$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad5c27e-4639-311d-aa9c-d2a8f4761763.roa File: cad5c27e-4639-311d-aa9c-d2a8f4761763.roa (raw, json) Hash identifier: vHWEfL0dmK2yCQAHeUyBfWG3volcfXuzG52HgE4AACM= Subject key identifier: 6F:41:29:5D:F4:D8:0D:4F:7B:B7:36:C5:9C:97:71:9A:8D:F9:A7:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB280CD4DBEE9636E7740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad5c27e-4639-311d-aa9c-d2a8f4761763.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396547 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b2:80:cd:4d:be:e9:63:6e:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=7fbfbd53-08c4-41f9-8add-8b4ac35d685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:44:f4:35:e0:c9:59:ab:1a:58:f2:5b:43: 26:49:70:56:9d:2f:7e:7c:a9:6a:d2:b9:d5:1a:ac: e9:d2:8e:60:9c:da:19:8c:a5:ae:94:23:8c:45:eb: e6:63:f7:26:a8:a9:2a:83:42:13:46:eb:56:c5:20: 86:6c:c9:57:a2:6f:f8:81:c0:f2:f5:43:70:c8:db: 68:82:24:16:e9:b2:d7:4c:7a:84:ae:a8:08:d9:51: 1c:17:c1:f5:c6:f3:e3:32:af:69:9f:5a:38:3e:4a: e7:e2:64:bb:9b:dd:b7:e2:ff:20:0b:e7:fd:96:45: cc:ca:56:92:05:e5:d7:aa:86:db:03:86:6c:e7:2f: 89:fa:87:e7:ca:28:ce:ff:52:c9:92:49:62:b4:83: ee:31:84:7b:75:15:36:90:9c:4b:07:eb:f3:e7:80: 9d:88:cf:06:e2:2e:de:80:59:f8:11:c8:81:ce:cb: 7c:5d:c3:28:68:af:a2:d6:ae:b7:94:ad:e5:28:0b: be:1c:1e:6b:d6:c7:01:58:38:7b:a8:37:5e:12:3a: ee:9a:32:cb:d3:60:d0:eb:33:ca:2e:13:d5:8a:a6: 3b:6b:80:0a:a1:22:70:ee:6c:89:af:77:f0:21:c5: 67:ad:63:62:96:7d:73:6e:b0:d4:59:71:fb:48:0f: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:29:5D:F4:D8:0D:4F:7B:B7:36:C5:9C:97:71:9A:8D:F9:A7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad5c27e-4639-311d-aa9c-d2a8f4761763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ed:d8:20:12:7d:6a:f7:16:80:ea:11:7b:94:f5:fe:90:92: 20:cb:3b:8c:50:b5:90:a3:8b:80:43:93:1e:52:43:9e:9b:6c: 1c:4e:b0:dc:b4:0b:7a:fa:f2:97:60:2b:55:02:0e:3a:27:c4: a4:05:0f:6f:e7:8b:e9:f5:e2:4a:52:b6:16:f8:38:3f:ec:b2: a2:ad:f3:c8:7c:3e:ec:00:0b:72:29:43:4a:8d:3b:a8:c0:fb: 7e:e4:7b:08:c8:96:37:91:43:16:89:95:a3:ba:16:aa:4c:55: 3e:c3:b1:00:16:c6:30:f2:c4:e0:c6:bb:f9:6e:41:a2:84:73: cd:90:38:cd:84:a6:96:c0:16:c5:4d:42:f5:dc:fb:e6:7e:27: 98:3a:eb:c5:1c:50:47:08:7f:23:e2:fb:e6:ea:31:cd:00:42: af:e0:fd:46:1d:4a:1a:7e:5d:75:7c:b1:71:aa:e7:32:77:79: f0:63:b3:c6:f1:40:13:3c:3e:90:94:c2:50:ae:6f:1d:6b:98: 0e:4f:a3:3c:95:b8:e5:44:6d:72:f3:85:d1:e8:b1:05:fa:a4: b8:eb:ad:9a:6b:b5:05:bf:da:1c:0d:d1:9c:3e:77:e7:05:0c: f8:27:ef:37:65:dd:23:30:56:b2:c0:37:9d:d4:09:81:f9:91: 2c:a4:b1:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7KAzU2+6WNud0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk N2ZiZmJkNTMtMDhjNC00MWY5LThhZGQtOGI0YWMzNWQ2ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRJE9DXgyVmrGljyW0MmSXBWnS9+fKlq0rnV Gqzp0o5gnNoZjKWulCOMRevmY/cmqKkqg0ITRutWxSCGbMlXom/4gcDy9UNwyNto giQW6bLXTHqErqgI2VEcF8H1xvPjMq9pn1o4Pkrn4mS7m9234v8gC+f9lkXMylaS BeXXqobbA4Zs5y+J+ofnyijO/1LJkklitIPuMYR7dRU2kJxLB+vz54CdiM8G4i7e gFn4EciBzst8XcMoaK+i1q63lK3lKAu+HB5r1scBWDh7qDdeEjrumjLL02DQ6zPK LhPViqY7a4AKoSJw7myJr3fwIcVnrWNiln1zbrDUWXH7SA+xOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG9BKV302A1Pe7c2xZyXcZqN+afcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FkNWMyN2UtNDYzOS0z MTFkLWFhOWMtZDJhOGY0NzYxNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO7dggEn1q9xaA6hF7lPX+kJIgyzuMULWQo4uAQ5MeUkOem2wcTrDc tAt6+vKXYCtVAg46J8SkBQ9v54vp9eJKUrYW+Dg/7LKirfPIfD7sAAtyKUNKjTuo wPt+5HsIyJY3kUMWiZWjuhaqTFU+w7EAFsYw8sTgxrv5bkGihHPNkDjNhKaWwBbF TUL13PvmfieYOuvFHFBHCH8j4vvm6jHNAEKv4P1GHUoafl11fLFxqucyd3nwY7PG 8UATPD6QlMJQrm8da5gOT6M8lbjlRG1y84XR6LEF+qS4662aa7UFv9ocDdGcPnfn BQz4J+83Zd0jMFaywDed1AmB+ZEspLEL -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:42 2025 by rpki-client