$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa File: bbaa0446-f909-3304-888c-399fd80b7e85.roa (raw, json) Hash identifier: RaWeJk39j7+gb2+QKkPrTPnm7hHvVuNlNXoeVplOWkI= Subject key identifier: 55:B7:F3:43:85:7F:7C:23:42:2D:C8:36:D3:63:76:96:6D:D7:7C:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB246477EB283DD7B6700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396589 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b2:46:47:7e:b2:83:dd:7b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=5c992cb1-d45f-4b07-a971-eded8a5188c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:8f:8d:e0:cf:d3:3f:58:ae:4c:fb:62:ef: 5f:64:9a:7d:b4:66:95:dd:f8:b8:c8:9f:c6:94:6f: 05:a3:78:5d:da:96:c3:3d:8a:6e:7a:af:d0:03:02: 39:09:ad:51:4c:7a:c1:62:ce:35:1e:33:64:69:99: 0d:08:94:2c:bf:b9:68:b7:16:2c:74:cd:1e:aa:8c: a3:97:38:c2:c2:4b:a1:12:19:18:58:b1:39:78:0e: de:03:0f:72:46:a8:f0:2a:97:eb:e8:eb:31:93:d8: 72:03:ff:95:42:8b:c8:a9:c1:80:bf:23:c3:2f:47: f0:fd:60:7b:d4:92:a9:5b:b7:f1:12:83:67:ec:fe: a4:ef:12:6d:6b:80:54:6b:78:f8:99:11:7d:e7:25: ec:91:45:0f:e6:dd:16:1e:3c:f2:3e:29:4a:3a:94: c8:01:ff:60:2d:02:62:31:e8:ce:c2:b1:30:27:e5: 4d:76:ed:ef:63:f6:17:04:b3:2d:83:5e:c6:9e:46: 7e:e6:7b:58:31:32:e2:2e:c2:67:99:08:d4:a3:f6: c3:42:ab:1d:be:d3:f7:41:33:8c:3b:cc:18:5d:a0: 8f:cb:b8:57:b2:41:be:30:5c:6a:b8:8e:5f:72:29: 03:81:cb:f5:53:84:e7:23:7d:b9:5b:e6:87:31:8a: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:F3:43:85:7F:7C:23:42:2D:C8:36:D3:63:76:96:6D:D7:7C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:46:d1:e8:68:03:78:c5:70:2e:79:b5:1b:8b:10:3a:f4: 1f:57:32:10:44:95:ad:ba:51:10:08:67:44:01:e7:c8:54:b2: c8:b0:ea:2f:91:40:f9:ca:71:07:75:9b:25:b2:55:ec:ec:0d: fa:a3:78:55:b1:c0:c6:d0:9c:e5:3f:1a:a4:9e:2b:62:3c:47: 12:15:58:5e:e7:89:54:b6:7a:a8:5c:6e:cc:5c:32:10:f0:83: 7b:4a:01:a3:29:4f:0b:21:0d:0b:b9:8e:6b:61:e7:1a:2e:39: 97:f2:5e:0a:7f:27:aa:44:d3:7f:f6:9f:78:49:e8:4e:c0:69: 54:ca:a3:ac:ca:c1:bb:d3:4a:24:df:a9:b8:50:f3:18:96:23: 40:83:3d:73:51:d2:18:ed:de:ac:8d:6a:ef:38:0c:a9:99:87: 32:2c:18:79:70:d9:1e:ce:ac:ed:1e:76:b6:e2:02:12:e6:f1: b3:40:95:5f:9a:4b:37:8b:40:f0:92:91:36:35:bd:a8:bd:cd: ac:b8:27:22:93:54:3a:e7:45:b2:17:b2:00:7c:df:60:20:e5: ce:af:e4:41:67:d3:be:0c:36:ef:70:82:b8:35:0e:49:a2:3b: b0:9b:9a:4c:8c:4d:33:d5:fc:96:c5:17:63:84:fe:cd:59:51: 50:45:eb:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7JGR36yg917ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NWM5OTJjYjEtZDQ1Zi00YjA3LWE5NzEtZWRlZDhhNTE4OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloCPjeDP0z9Yrkz7Yu9fZJp9tGaV3fi4yJ/G lG8Fo3hd2pbDPYpueq/QAwI5Ca1RTHrBYs41HjNkaZkNCJQsv7lotxYsdM0eqoyj lzjCwkuhEhkYWLE5eA7eAw9yRqjwKpfr6Osxk9hyA/+VQovIqcGAvyPDL0fw/WB7 1JKpW7fxEoNn7P6k7xJta4BUa3j4mRF95yXskUUP5t0WHjzyPilKOpTIAf9gLQJi MejOwrEwJ+VNdu3vY/YXBLMtg17GnkZ+5ntYMTLiLsJnmQjUo/bDQqsdvtP3QTOM O8wYXaCPy7hXskG+MFxquI5fcikDgcv1U4TnI325W+aHMYrXqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFW380OFf3wjQi3INtNjdpZt13xIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJhYTA0NDYtZjkwOS0z MzA0LTg4OGMtMzk5ZmQ4MGI3ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkR0bR6GgDeMVwLnm1G4sQOvQfVzIQRJWtulEQCGdEAefIVLLIsOov kUD5ynEHdZslslXs7A36o3hVscDG0JzlPxqknitiPEcSFVhe54lUtnqoXG7MXDIQ 8IN7SgGjKU8LIQ0LuY5rYecaLjmX8l4KfyeqRNN/9p94SehOwGlUyqOsysG700ok 36m4UPMYliNAgz1zUdIY7d6sjWrvOAypmYcyLBh5cNkezqztHna24gIS5vGzQJVf mks3i0DwkpE2Nb2ovc2suCcik1Q650WyF7IAfN9gIOXOr+RBZ9O+DDbvcIK4NQ5J ojuwm5pMjE0z1fyWxRdjhP7NWVFQReti -----END CERTIFICATE-----Generated at Wed Aug 6 11:07:20 2025 by rpki-client