$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa File: bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa (raw, json) Hash identifier: k6ghaAtUT+/w/cYCTJl9180Bj69ket3tp9UZvHLFUeI= Subject key identifier: 55:24:94:38:B5:45:44:6E:B5:F9:3C:C1:A7:D1:9C:DA:08:80:1F:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB603999B25C3689F9740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396608 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b6:03:99:9b:25:c3:68:9f:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=5222dff0-bb25-4aa0-9ae0-d9ee1cd02bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:85:0c:d7:32:e7:e5:49:46:e3:f8:1a:cc: 47:06:fe:96:45:f0:e0:c3:29:4d:62:27:43:b5:2f: 1a:3b:76:19:13:81:5c:04:c7:8e:bd:de:a2:c6:ad: d7:0e:ff:5d:3d:30:c0:68:56:3f:8b:24:c1:dc:52: 08:d2:15:59:87:05:17:5d:a5:28:00:d4:52:0d:bf: 14:21:07:e4:c1:73:5c:50:ea:b5:3a:5d:2b:72:d8: 61:34:fb:f4:76:38:48:d5:2c:dd:b2:7a:08:ac:b7: b5:8f:96:c8:32:e6:35:62:c2:08:f4:bf:e5:1e:23: d2:60:fa:a7:8b:e1:fa:e1:1b:29:77:54:b6:62:4a: b6:b5:e7:c5:2e:ca:08:de:76:53:80:77:cd:86:4d: b6:ca:8e:00:46:8f:d6:a8:75:82:e3:90:b4:6a:f4: 01:dd:8b:06:27:73:15:73:34:68:61:ff:00:4e:58: 42:6b:39:22:bd:4b:fe:25:88:0e:1e:1e:9d:83:e3: d5:e4:34:f9:d8:af:69:b2:03:06:b9:73:3d:da:28: 5f:da:d1:d7:55:1e:45:51:7f:ba:08:d2:50:10:87: b5:55:f7:d7:69:eb:cb:de:90:35:b4:fa:62:69:16: 07:40:ee:5e:43:f0:d4:8f:2e:a2:09:c6:f9:b6:04: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:24:94:38:B5:45:44:6E:B5:F9:3C:C1:A7:D1:9C:DA:08:80:1F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:99:3a:27:c1:3d:fd:46:72:39:6a:d8:e9:00:47:74:fd:ed: db:83:db:55:a9:2c:b5:37:44:67:d6:1e:d3:d4:d5:4f:a2:dc: 02:86:32:1a:4c:f6:bf:82:32:d4:d5:18:80:04:3e:eb:6d:f2: 01:d2:1b:c3:ac:4d:ad:d5:29:53:03:d5:ce:bf:ee:02:e7:36: 71:8d:f1:12:18:dd:95:c8:07:c9:d8:74:34:39:9b:e2:86:15: 0b:98:b9:69:f1:52:c4:a0:42:06:b9:3a:f0:4b:af:79:3b:38: fa:3f:cf:1e:f3:d8:06:85:a4:39:bb:82:34:fb:86:88:a4:e9: 1a:13:c6:20:cb:4b:95:2b:d4:55:89:f2:8a:46:a1:57:8e:60: e8:1b:96:32:7b:89:da:80:e9:a6:08:89:01:28:cc:59:8c:cf: f7:5d:46:45:50:94:16:19:f3:2a:4b:64:10:a3:bf:a2:47:43: b7:e8:56:7d:14:d7:6c:95:38:d8:77:a0:22:da:41:6e:8e:e5: 48:b9:da:5a:68:9f:75:81:b0:0c:ba:19:45:93:90:f5:34:b7: 7e:eb:e3:8d:2a:ba:74:56:8c:6d:aa:29:00:52:8d:4e:4f:b1: 09:ea:24:fe:78:7f:f3:4e:55:09:7b:5d:9b:0e:27:bc:2c:9d: c2:40:9e:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7YDmZslw2ifl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NTIyMmRmZjAtYmIyNS00YWEwLTlhZTAtZDllZTFjZDAyYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6FDNcy5+VJRuP4GsxHBv6WRfDgwylNYidD tS8aO3YZE4FcBMeOvd6ixq3XDv9dPTDAaFY/iyTB3FII0hVZhwUXXaUoANRSDb8U IQfkwXNcUOq1Ol0rcthhNPv0djhI1SzdsnoIrLe1j5bIMuY1YsII9L/lHiPSYPqn i+H64Rspd1S2Ykq2tefFLsoI3nZTgHfNhk22yo4ARo/WqHWC45C0avQB3YsGJ3MV czRoYf8ATlhCazkivUv+JYgOHh6dg+PV5DT52K9psgMGuXM92ihf2tHXVR5FUX+6 CNJQEIe1VffXaevL3pA1tPpiaRYHQO5eQ/DUjy6iCcb5tgRSiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFUklDi1RURutfk8wafRnNoIgB9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0MzM5YzItYWI1ZC0z YWQ5LTk4MDQtODdhMTQ4ZGZiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFmTonwT39RnI5atjpAEd0/e3bg9tVqSy1N0Rn1h7T1NVPotwChjIa TPa/gjLU1RiABD7rbfIB0hvDrE2t1SlTA9XOv+4C5zZxjfESGN2VyAfJ2HQ0OZvi hhULmLlp8VLEoEIGuTrwS695Ozj6P88e89gGhaQ5u4I0+4aIpOkaE8Ygy0uVK9RV ifKKRqFXjmDoG5Yye4nagOmmCIkBKMxZjM/3XUZFUJQWGfMqS2QQo7+iR0O36FZ9 FNdslTjYd6Ai2kFujuVIudpaaJ91gbAMuhlFk5D1NLd+6+ONKrp0VoxtqikAUo1O T7EJ6iT+eH/zTlUJe12bDie8LJ3CQJ5p -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:55 2025 by rpki-client