9:f1:d5:b2:d1: c8:b7:57:9c:84:a7:a4:c2:41:0c:e4:f2:b1:3f:e7:b6:14:da: 76:ec:6a:b8:45:1c:49:7e:28:a0:15:f1:94:90:fa:2e:4b:30: 3f:4e:20:0a:e0:ae:25:7e:00:4b:e5:68:b4:39:97:bc:5a:1d: 5a:8d:7f:4f:95:c7:59:2c:52:51:5a:41:c2:91:e3:13:cc:44: 37:e1:a3:19:13:de:69:ca:5a:d3:89:60:f4:68:45:52:6b:81: 29:ad:53:fa:b9:5a:9a:96:b3:47:4e:47:6f:2d:0d:84:aa:f4: 10:64:73:fb:15:54:bb:6d:c0:10:45:45:43:05:df:10:ed:30: d4:aa:7c:ca:8c:6e:27:92:c9:65:19:b4:e0:90:a9:4b:ab:90: 7b:37:7c:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7Mh0N2bkMagjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk Zjc3NWQ5YjQtYjViMS00OGY2LTlmNDEtM2FjMmE2OTcwNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs81+lJU0a0fM1QWVzp+3YQTibeRCZGMoYtPq g6tCR4Xw9Q6STazUktWL4sGsuT/sPeF2naKTsELYFfx5ZJADOO9tDYM9TyCqeGuu wD5oedMx/JvUKL99Pz08X0xDRsKVMUPItqRwRIofZ0nJ+sbSbc8qgi5q0WF5jXv2 +ZYGu9mklX9zDYyp73RcRoXAtj1ToHFjnV27lWuNPlOy9t6T0dgNebrdWVfByjmH Cipbh/zDgiJ1PyybDK6JsH6KPEztSX6GeHZHNs8B+FcOalUB9vZeUpClNK9V3W91 u3Njci+pXMFYc+XBrdmgs9DEYCbi6ESKuhp5UmoCm9bcR2Fc6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNUuPfKcEWFYE0nYHCy9t7MjHQflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTYwNGI4NDktZDM1NC0z NTEyLWE4MTQtZTliMmVkMzYzZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/KrKT3k/B7UcbdRkYGK+8kkaE9dvcWmOmYrm/m7/zND64XLpgZZkz 2Ah5f/RWHfH1yiDxHHxITpZKx7WMciq4DSaKt9VFEYuc36XwOkrQZQpnQrT51AE/ fr6ZTSQux8tQzOSuURWF6fHVstHIt1echKekwkEM5PKxP+e2FNp27Gq4RRxJfiig FfGUkPouSzA/TiAK4K4lfgBL5Wi0OZe8Wh1ajX9PlcdZLFJRWkHCkeMTzEQ34aMZ E95pylrTiWD0aEVSa4EprVP6uVqalrNHTkdvLQ2EqvQQZHP7FVS7bcAQRUVDBd8Q 7TDUqnzKjG4nksllGbTgkKlLq5B7N3xB -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:25 2025 by rpki-client