$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2199a70-9dbc-362f-a9d5-7186e1d956c5.roa File: f2199a70-9dbc-362f-a9d5-7186e1d956c5.roa (raw, json) Hash identifier: ZIRAERj6dDtW0dbnQGBFKNgmwdEZYtmkrIox5R+kIlA= Subject key identifier: D9:DA:4F:02:E8:04:6B:87:7D:3D:CA:2F:31:76:6C:64:97:3C:BD:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB653D8942A0A17C27080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2199a70-9dbc-362f-a9d5-7186e1d956c5.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396546 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b6:53:d8:94:2a:0a:17:c2:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=7d97e11c-e502-474c-a012-8b63bb1ac94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:0a:37:47:e2:c8:d3:9b:9e:71:87:02:1f: 6a:ad:c8:c7:c2:0b:3b:96:09:e2:d9:3a:f0:49:46: dd:78:f4:c7:0a:12:52:5c:1c:5f:73:29:69:ec:13: c8:32:51:71:06:b0:13:72:a8:01:fa:af:31:e4:fb: 8a:4f:a1:2b:12:1e:cc:4d:0c:37:6c:ef:01:50:a7: e6:2b:8e:95:1b:06:a3:0d:7b:37:f9:63:dd:29:1c: 8a:a1:31:81:a4:c1:78:fd:7a:3c:d7:3e:23:63:7a: 18:12:3a:72:50:72:40:64:c7:aa:17:b7:f6:f0:18: 9c:09:c4:85:a0:cb:fa:f2:1f:7e:63:47:b7:63:77: be:ef:0d:b0:34:91:ad:4b:12:70:28:31:75:b2:89: 47:b1:60:af:7d:79:f6:59:83:cb:5a:ed:75:bf:57: 6a:1e:f9:e5:68:32:44:ef:68:ae:b8:00:1e:f0:34: 0b:3d:2f:a8:14:2d:c1:2e:54:65:aa:6b:a1:4e:7b: 56:1c:40:a6:74:b0:f2:f5:60:e6:31:8f:f0:7e:14: 99:46:aa:04:74:7f:b6:07:db:88:77:c6:3c:b9:f2: 11:b8:cf:bd:06:65:72:91:4b:30:c0:ee:63:d0:e9: 2a:c5:6e:fc:57:52:23:96:db:93:ed:6f:58:3f:02: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:4F:02:E8:04:6B:87:7D:3D:CA:2F:31:76:6C:64:97:3C:BD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2199a70-9dbc-362f-a9d5-7186e1d956c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4c:2f:6b:63:e7:86:02:c9:90:e5:1c:64:b8:0e:7d:70:23: a9:41:05:b3:63:4e:af:88:26:ed:67:5a:c0:30:72:15:df:ff: a6:71:4f:1f:27:e8:ce:00:a4:55:dd:de:c5:5e:19:e0:19:f2: ac:c2:bc:81:e0:51:6f:60:10:9c:a6:d0:1f:e8:0c:45:cd:3d: 73:fa:75:4d:88:91:9c:63:74:f1:16:44:fe:5b:0c:8e:08:da: cf:33:5a:9d:fc:86:44:fb:d1:2c:3c:f8:df:cb:7c:ee:d9:01: 35:16:02:23:34:86:79:c0:40:1d:bf:55:93:e1:47:fa:3a:f5: 16:8e:12:dc:e6:41:42:e0:76:3e:4e:94:9d:55:62:4f:69:c3: e4:76:17:75:ba:fb:9c:d8:05:e3:38:59:5d:7d:f3:03:cc:d7: 82:cb:3d:cb:b1:9e:c5:35:cc:89:05:5a:7e:0d:95:22:fd:56: 78:30:22:ea:b0:96:c6:71:af:db:b0:9f:0f:16:29:16:c8:d5: 9b:71:3e:9d:02:92:99:8e:97:f7:07:aa:0d:57:5f:bd:a7:90: bc:5b:77:2b:ba:e9:de:f3:f7:28:0f:50:29:d9:c3:f2:42:a8: c3:e2:3e:61:08:f1:b7:5f:f3:09:38:fd:83:36:f6:dd:1d:ff: 19:1c:4c:be -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7ZT2JQqChfCcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk N2Q5N2UxMWMtZTUwMi00NzRjLWEwMTItOGI2M2JiMWFjOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtwKN0fiyNObnnGHAh9qrcjHwgs7lgni2Trw SUbdePTHChJSXBxfcylp7BPIMlFxBrATcqgB+q8x5PuKT6ErEh7MTQw3bO8BUKfm K46VGwajDXs3+WPdKRyKoTGBpMF4/Xo81z4jY3oYEjpyUHJAZMeqF7f28BicCcSF oMv68h9+Y0e3Y3e+7w2wNJGtSxJwKDF1solHsWCvfXn2WYPLWu11v1dqHvnlaDJE 72iuuAAe8DQLPS+oFC3BLlRlqmuhTntWHECmdLDy9WDmMY/wfhSZRqoEdH+2B9uI d8Y8ufIRuM+9BmVykUswwO5j0OkqxW78V1IjltuT7W9YPwIElQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNnaTwLoBGuHfT3KLzF2bGSXPL3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjIxOTlhNzAtOWRiYy0z NjJmLWE5ZDUtNzE4NmUxZDk1NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMTC9rY+eGAsmQ5RxkuA59cCOpQQWzY06viCbtZ1rAMHIV3/+mcU8f J+jOAKRV3d7FXhngGfKswryB4FFvYBCcptAf6AxFzT1z+nVNiJGcY3TxFkT+WwyO CNrPM1qd/IZE+9EsPPjfy3zu2QE1FgIjNIZ5wEAdv1WT4Uf6OvUWjhLc5kFC4HY+ TpSdVWJPacPkdhd1uvuc2AXjOFldffMDzNeCyz3LsZ7FNcyJBVp+DZUi/VZ4MCLq sJbGca/bsJ8PFikWyNWbcT6dApKZjpf3B6oNV1+9p5C8W3cruune8/coD1Ap2cPy QqjD4j5hCPG3X/MJOP2DNvbdHf8ZHEy+ -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:51 2025 by rpki-client