$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa File: 21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa (raw, json) Hash identifier: oRxWtxBgFQOEC9V0qvFVysL7OQtoSwXi1WeiBJ4c12A= Subject key identifier: AF:07:D5:5C:28:CA:E7:F0:A0:4A:B6:22:E1:93:DC:45:56:8A:E3:C5 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584A9D30E72FD0224B2F07C67300 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 14977 IP address blocks: 137.87.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e7:2f:d0:22:4b:2f:07:c6:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=471e6f0f-06f4-4117-abd5-dc66687017b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:9b:4b:15:3e:40:82:77:21:70:f9:1e:17: 1e:51:8b:c2:80:0e:e6:e2:c0:22:fa:b4:00:a5:b6: eb:c5:aa:0c:32:de:35:0a:53:74:36:51:bd:ba:19: 34:9f:4f:39:b4:c3:6c:4f:41:c3:38:9e:b1:11:db: 6e:93:db:1b:e3:c9:77:fd:35:34:5d:ca:da:47:b5: bb:2e:0d:ba:e9:d5:e5:c3:3e:ed:95:4e:85:08:67: 84:06:02:1a:01:4a:d8:0a:a3:64:86:f2:e3:73:ec: dd:27:b7:36:69:93:9a:8c:9f:b8:38:47:a4:90:b2: c6:94:7d:14:98:33:29:28:78:5a:a1:6a:0c:4e:a2: 6f:1e:16:f6:39:a7:30:e3:25:51:c6:ba:d7:22:c7: a3:af:0b:68:9f:bd:bb:d9:80:74:ef:24:1e:e0:66: 75:51:47:d3:b3:06:8b:a2:f6:17:6f:f1:e5:b0:ea: 6f:1e:df:33:a2:b5:c5:ec:de:32:85:78:16:8a:58: c3:51:e2:d9:30:d4:e4:04:57:f6:d4:fc:8a:a0:39: e7:6e:93:ea:1d:0b:5f:06:94:bf:44:55:11:a1:c4: 6b:3f:a0:06:3a:86:d4:e8:20:ce:71:fb:8e:bf:de: 94:e7:df:04:7a:0d:04:70:0c:9d:d4:7a:8f:2a:25: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:D5:5C:28:CA:E7:F0:A0:4A:B6:22:E1:93:DC:45:56:8A:E3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.87.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:38:d3:b8:65:dc:6e:c1:dd:6f:03:e1:98:cd:58:bc:ca:ec: 48:b6:a7:42:59:69:58:ae:b1:a0:6c:9f:40:07:e8:c3:42:78: 44:6e:c7:32:62:c2:da:82:49:59:aa:27:9b:e6:6e:03:0e:f6: c9:69:2d:43:cc:61:c0:0c:73:24:50:8b:a0:4c:f0:d0:87:38: 5d:04:33:8d:07:ce:8e:b1:45:04:91:c6:81:09:94:95:a7:21: a5:7e:b0:db:1d:50:2a:fa:5e:3a:5d:f3:ad:b1:91:04:a9:e6: 3f:69:f8:a6:20:ea:f0:e9:3f:7d:ca:63:38:78:2f:60:c7:2b: 35:1a:c8:46:73:ea:10:9b:91:52:62:61:df:db:38:37:d3:9c: 7f:13:9e:68:3b:2e:43:9e:60:b1:8b:f2:34:db:53:4c:45:82: f7:22:60:ce:bb:48:58:08:21:29:be:35:2a:eb:8c:e1:e6:23: 43:ec:5d:59:a1:72:f7:e0:61:b3:2c:35:cc:9f:ec:ea:b6:e7: 71:2e:0e:2d:45:5f:e3:c6:f9:ee:a2:3a:62:0a:22:89:f8:2d: 2b:c1:7c:51:ad:8e:f2:24:f2:f7:3b:a2:88:f3:7c:c5:e3:08: 83:57:9b:90:80:55:61:c4:1d:8d:31:77:9c:75:de:b3:7c:9b: f3:50:82:5e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqdMOcv0CJLLwfGcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NDcxZTZmMGYtMDZmNC00MTE3LWFiZDUtZGM2NjY4NzAxN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGbSxU+QIJ3IXD5HhceUYvCgA7m4sAi+rQA pbbrxaoMMt41ClN0NlG9uhk0n085tMNsT0HDOJ6xEdtuk9sb48l3/TU0XcraR7W7 Lg266dXlwz7tlU6FCGeEBgIaAUrYCqNkhvLjc+zdJ7c2aZOajJ+4OEekkLLGlH0U mDMpKHhaoWoMTqJvHhb2Oacw4yVRxrrXIsejrwton7272YB07yQe4GZ1UUfTswaL ovYXb/HlsOpvHt8zorXF7N4yhXgWiljDUeLZMNTkBFf21PyKoDnnbpPqHQtfBpS/ RFURocRrP6AGOobU6CDOcfuOv96U598Eeg0EcAyd1HqPKiXtkwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK8H1VwoyufwoEq2IuGT3EVWiuPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMjFjYWUwZGEtYjdkMi0z NzZhLWIzMGUtMWNlNWRmNjNmZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAzDjTuGXcbsHdbwPhmM1YvMrsSLanQllpWK6xoGyfQAfow0J4RG7HMmLC 2oJJWaonm+ZuAw72yWktQ8xhwAxzJFCLoEzw0Ic4XQQzjQfOjrFFBJHGgQmUlach pX6w2x1QKvpeOl3zrbGRBKnmP2n4piDq8Ok/fcpjOHgvYMcrNRrIRnPqEJuRUmJh 39s4N9OcfxOeaDsuQ55gsYvyNNtTTEWC9yJgzrtIWAghKb41KuuM4eYjQ+xdWaFy 9+Bhsyw1zJ/s6rbncS4OLUVf48b57qI6YgoiifgtK8F8Ua2O8iTy9zuiiPN8xeMI g1ebkIBVYcQdjTF3nHXes3yb81CCXg== -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:31 2025 by rpki-client