$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3c69fbb-0f26-3238-81dd-b266a8023598.roa File: b3c69fbb-0f26-3238-81dd-b266a8023598.roa (raw, json) Hash identifier: z8GsYfbUKUSQa3qTZt36jj9szNO1IU65IQXu83fJRhY= Subject key identifier: 2A:CB:7C:0D:FB:61:94:AD:49:7F:53:69:CA:30:E9:CE:C9:91:90:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB3C84150BCD8A40FB800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3c69fbb-0f26-3238-81dd-b266a8023598.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396554 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b3:c8:41:50:bc:d8:a4:0f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=cb97a853-5e71-4d51-b3d2-75be9ef677b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:24:97:20:76:9e:a9:24:dc:fb:8d:53:d9: 33:5f:81:05:b9:69:0d:df:69:83:bd:71:5c:be:41: 5b:6d:4c:df:a6:eb:5f:28:b3:1d:ed:18:40:67:ac: 9e:86:63:bb:78:bd:72:fd:b2:b4:38:b7:93:45:b0: 05:49:39:58:70:14:2c:88:2d:88:5b:c3:db:81:be: 64:c0:f4:fe:f4:57:69:6a:4e:c3:5b:1c:27:1e:c1: 2e:fc:47:44:74:ba:d8:11:b6:85:ca:4b:39:ba:56: 23:0f:1a:2f:7a:d8:5a:e6:2b:c1:b8:52:a8:1f:76: 6a:20:4e:a5:10:86:89:3a:35:fc:ff:8f:ed:2b:bb: fa:cc:14:e5:ca:7b:fb:64:b2:cb:93:b0:32:ba:ee: 3a:38:15:d3:70:65:49:24:d4:f6:29:df:0f:4b:db: b4:03:20:02:90:ba:1a:9c:9d:d7:db:16:d7:ee:c1: 59:93:15:84:98:74:6b:2d:60:79:0f:08:06:11:14: aa:8c:39:4c:3d:ff:f9:bc:3b:a4:68:a3:8d:83:86: 13:f0:ad:e6:27:db:85:b3:95:89:0a:c4:68:5b:8f: df:bb:ab:a1:f1:26:36:fd:c0:9f:a5:49:c5:2f:67: 10:98:c9:86:83:8b:63:ac:86:24:29:23:a2:4b:b9: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:7C:0D:FB:61:94:AD:49:7F:53:69:CA:30:E9:CE:C9:91:90:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3c69fbb-0f26-3238-81dd-b266a8023598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c1:b4:d6:b8:ba:99:47:c2:2c:26:fb:27:cb:34:61:aa:19: 5d:a3:cf:51:cf:fc:b0:d2:ce:5a:15:1e:01:3b:fa:75:b1:44: 66:1e:31:55:35:af:bc:95:18:4a:fe:a9:9a:53:d5:53:8e:65: a5:87:ba:ae:2e:b7:9f:78:50:5f:02:ad:67:9e:ff:ea:31:87: 3d:99:2e:aa:b4:6f:31:c8:6d:8d:ca:72:6f:d9:07:07:2f:ad: c7:bf:dc:b3:c2:58:ca:df:42:bb:00:23:41:be:92:16:34:6a: 2d:24:eb:17:60:f2:d0:b4:ac:09:70:51:87:60:72:00:4f:9f: 47:d3:73:fc:f1:20:50:57:39:08:e1:6d:1c:dd:78:b4:f5:96: cd:ec:cb:b7:43:d5:38:36:0c:13:82:0c:25:dc:e7:34:e4:12: e5:3d:92:e3:25:e3:b8:77:61:74:09:7b:59:d2:6f:33:0c:39: a1:27:b1:d1:3d:e5:67:05:84:24:5c:36:c6:30:2b:06:17:82: 87:89:dc:4e:9f:92:0d:04:21:4b:b2:40:7a:a7:18:b5:34:bf: 60:65:c3:99:0e:1c:e4:62:c9:4e:0b:9b:98:ba:0e:56:1a:0f: e3:59:6c:b2:55:c9:64:50:14:7f:c6:40:99:8c:88:e2:6b:80: 90:b9:72:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7PIQVC82KQPuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk Y2I5N2E4NTMtNWU3MS00ZDUxLWIzZDItNzViZTllZjY3N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQsklyB2nqkk3PuNU9kzX4EFuWkN32mDvXFc vkFbbUzfputfKLMd7RhAZ6yehmO7eL1y/bK0OLeTRbAFSTlYcBQsiC2IW8Pbgb5k wPT+9Fdpak7DWxwnHsEu/EdEdLrYEbaFyks5ulYjDxovetha5ivBuFKoH3ZqIE6l EIaJOjX8/4/tK7v6zBTlynv7ZLLLk7Ayuu46OBXTcGVJJNT2Kd8PS9u0AyACkLoa nJ3X2xbX7sFZkxWEmHRrLWB5DwgGERSqjDlMPf/5vDukaKONg4YT8K3mJ9uFs5WJ CsRoW4/fu6uh8SY2/cCfpUnFL2cQmMmGg4tjrIYkKSOiS7nFwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCrLfA37YZStSX9Tacow6c7JkZBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNjNjlmYmItMGYyNi0z MjM4LTgxZGQtYjI2NmE4MDIzNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfwbTWuLqZR8IsJvsnyzRhqhldo89Rz/yw0s5aFR4BO/p1sURmHjFV Na+8lRhK/qmaU9VTjmWlh7quLrefeFBfAq1nnv/qMYc9mS6qtG8xyG2NynJv2QcH L63Hv9yzwljK30K7ACNBvpIWNGotJOsXYPLQtKwJcFGHYHIAT59H03P88SBQVzkI 4W0c3Xi09ZbN7Mu3Q9U4NgwTggwl3Oc05BLlPZLjJeO4d2F0CXtZ0m8zDDmhJ7HR PeVnBYQkXDbGMCsGF4KHidxOn5INBCFLskB6pxi1NL9gZcOZDhzkYslOC5uYug5W Gg/jWWyyVclkUBR/xkCZjIjia4CQuXI7 -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:38 2025 by rpki-client