$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa File: ded40ce0-4932-39e9-a836-18dddd32350f.roa (raw, json) Hash identifier: jQdfVj92zq1huEA4Rd3dzqV5P9xxOZNj9dued6qRMtQ= Subject key identifier: 1E:AB:D9:EC:2E:35:7B:37:71:3D:77:A2:11:A0:C3:32:B5:79:B7:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB5C545AF559D56E73000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396577 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b5:c5:45:af:55:9d:56:e7:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=6bdeade5-f180-44ec-a328-47311782bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:20:ed:58:79:2d:d5:6d:0f:fb:68:e3:80: 02:2b:47:5b:1c:81:c2:f7:3b:e7:f3:10:ec:7b:69: 6d:6f:9c:7a:91:94:ba:cb:b4:7c:52:a4:66:b7:24: 88:54:2e:d2:cf:00:7f:c9:a0:0b:c4:6d:0c:b4:8e: b4:85:04:f6:28:ac:92:d7:dc:0a:86:82:a9:dc:ff: 2f:0d:26:a3:9a:b4:76:19:22:d8:20:50:3e:ed:e9: bd:07:21:18:16:59:9d:90:1b:f6:10:fb:1f:93:50: 8f:07:35:07:64:b8:12:02:87:e3:30:8c:d7:6f:91: 77:01:ae:53:2a:43:e0:5d:aa:06:97:b8:1c:d6:bb: 7d:ef:bb:6d:83:86:33:7e:07:b2:89:ea:5b:b8:e9: 75:54:db:e8:68:ab:5a:f3:9f:f4:ab:2b:44:7e:6d: 9b:a5:08:3b:b6:26:07:05:92:c5:ad:55:75:5c:65: a7:68:da:f4:83:78:60:cc:07:a6:62:0b:b9:55:eb: 49:7b:3a:ad:c9:e3:96:6b:60:f6:6a:67:db:c6:b0: 42:9c:1e:63:79:00:74:8f:cc:32:f5:65:7d:c3:46: fb:78:15:24:1a:18:88:c3:b1:86:2e:14:fe:17:12: 13:5a:83:98:f5:00:e7:46:f8:bd:84:24:5d:37:e5: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:D9:EC:2E:35:7B:37:71:3D:77:A2:11:A0:C3:32:B5:79:B7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ded40ce0-4932-39e9-a836-18dddd32350f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3a:d7:7d:5c:59:da:64:ba:7c:4d:13:16:15:46:36:70:5d: 86:15:78:33:5a:d8:e0:45:07:1d:e9:82:04:2f:63:07:62:ee: 59:52:40:5f:6c:26:77:f4:a4:ce:61:5d:19:da:49:58:81:b5: 5e:0f:f5:f9:84:09:a5:b7:72:2e:b3:4b:00:06:1e:76:47:5a: 23:01:b1:60:ac:6d:2d:74:df:35:fd:eb:05:84:e6:65:e3:71: d6:72:e5:e4:01:7c:19:e9:7f:da:db:5b:be:bb:ad:00:43:9d: 8b:1a:09:17:84:c9:2c:6b:3b:f2:d1:a1:bd:d7:ae:a1:d8:ab: 7b:21:df:89:9f:92:d7:a7:13:6d:df:7b:73:fe:b7:97:d0:9b: a5:34:c6:93:d1:46:85:6e:8a:df:69:1b:14:43:4f:4b:eb:89: 55:c6:86:20:3a:5b:d2:08:c5:fe:17:04:cd:73:b2:62:7c:50: 57:c2:06:ce:3f:94:21:a9:ef:92:90:9b:5e:f1:40:cc:24:6d: a9:3f:86:e0:16:df:48:d1:17:59:34:91:bc:e9:1d:bc:5e:33: 9b:6b:f2:ec:af:5e:a2:52:49:e0:1d:e6:19:91:56:96:7d:6b: 08:c4:b6:cf:0d:da:e4:6c:e5:c0:e2:6b:bb:1e:c8:a8:5b:83: dc:f2:d3:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7XFRa9VnVbnMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NmJkZWFkZTUtZjE4MC00NGVjLWEzMjgtNDczMTE3ODJiZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkcg7Vh5LdVtD/to44ACK0dbHIHC9zvn8xDs e2ltb5x6kZS6y7R8UqRmtySIVC7SzwB/yaALxG0MtI60hQT2KKyS19wKhoKp3P8v DSajmrR2GSLYIFA+7em9ByEYFlmdkBv2EPsfk1CPBzUHZLgSAofjMIzXb5F3Aa5T KkPgXaoGl7gc1rt977ttg4YzfgeyiepbuOl1VNvoaKta85/0qytEfm2bpQg7tiYH BZLFrVV1XGWnaNr0g3hgzAemYgu5VetJezqtyeOWa2D2amfbxrBCnB5jeQB0j8wy 9WV9w0b7eBUkGhiIw7GGLhT+FxITWoOY9QDnRvi9hCRdN+UsVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB6r2ewuNXs3cT13ohGgwzK1ebc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVkNDBjZTAtNDkzMi0z OWU5LWE4MzYtMThkZGRkMzIzNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtOtd9XFnaZLp8TRMWFUY2cF2GFXgzWtjgRQcd6YIEL2MHYu5ZUkBf bCZ39KTOYV0Z2klYgbVeD/X5hAmlt3Ius0sABh52R1ojAbFgrG0tdN81/esFhOZl 43HWcuXkAXwZ6X/a21u+u60AQ52LGgkXhMksazvy0aG9166h2Kt7Id+Jn5LXpxNt 33tz/reX0JulNMaT0UaFborfaRsUQ09L64lVxoYgOlvSCMX+FwTNc7JifFBXwgbO P5Qhqe+SkJte8UDMJG2pP4bgFt9I0RdZNJG86R28XjOba/Lsr16iUkngHeYZkVaW fWsIxLbPDdrkbOXA4mu7HsioW4Pc8tP0 -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:04 2025 by rpki-client