$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa File: 3364c280-cb03-37db-bf51-302d179ee104.roa (raw, json) Hash identifier: 1ob+4rK51PWmMJG0xNQKawXdehMPtf1FVFxJxYZxQb0= Subject key identifier: 09:C9:AF:71:D5:C2:85:CF:FA:2D:18:6C:D5:84:92:A2:93:4C:8F:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B7795D17793EFB17C0B380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396612 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:79:5d:17:79:3e:fb:17:c0:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=3c51bb73-b27f-4fab-b8bc-fac1fe5b6a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:0e:57:6e:12:3f:32:a8:94:f3:17:8f:5c: c1:6a:db:21:39:1b:1c:33:36:7e:ba:f9:50:43:d5: 1e:50:04:d8:2a:d6:72:84:47:a8:c9:63:01:40:d2: 6e:72:3b:04:1b:e1:03:d1:f5:42:49:1b:4b:14:3a: e6:24:ce:8c:29:de:e0:71:0e:42:34:18:01:c0:af: 94:7e:9c:df:c2:35:4e:0f:4c:69:2d:26:b8:8e:0b: f0:a8:29:07:ce:74:b2:e8:d1:8e:de:84:05:1a:b7: 72:0c:98:6b:ff:e6:59:b9:a2:f5:c3:80:f4:ca:af: 88:ee:2d:4f:0e:b4:65:39:0b:c7:5d:31:eb:4f:44: ae:06:0f:3a:e0:2c:54:89:86:75:07:d1:ce:21:af: ad:09:cd:1d:67:ad:c7:41:7d:1d:39:47:21:65:d1: f4:13:99:50:4f:9d:01:30:7c:3f:70:d9:5b:30:fa: 7c:ae:4c:a8:72:92:59:42:9c:9c:be:b1:ea:d8:fa: ac:b9:89:54:8a:72:7f:34:ea:f3:19:8c:42:58:66: 3c:34:e8:8a:aa:64:84:99:bd:4c:42:ad:3a:ed:df: eb:50:e4:f0:f3:f7:6f:fe:0d:80:a3:b9:c3:40:4a: 51:f8:9b:84:8f:cc:97:b3:87:71:d6:70:9a:1f:44: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C9:AF:71:D5:C2:85:CF:FA:2D:18:6C:D5:84:92:A2:93:4C:8F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:df:15:2d:ee:3d:2a:e9:cd:c1:f0:ed:9f:10:81:64:f7:59: dd:58:df:59:e1:dc:79:5d:71:2a:e9:aa:49:1f:27:dc:87:7c: 83:da:55:85:8e:b4:d1:48:fb:38:cd:ca:08:f2:53:a3:d2:84: ae:b8:28:c7:61:44:8c:c6:66:a6:ae:ad:f9:58:21:fb:3f:94: 9d:28:48:5d:76:c8:8e:18:9b:09:a5:cd:37:f5:3b:71:20:0e: 39:04:e5:1a:4b:11:f9:60:c5:19:5f:43:51:fc:fd:bd:c3:49: 36:73:b6:5b:67:5f:5f:9a:71:89:63:0f:a7:32:13:af:ef:8f: 90:44:f6:5a:b2:b5:43:13:0c:65:c2:d5:fb:73:b3:b1:80:cd: 34:35:8e:e1:e0:0c:93:11:b0:d4:ec:18:d0:43:88:1d:57:83: 47:a8:aa:e5:59:46:f9:1d:cc:f8:80:8f:e2:99:de:86:cc:c1: 95:4d:1c:cd:d2:15:cc:ed:6c:08:a5:9e:30:ca:e6:a0:ff:f3: db:98:e1:17:70:25:11:92:65:f4:39:cc:bf:15:28:d5:22:2a: 6d:54:f0:91:75:08:fc:58:e9:80:95:15:86:75:ee:94:1a:b2: d5:93:de:63:64:e1:10:59:e8:c8:64:20:51:f9:c7:8c:56:64: 9d:92:1b:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3ldF3k++xfAs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk M2M1MWJiNzMtYjI3Zi00ZmFiLWI4YmMtZmFjMWZlNWI2YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfoOV24SPzKolPMXj1zBatshORscMzZ+uvlQ Q9UeUATYKtZyhEeoyWMBQNJucjsEG+ED0fVCSRtLFDrmJM6MKd7gcQ5CNBgBwK+U fpzfwjVOD0xpLSa4jgvwqCkHznSy6NGO3oQFGrdyDJhr/+ZZuaL1w4D0yq+I7i1P DrRlOQvHXTHrT0SuBg864CxUiYZ1B9HOIa+tCc0dZ63HQX0dOUchZdH0E5lQT50B MHw/cNlbMPp8rkyocpJZQpycvrHq2PqsuYlUinJ/NOrzGYxCWGY8NOiKqmSEmb1M Qq067d/rUOTw8/dv/g2Ao7nDQEpR+JuEj8yXs4dx1nCaH0TS0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAnJr3HVwoXP+i0YbNWEkqKTTI+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzM2NGMyODAtY2IwMy0z N2RiLWJmNTEtMzAyZDE3OWVlMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA23xUt7j0q6c3B8O2fEIFk91ndWN9Z4dx5XXEq6apJHyfch3yD2lWF jrTRSPs4zcoI8lOj0oSuuCjHYUSMxmamrq35WCH7P5SdKEhddsiOGJsJpc039Ttx IA45BOUaSxH5YMUZX0NR/P29w0k2c7ZbZ19fmnGJYw+nMhOv74+QRPZasrVDEwxl wtX7c7OxgM00NY7h4AyTEbDU7BjQQ4gdV4NHqKrlWUb5Hcz4gI/imd6GzMGVTRzN 0hXM7WwIpZ4wyuag//PbmOEXcCURkmX0Ocy/FSjVIiptVPCRdQj8WOmAlRWGde6U GrLVk95jZOEQWejIZCBR+ceMVmSdkhvR -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:05 2025 by rpki-client