$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa File: b688fb27-59e5-374c-8e3c-13d611990324.roa (raw, json) Hash identifier: +h0ExRQR7bDr/k6TiwKBzlGpZK8CfL9Slqwk1WmTL0U= Subject key identifier: E6:A8:B4:2A:1E:4A:16:C7:F3:AE:01:7A:68:AC:96:B1:26:1D:CC:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77623F86B1FB239D545C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396574 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:76:23:f8:6b:1f:b2:39:d5:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=a3bda3d7-2414-4de5-968e-3acec9a61e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:88:2b:00:dc:12:0e:c3:84:d0:91:e9:b3: 27:41:00:09:55:77:84:5b:37:a7:35:94:ab:3b:b4: 9d:02:3c:af:00:6f:d4:bb:47:58:7f:a4:4e:92:78: 1b:de:ba:f8:63:26:19:87:31:a4:cc:c5:06:36:35: be:72:30:1e:69:80:cf:a6:96:84:9a:3f:f6:26:d5: 64:02:9e:34:44:a8:45:2f:6a:ae:fd:55:bd:da:76: 84:4c:b8:dd:92:67:41:6c:2e:14:eb:87:3c:c8:7d: c9:b3:f8:6b:0f:93:cb:0b:3f:cf:32:41:87:ee:db: 7d:11:67:0f:bb:6e:33:85:51:7d:24:9c:b6:e4:97: cd:10:67:27:66:42:3c:3c:24:3a:f7:1e:3b:2b:2f: 21:7c:25:d2:44:ee:54:73:9c:b3:51:53:7f:bb:17: 5a:08:b8:b6:7b:92:88:a9:b4:7d:90:aa:0f:9f:80: bb:a6:7e:67:12:31:30:46:2b:35:db:87:50:80:2c: fd:8f:86:ae:40:9c:57:89:fd:98:b6:16:ce:28:5e: 3b:06:a6:9b:16:29:ff:6e:6d:11:91:f7:4c:bf:6d: 32:2e:10:9d:75:67:07:db:0d:4f:b7:df:70:2d:23: 6b:2c:f1:92:27:c4:82:44:b8:39:2e:2a:5f:da:0c: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A8:B4:2A:1E:4A:16:C7:F3:AE:01:7A:68:AC:96:B1:26:1D:CC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7e:d6:44:ae:e3:1e:33:7a:18:56:bc:cf:35:aa:29:30:39: f3:03:6f:af:39:d6:78:7e:c5:2f:46:de:83:35:55:5d:6d:b6: b3:88:bd:e0:2e:57:b7:4c:f4:cd:ec:04:24:1e:98:e9:89:d6: 7c:fc:4a:b0:20:56:02:43:23:dd:95:f8:c7:f5:70:d1:25:66: 55:1c:e7:cf:7e:54:5d:73:e0:45:e0:6d:e0:f8:0d:41:ea:0d: 84:a0:79:b2:b4:e7:29:0f:1a:0b:6d:c2:bc:23:1e:a8:49:2a: a4:d5:44:4b:4b:ca:ac:94:4a:31:b0:25:44:fc:46:a8:5e:d5: 70:d3:e9:42:cb:42:40:b6:50:65:e5:70:c7:40:b2:b3:9b:a4: 5d:f4:fa:4f:e1:c8:b6:75:c0:4a:63:c8:95:c5:15:25:29:a9: 89:46:b3:f0:83:01:6d:4c:31:19:58:5a:d3:fb:ac:b3:bc:9d: 85:fd:13:6e:13:e4:72:c4:3a:b0:28:24:8c:5b:43:ab:93:84: 09:ae:17:1d:76:6b:19:5e:98:59:86:46:f0:73:d7:fe:5d:07: ef:6c:2f:11:c4:1d:0f:1f:11:55:08:d7:70:f4:c6:d7:f7:1f: f3:a7:e7:09:86:80:1f:0f:bb:ad:a9:93:4c:ea:b3:bf:76:6a: 77:db:e0:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3Yj+GsfsjnVRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YTNiZGEzZDctMjQxNC00ZGU1LTk2OGUtM2FjZWM5YTYxZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnWIKwDcEg7DhNCR6bMnQQAJVXeEWzenNZSr O7SdAjyvAG/Uu0dYf6ROkngb3rr4YyYZhzGkzMUGNjW+cjAeaYDPppaEmj/2JtVk Ap40RKhFL2qu/VW92naETLjdkmdBbC4U64c8yH3Js/hrD5PLCz/PMkGH7tt9EWcP u24zhVF9JJy25JfNEGcnZkI8PCQ69x47Ky8hfCXSRO5Uc5yzUVN/uxdaCLi2e5KI qbR9kKoPn4C7pn5nEjEwRis124dQgCz9j4auQJxXif2YthbOKF47BqabFin/bm0R kfdMv20yLhCddWcH2w1Pt99wLSNrLPGSJ8SCRLg5Lipf2gzOAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOaotCoeShbH864BemislrEmHcy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY4OGZiMjctNTllNS0z NzRjLThlM2MtMTNkNjExOTkwMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBftZEruMeM3oYVrzPNaopMDnzA2+vOdZ4fsUvRt6DNVVdbbaziL3g Lle3TPTN7AQkHpjpidZ8/EqwIFYCQyPdlfjH9XDRJWZVHOfPflRdc+BF4G3g+A1B 6g2EoHmytOcpDxoLbcK8Ix6oSSqk1URLS8qslEoxsCVE/EaoXtVw0+lCy0JAtlBl 5XDHQLKzm6Rd9PpP4ci2dcBKY8iVxRUlKamJRrPwgwFtTDEZWFrT+6yzvJ2F/RNu E+RyxDqwKCSMW0Ork4QJrhcddmsZXphZhkbwc9f+XQfvbC8RxB0PHxFVCNdw9MbX 9x/zp+cJhoAfD7utqZNM6rO/dmp32+AE -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:12 2025 by rpki-client