$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa File: 33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa (raw, json) Hash identifier: 42kONv7N+PlFq4vIl+YDh79ca6tjcDqDkIG1pLmz9hE= Subject key identifier: EE:AC:BA:9C:9F:5A:1E:04:9C:84:A8:13:39:FA:B6:13:03:0F:41:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77D4769FB741159B4E900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396594 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7d:47:69:fb:74:11:59:b4:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=dd2134c1-f51e-476f-94df-5579af5dcd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:ae:54:30:b9:05:a5:14:50:b9:4a:af:bf: 1b:4b:7d:59:d3:70:2d:ac:e2:8e:92:02:b9:cd:05: 0a:97:2b:de:43:0a:40:3d:5f:20:22:4c:b1:1e:58: 37:22:1c:45:f3:5d:3c:7a:86:c5:44:80:06:a8:1b: 02:2b:43:19:ec:af:f2:6a:c2:1b:a0:ee:11:43:3e: b2:24:45:ec:3b:2d:0a:46:66:cc:8e:6a:e3:14:a4: 4b:87:a1:e5:6c:68:4c:f0:b7:3e:6f:bb:bd:6c:ae: 28:01:4c:8a:89:73:a9:ce:3b:36:07:b5:cd:cb:9a: 2f:b7:c4:47:9d:db:30:c3:18:51:2c:e3:4c:c9:4a: 26:42:cb:34:05:28:d2:13:09:46:32:a6:79:ed:fc: 8d:b2:bb:f9:ca:08:99:2b:37:b4:d4:ad:ac:11:4b: e9:b5:88:0e:db:c9:45:17:6b:8d:a0:f5:f3:cb:6f: c6:06:12:df:e2:1d:75:01:f7:2d:38:3e:d3:e1:cc: 64:b0:fe:34:7a:c1:74:6c:4b:07:f2:a4:96:ce:19: a4:9a:a9:d3:11:67:9d:d9:66:2a:43:9b:c4:41:17: d9:b9:0c:69:8d:97:e1:8d:b9:84:88:2e:dc:96:d1: d1:ed:6c:2e:f2:ea:bf:4a:16:a7:ce:98:ae:e4:94: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AC:BA:9C:9F:5A:1E:04:9C:84:A8:13:39:FA:B6:13:03:0F:41:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c7:57:41:fd:48:51:80:36:f8:69:25:f3:0c:cc:4a:a3:9c: bb:00:69:67:a1:a9:8d:79:58:5e:61:80:9f:3b:49:e4:94:23: ca:c1:cf:96:59:21:6b:33:c6:86:ba:44:45:c8:09:73:c0:68: 86:7e:17:14:24:fe:2c:ef:09:47:e9:cc:4c:4b:e5:ec:be:18: 1f:2a:6b:f4:66:de:cb:97:65:38:94:a2:21:c9:25:0f:10:c8: c6:6a:03:47:0e:a2:a4:26:46:6d:6e:e7:87:89:0e:85:b8:e3: d1:b9:64:ec:ad:ef:d6:75:29:56:5d:df:54:00:ce:c4:be:27: 04:a9:f6:60:ac:e5:3b:4f:83:16:9a:b8:52:cd:c3:bf:d7:2b: bf:7e:da:93:b5:59:cc:d2:58:db:59:a4:89:38:ce:64:d7:10: 1d:28:07:48:4c:e1:dc:6b:0c:b4:dd:1d:ec:c0:56:08:4c:30: f3:87:3f:78:13:eb:60:c1:8d:1e:c8:67:ca:dd:1c:bd:e2:91: bc:66:05:4e:2c:4d:ef:fa:97:93:2d:0f:da:d7:b4:e3:90:24: 53:31:d7:f1:ef:b5:4b:b3:52:a2:c5:32:43:ed:d0:8c:e9:13: 2e:32:ee:8d:2b:9c:b7:06:a9:a5:fb:38:66:81:d3:3e:fd:39: f8:a2:94:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt31Haft0EVm06QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZGQyMTM0YzEtZjUxZS00NzZmLTk0ZGYtNTU3OWFmNWRjZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5GuVDC5BaUUULlKr78bS31Z03AtrOKOkgK5 zQUKlyveQwpAPV8gIkyxHlg3IhxF8108eobFRIAGqBsCK0MZ7K/yasIboO4RQz6y JEXsOy0KRmbMjmrjFKRLh6HlbGhM8Lc+b7u9bK4oAUyKiXOpzjs2B7XNy5ovt8RH ndswwxhRLONMyUomQss0BSjSEwlGMqZ57fyNsrv5ygiZKze01K2sEUvptYgO28lF F2uNoPXzy2/GBhLf4h11AfctOD7T4cxksP40esF0bEsH8qSWzhmkmqnTEWed2WYq Q5vEQRfZuQxpjZfhjbmEiC7cltHR7Wwu8uq/Shanzpiu5JQZvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO6supyfWh4EnISoEzn6thMDD0GmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNjNTJkZGEtY2NjOS0z Y2IxLThjMTktODNjZWEwOWVlZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDx1dB/UhRgDb4aSXzDMxKo5y7AGlnoamNeVheYYCfO0nklCPKwc+W WSFrM8aGukRFyAlzwGiGfhcUJP4s7wlH6cxMS+XsvhgfKmv0Zt7Ll2U4lKIhySUP EMjGagNHDqKkJkZtbueHiQ6FuOPRuWTsre/WdSlWXd9UAM7EvicEqfZgrOU7T4MW mrhSzcO/1yu/ftqTtVnM0ljbWaSJOM5k1xAdKAdITOHcawy03R3swFYITDDzhz94 E+tgwY0eyGfK3Ry94pG8ZgVOLE3v+peTLQ/a17TjkCRTMdfx77VLs1KixTJD7dCM 6RMuMu6NK5y3Bqml+zhmgdM+/Tn4opRH -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:45 2025 by rpki-client