$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa File: e3ab5968-a7d5-3749-8ecf-314686226a81.roa (raw, json) Hash identifier: QG2uxisE2Ogktk5Da2ukRtyDiKXR9De06aPNaxHzFK4= Subject key identifier: FD:FA:2C:B0:20:2C:11:FA:12:D7:00:A6:CF:26:A2:A6:16:1C:45:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB4A341527089CB07F500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396562 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b4:a3:41:52:70:89:cb:07:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=bcff8eed-faec-4e69-96b9-54abbd01c1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:9f:c9:a7:32:cf:f1:b2:72:8f:f5:09:98: ed:11:6e:99:45:2f:e3:db:f1:87:91:71:f1:d1:d9: 2d:86:55:35:36:33:93:f5:5b:14:71:7a:21:47:20: 07:c9:4c:c3:ec:3f:ba:28:14:29:b6:7d:78:5b:77: 6d:4b:5f:67:ed:90:8b:19:b1:c1:4a:7f:2a:28:ba: 7f:03:ac:c2:87:78:1a:e9:bd:8f:20:d1:92:35:e7: 02:90:cb:47:66:6b:47:86:e4:c3:9e:bc:4c:03:4d: de:47:36:26:53:c5:6e:fb:e1:e5:40:4e:35:11:be: a2:9a:0c:55:4a:8d:e9:7c:13:bd:e3:c1:2d:23:d6: d2:07:d4:bf:3f:e7:c9:73:3c:b7:36:02:6c:d3:28: 47:37:c9:e5:29:6e:ed:20:e6:8e:79:28:fb:79:f1: 66:75:2c:ed:94:55:0e:13:21:6f:17:07:88:5f:ab: d1:35:89:68:05:f3:3d:14:a2:a3:04:df:93:86:47: 44:fc:a9:54:1a:a0:d4:a4:95:7b:f7:47:5a:15:b0: 6f:e9:d3:28:c0:74:7a:da:0d:6e:aa:34:86:19:1a: 10:4c:1f:8a:26:a5:8c:ea:da:c3:7f:85:d0:1f:96: db:87:a1:b0:f2:0f:1f:16:b9:0e:31:f4:fb:9d:ab: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:2C:B0:20:2C:11:FA:12:D7:00:A6:CF:26:A2:A6:16:1C:45:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:93:30:a0:0c:b7:a5:a0:d6:0a:c3:6e:1b:6b:bd:a6:f7:fd: 16:46:0c:84:d7:19:45:b0:eb:1c:ea:fc:05:b7:25:e0:df:e3: 1a:4e:bc:fc:63:e8:c5:68:8c:3d:0b:e5:1b:cb:58:79:67:57: 23:85:f6:fb:83:76:20:06:0c:04:99:24:fc:80:1b:f7:f3:1d: 17:da:f0:c4:6d:73:75:38:df:29:3f:e3:0c:57:18:b1:8d:65: 80:58:79:e4:f9:10:cc:05:19:11:08:e1:50:25:b9:7a:1d:21: 4a:61:04:52:86:76:c3:92:44:a9:ba:1d:ae:ec:3a:5a:bb:05: 2b:43:a4:b4:06:5a:2f:ab:08:60:46:33:59:42:d3:e6:00:ed: 07:bd:4d:f0:b6:90:67:ef:ee:6f:83:3c:c4:77:4f:8b:68:22: 87:a6:e3:8e:5a:95:f6:12:d6:d0:41:f6:a8:b9:87:e0:ce:63: ee:63:c1:ec:fb:70:87:dc:9a:3a:3c:65:c5:fe:bb:30:2d:c2: 89:65:b3:39:c6:6f:b6:ec:ca:76:c1:d8:8a:bc:e0:3f:bb:d2: ab:f4:53:da:1a:5a:6f:51:ec:2d:e9:7d:b4:15:c4:9f:6c:b1: 49:a1:91:f5:54:ab:b8:a8:d4:ed:09:ba:7a:dd:f2:15:e7:2c: 63:27:23:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7SjQVJwicsH9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YmNmZjhlZWQtZmFlYy00ZTY5LTk2YjktNTRhYmJkMDFjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Kfyacyz/Gyco/1CZjtEW6ZRS/j2/GHkXHx 0dkthlU1NjOT9VsUcXohRyAHyUzD7D+6KBQptn14W3dtS19n7ZCLGbHBSn8qKLp/ A6zCh3ga6b2PINGSNecCkMtHZmtHhuTDnrxMA03eRzYmU8Vu++HlQE41Eb6imgxV So3pfBO948EtI9bSB9S/P+fJczy3NgJs0yhHN8nlKW7tIOaOeSj7efFmdSztlFUO EyFvFweIX6vRNYloBfM9FKKjBN+ThkdE/KlUGqDUpJV790daFbBv6dMowHR62g1u qjSGGRoQTB+KJqWM6trDf4XQH5bbh6Gw8g8fFrkOMfT7natPoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP36LLAgLBH6EtcAps8moqYWHEXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTNhYjU5NjgtYTdkNS0z NzQ5LThlY2YtMzE0Njg2MjI2YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/kzCgDLeloNYKw24ba72m9/0WRgyE1xlFsOsc6vwFtyXg3+MaTrz8 Y+jFaIw9C+Uby1h5Z1cjhfb7g3YgBgwEmST8gBv38x0X2vDEbXN1ON8pP+MMVxix jWWAWHnk+RDMBRkRCOFQJbl6HSFKYQRShnbDkkSpuh2u7DpauwUrQ6S0Blovqwhg RjNZQtPmAO0HvU3wtpBn7+5vgzzEd0+LaCKHpuOOWpX2EtbQQfaouYfgzmPuY8Hs +3CH3Jo6PGXF/rswLcKJZbM5xm+27Mp2wdiKvOA/u9Kr9FPaGlpvUewt6X20FcSf bLFJoZH1VKu4qNTtCbp63fIV5yxjJyPv -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:26 2025 by rpki-client