$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa File: fa1e13ce-9970-30d6-aad3-dea1431848fe.roa (raw, json) Hash identifier: dqiWneC8MN1BCfu2p0TtPVjtCZa6CXdSILkTL4ay5vE= Subject key identifier: 6F:73:52:A3:B1:B9:22:64:B1:F2:AF:AD:15:2C:D3:7A:BF:A1:EF:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB1F34A7268EB5E7BA2A8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396595 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b1:f3:4a:72:68:eb:5e:7b:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=43744017-fe90-4c5a-b172-30c1a6c6174e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:05:53:f8:1b:ec:1c:e0:be:e8:f3:9d:1f: 55:42:dd:36:fd:37:9f:39:00:40:8b:88:d5:fb:1d: 1d:18:db:8b:97:5e:d5:11:b4:a1:65:99:17:ea:79: b8:48:ad:09:6e:e7:5d:20:a8:d8:65:6f:23:e7:da: 8c:3b:c2:71:ee:9b:ed:73:43:21:f3:ff:1a:27:11: 2a:e6:d3:6f:d7:eb:15:81:d8:bb:fe:f8:44:e3:7b: 79:ae:5c:0c:3b:3d:05:a0:64:1d:70:1d:53:c4:d2: d8:b4:07:b4:5e:ea:8e:70:54:dc:06:6a:78:bf:28: 27:41:7a:11:b7:74:99:82:21:b0:0d:13:d9:90:93: b9:df:8a:e3:77:cf:d0:ea:75:e6:f0:e9:7a:98:db: 8a:3b:fe:34:1e:75:bf:7a:04:c3:d5:9d:b1:7f:2d: 75:e0:ea:a7:a2:70:45:23:3a:4c:47:f3:e7:8d:67: 0c:7f:31:e4:ad:b9:cf:4c:c0:28:6b:99:d9:3f:57: 06:2e:2b:6d:79:2f:36:0e:eb:64:77:31:74:fa:a4: da:85:9e:1f:e9:56:5c:6d:73:54:a6:aa:11:ef:4f: dd:ab:f8:fa:76:07:b4:39:4f:89:0a:88:d1:a7:48: f2:f6:fd:a1:ee:d0:54:e7:c0:8d:30:c4:c5:4b:6b: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:52:A3:B1:B9:22:64:B1:F2:AF:AD:15:2C:D3:7A:BF:A1:EF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f5:8d:e1:ab:86:d5:da:49:b8:b3:0c:bc:71:b5:86:d9:62: 06:82:f7:09:0c:05:e6:4f:a3:3b:7c:98:39:1f:cc:63:fd:94: 6e:cd:3b:ac:18:92:fe:e2:7a:0f:cd:ef:5f:46:25:30:ef:a1: 01:87:5f:f2:50:e1:4a:43:ae:6a:55:25:32:74:43:90:27:00: f4:e8:a6:8c:c4:37:8c:dc:30:f0:f6:1c:df:d6:8f:f4:ba:89: c9:68:9b:28:07:cc:46:92:a7:6c:04:d9:f4:58:42:22:94:2a: 93:1d:33:59:94:4e:31:28:3b:6c:65:37:30:25:4e:63:fd:ef: d2:a8:72:dd:52:6a:fa:ed:88:44:c1:10:8a:bf:80:1d:8c:d1: 77:e2:62:7f:75:49:72:d9:79:7b:7f:fa:07:b6:7a:4f:08:39: 5a:20:0f:ee:73:d7:e0:66:7f:99:df:24:30:30:cc:1e:d9:26: 1b:91:e7:b2:5f:6f:b2:4e:f0:94:18:74:29:0e:8e:65:85:db: f9:fd:7c:42:e0:2a:74:c7:fb:77:34:8d:2e:02:47:11:3f:fe: 72:44:f8:6c:c7:08:55:6e:0a:ca:72:83:77:1f:60:aa:2b:0a: 0a:68:41:e1:56:5b:31:66:7f:89:9c:61:0c:5d:16:fa:a7:6c: 36:5d:bd:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7HzSnJo6157oqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NDM3NDQwMTctZmU5MC00YzVhLWIxNzItMzBjMWE2YzYxNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc4FU/gb7BzgvujznR9VQt02/TefOQBAi4jV +x0dGNuLl17VEbShZZkX6nm4SK0JbuddIKjYZW8j59qMO8Jx7pvtc0Mh8/8aJxEq 5tNv1+sVgdi7/vhE43t5rlwMOz0FoGQdcB1TxNLYtAe0XuqOcFTcBmp4vygnQXoR t3SZgiGwDRPZkJO534rjd8/Q6nXm8Ol6mNuKO/40HnW/egTD1Z2xfy114OqnonBF IzpMR/PnjWcMfzHkrbnPTMAoa5nZP1cGLitteS82DutkdzF0+qTahZ4f6VZcbXNU pqoR70/dq/j6dge0OU+JCojRp0jy9v2h7tBU58CNMMTFS2tKbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG9zUqOxuSJksfKvrRUs03q/oe/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmExZTEzY2UtOTk3MC0z MGQ2LWFhZDMtZGVhMTQzMTg0OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQ9Y3hq4bV2km4swy8cbWG2WIGgvcJDAXmT6M7fJg5H8xj/ZRuzTus GJL+4noPze9fRiUw76EBh1/yUOFKQ65qVSUydEOQJwD06KaMxDeM3DDw9hzf1o/0 uonJaJsoB8xGkqdsBNn0WEIilCqTHTNZlE4xKDtsZTcwJU5j/e/SqHLdUmr67YhE wRCKv4AdjNF34mJ/dUly2Xl7f/oHtnpPCDlaIA/uc9fgZn+Z3yQwMMwe2SYbkeey X2+yTvCUGHQpDo5lhdv5/XxC4Cp0x/t3NI0uAkcRP/5yRPhsxwhVbgrKcoN3H2Cq KwoKaEHhVlsxZn+JnGEMXRb6p2w2Xb1y -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:49 2025 by rpki-client