$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa File: f8572b75-cff9-35aa-b031-036f8f47dec8.roa (raw, json) Hash identifier: 5zfD3ThBQmL4Xu8CQ1ltk1DJ6Vp0j0CEntVD5AcGvV4= Subject key identifier: 32:17:7C:AA:73:80:9D:4E:10:EF:4C:62:7C:74:25:82:D7:FE:B3:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB176A513670BA5D6B100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396590 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b1:76:a5:13:67:0b:a5:d6:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=16f2e96e-f611-46b8-a19d-85aa2556770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:d8:71:47:e3:f6:61:fd:f3:13:9f:e0:36: b7:b2:af:65:6d:58:44:de:b6:02:35:98:f5:4c:a1: b3:df:1b:74:ba:1f:fd:88:c1:f3:d2:e0:ec:f2:34: e4:18:ce:3f:25:2b:69:9b:34:5a:b1:0d:76:4b:12: 54:f9:84:88:0e:30:d6:fe:48:1b:69:48:31:d6:15: ed:b8:4e:17:90:5a:c8:bb:97:32:92:5d:67:64:fb: d4:db:1d:06:a9:0d:1c:0d:ab:8f:97:f4:2a:3d:db: 32:01:62:58:45:6b:58:9a:f0:64:f3:fd:30:de:96: 24:11:48:b3:ef:d4:5a:0c:60:ab:b8:b2:f0:04:92: 83:f8:25:7a:0c:3f:a3:56:63:83:08:56:61:c7:17: 5c:11:75:d8:7d:30:5e:05:67:f4:5b:2a:05:89:81: aa:74:9c:b0:d8:1d:29:9a:32:34:a4:98:07:0a:7c: 8e:83:84:e0:b8:b7:69:9c:cc:6f:59:d6:2e:b5:18: 67:c7:e3:98:37:de:f4:92:9a:0f:76:52:fb:41:bd: 6c:b4:e0:59:85:67:1c:d8:f9:9c:22:35:f3:29:b6: c5:0c:f1:f4:86:6a:90:9b:d4:84:f0:ff:22:49:0f: df:57:d3:03:a0:4f:ff:8e:39:b8:db:02:3f:9b:62: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:7C:AA:73:80:9D:4E:10:EF:4C:62:7C:74:25:82:D7:FE:B3:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d9:12:7b:0c:15:b9:a4:3d:f4:37:eb:8d:0d:c5:73:3d:3d: 63:bb:e6:8e:cb:ae:35:0c:12:7c:81:73:b2:26:ad:c9:e0:3c: 62:f4:ab:f9:ae:c1:5d:bc:26:a7:77:45:3e:37:29:18:a7:7b: e4:ca:67:28:a5:37:bb:3d:94:1d:ca:c1:9f:07:65:4d:49:1f: 13:dd:6e:4b:7e:45:07:72:72:7f:9e:dd:01:8f:b4:8a:af:24: 4b:dc:d6:ae:b1:17:e8:9e:a0:aa:f0:35:e0:af:22:7c:81:a0: f4:37:91:d3:97:ef:de:f1:82:8d:11:ad:0a:5a:61:bd:16:95: 81:c2:79:13:29:95:1c:78:bc:8c:fc:53:89:47:c9:23:b8:74: 4b:48:e4:1a:55:dd:f2:8d:f1:5c:b9:09:e0:b5:95:44:4a:5b: 3d:ff:a9:1b:2e:50:27:10:ac:66:3a:a3:28:b1:e3:15:1c:9b: b7:77:f7:1d:9d:6e:f3:be:e2:8e:49:db:fd:f4:f7:e5:c4:0a: d9:66:14:6e:5c:cb:5f:b7:e2:cc:4a:46:1d:e9:f9:16:9d:4f: 4a:8a:b3:ee:53:7f:e9:67:50:b0:75:fa:8b:71:04:c5:9e:5b: ba:dc:58:22:c9:df:5c:8b:4d:73:05:9a:7b:48:4a:e3:37:ec: 2d:ce:9b:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7F2pRNnC6XWsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MTZmMmU5NmUtZjYxMS00NmI4LWExOWQtODVhYTI1NTY3NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkivYcUfj9mH98xOf4Da3sq9lbVhE3rYCNZj1 TKGz3xt0uh/9iMHz0uDs8jTkGM4/JStpmzRasQ12SxJU+YSIDjDW/kgbaUgx1hXt uE4XkFrIu5cykl1nZPvU2x0GqQ0cDauPl/QqPdsyAWJYRWtYmvBk8/0w3pYkEUiz 79RaDGCruLLwBJKD+CV6DD+jVmODCFZhxxdcEXXYfTBeBWf0WyoFiYGqdJyw2B0p mjI0pJgHCnyOg4TguLdpnMxvWdYutRhnx+OYN970kpoPdlL7Qb1stOBZhWcc2Pmc IjXzKbbFDPH0hmqQm9SE8P8iSQ/fV9MDoE//jjm42wI/m2KKjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIXfKpzgJ1OEO9MYnx0JYLX/rP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg1NzJiNzUtY2ZmOS0z NWFhLWIwMzEtMDM2ZjhmNDdkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAK2RJ7DBW5pD30N+uNDcVzPT1ju+aOy641DBJ8gXOyJq3J4Dxi9Kv5 rsFdvCand0U+NykYp3vkymcopTe7PZQdysGfB2VNSR8T3W5LfkUHcnJ/nt0Bj7SK ryRL3NausRfonqCq8DXgryJ8gaD0N5HTl+/e8YKNEa0KWmG9FpWBwnkTKZUceLyM /FOJR8kjuHRLSOQaVd3yjfFcuQngtZVESls9/6kbLlAnEKxmOqMoseMVHJu3d/cd nW7zvuKOSdv99PflxArZZhRuXMtft+LMSkYd6fkWnU9KirPuU3/pZ1CwdfqLcQTF nlu63Fgiyd9ci01zBZp7SErjN+wtzpsl -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:24 2025 by rpki-client