$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: Hn62AuguVJYkfUMjzUeikgg6IB0Y4o+AUNpFdhs85fM= Subject key identifier: 01:94:6B:72:1C:84:F3:74:87:EA:F0:7B:E6:85:5F:93:97:D9:32:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB7436DC57CEF1B88D240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b7:43:6d:c5:7c:ef:1b:88:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=2d4f702e-8b96-4dc9-9efe-d47952ece41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:09:18:12:33:4c:c8:64:ac:6d:7f:a4:30: 2e:7a:c2:81:a8:2a:f5:08:4b:b9:12:af:e1:51:7d: a1:32:96:bd:f2:e2:a4:34:22:b2:87:82:63:7f:f9: 3f:f5:dc:3a:24:d4:ae:9a:cc:d6:2d:73:08:e6:17: 3f:6e:89:81:ad:eb:8f:10:78:30:f9:3c:87:1d:cd: b6:ef:73:ca:11:0c:63:43:3a:a7:79:fe:bc:e1:4f: ca:9d:a3:69:03:32:3a:cf:f0:3f:e7:4c:14:75:38: 1c:5c:6d:11:d0:37:90:5e:54:b1:24:54:92:eb:af: 8f:ba:1f:0d:a3:3e:52:55:af:61:39:96:27:a2:ef: 77:73:c3:e5:36:50:97:a5:c5:93:a3:04:eb:7b:70: ca:e6:5e:86:22:5c:77:b8:02:cd:f9:93:91:0a:33: 18:68:75:3d:42:7c:a1:e6:fa:94:98:74:2a:68:b2: 61:7b:88:32:57:2d:bf:24:84:3d:6d:b9:1e:fb:db: 2e:ac:83:4d:8e:3d:64:ec:d4:08:7b:06:3b:9f:77: c9:e6:4d:1b:9a:9d:45:10:15:2a:7a:fc:ea:c2:fc: 63:e4:c5:bf:b4:a2:b5:7e:c6:90:18:73:37:cf:4f: 6d:f4:d3:8b:73:f8:5f:7a:5b:8d:ee:6a:8c:fe:2d: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:6B:72:1C:84:F3:74:87:EA:F0:7B:E6:85:5F:93:97:D9:32:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d2:02:8c:9c:25:82:00:52:4d:83:06:05:e5:c0:a8:f7:ad: 8b:d3:72:a8:0a:e0:6f:59:38:9c:3b:75:53:c0:ad:ea:0b:ae: ad:fd:8c:3e:73:32:7e:00:f9:56:5f:9c:bf:f5:8e:d1:36:66: 46:4d:d6:a6:04:04:e8:3d:9d:56:a6:a4:c8:f3:4b:88:9e:55: 45:fe:16:0e:58:7d:4c:b1:d2:3a:fb:e6:98:f2:98:23:95:69: 1c:ef:69:67:2b:ab:73:02:ff:49:64:80:42:c0:ad:4d:ad:dc: 0c:69:41:b1:b6:5d:45:98:58:8e:58:5d:e9:9c:ca:7b:a5:69: 81:91:6a:07:68:17:6a:31:76:3b:1b:e6:4d:76:12:c8:15:65: d2:b4:e8:94:8b:e2:21:3a:64:0c:83:38:0f:81:10:e2:85:22: 6b:f5:5b:aa:13:39:47:6f:c8:4d:5b:4b:2d:6a:b3:67:0a:ea: 9c:a0:67:f2:8f:ed:bd:9d:9b:de:30:b5:40:65:a8:73:04:6b: 50:53:77:6e:c7:85:2e:de:02:fb:45:6d:3c:16:73:c9:4a:8a: 12:1a:9a:43:32:c3:f0:6b:93:b8:2e:07:39:5e:9b:72:c4:7f: 75:ec:d2:6d:c3:29:0d:ad:33:bb:c8:fb:2f:93:28:92:0a:14: 7c:22:37:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7dDbcV87xuI0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MmQ0ZjcwMmUtOGI5Ni00ZGM5LTllZmUtZDQ3OTUyZWNlNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTAJGBIzTMhkrG1/pDAuesKBqCr1CEu5Eq/h UX2hMpa98uKkNCKyh4Jjf/k/9dw6JNSumszWLXMI5hc/bomBreuPEHgw+TyHHc22 73PKEQxjQzqnef684U/KnaNpAzI6z/A/50wUdTgcXG0R0DeQXlSxJFSS66+Puh8N oz5SVa9hOZYnou93c8PlNlCXpcWTowTre3DK5l6GIlx3uALN+ZORCjMYaHU9Qnyh 5vqUmHQqaLJhe4gyVy2/JIQ9bbke+9surINNjj1k7NQIewY7n3fJ5k0bmp1FEBUq evzqwvxj5MW/tKK1fsaQGHM3z09t9NOLc/hfeluN7mqM/i0nQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAGUa3IchPN0h+rwe+aFX5OX2TI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBr0gKMnCWCAFJNgwYF5cCo962L03KoCuBvWTicO3VTwK3qC66t/Yw+ czJ+APlWX5y/9Y7RNmZGTdamBAToPZ1WpqTI80uInlVF/hYOWH1MsdI6++aY8pgj lWkc72lnK6tzAv9JZIBCwK1NrdwMaUGxtl1FmFiOWF3pnMp7pWmBkWoHaBdqMXY7 G+ZNdhLIFWXStOiUi+IhOmQMgzgPgRDihSJr9VuqEzlHb8hNW0starNnCuqcoGfy j+29nZveMLVAZahzBGtQU3dux4Uu3gL7RW08FnPJSooSGppDMsPwa5O4Lgc5Xpty xH917NJtwykNrTO7yPsvkyiSChR8IjcP -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:11 2025 by rpki-client