$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa File: 535be0a1-254e-39da-b317-25ebb54be9fc.roa (raw, json) Hash identifier: D67I007f4X3sxsdIr9KjLRZCOVRXGxZXlYcRR9vK1CA= Subject key identifier: 05:C9:D5:F8:83:87:6E:B8:50:C3:D2:52:76:07:C2:A2:EE:12:DA:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77CA66A05D08DF221E280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 397212 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7c:a6:6a:05:d0:8d:f2:21:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=11bcec38-ed6d-4f02-8e0a-1a92abea5de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:23:92:9f:aa:f3:f1:73:bb:4d:82:c3:d8: 0a:c8:37:b6:b9:15:6b:20:e1:fa:cf:61:a6:fc:86: 32:9c:92:8c:91:6f:d5:dc:51:81:cb:82:dc:42:21: 5e:9c:12:55:e6:c4:c3:97:64:70:18:78:24:4a:53: 70:e2:df:54:45:88:92:e4:7a:83:a8:1f:8b:96:3e: d4:5e:7d:79:21:17:bc:17:48:87:d4:c0:85:6e:57: b8:d0:84:85:9a:1e:fc:05:39:8d:c0:9c:40:aa:cf: 89:24:ca:f5:fe:e6:a7:e8:69:f2:c9:9c:1c:9d:fd: 27:b2:b1:48:1f:2b:75:13:6c:88:45:b4:a5:bf:c3: b4:b1:97:f6:58:c7:0e:08:98:d3:d5:95:01:e1:70: 8e:cb:69:73:29:5d:e2:b7:d1:c1:3a:36:b4:63:85: 7e:44:81:8a:d8:4a:b7:c6:47:21:03:e3:b4:60:2f: b7:9a:44:86:ae:07:ae:ba:7d:18:8f:4d:c3:d0:24: b4:aa:1c:94:f3:47:58:f9:23:d5:f2:4e:f1:ce:46: 4e:4e:95:fc:4f:1b:de:2f:91:58:cf:42:37:17:c0: 6d:2e:60:75:04:47:63:10:f9:7a:ca:85:c7:23:b3: 88:b6:12:ab:d4:7c:6c:21:f2:31:dc:07:92:18:f3: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C9:D5:F8:83:87:6E:B8:50:C3:D2:52:76:07:C2:A2:EE:12:DA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:88:5e:80:b2:e5:28:9b:db:ae:d0:a4:4f:ea:63:b9:10:ce: 15:74:41:60:93:64:88:93:74:ec:43:e5:34:b1:3e:d7:2b:17: 63:7a:66:dd:67:81:70:c4:8d:66:9b:78:3a:e2:9e:68:01:00: de:81:0d:70:21:8d:26:f3:73:53:bd:82:f6:81:fd:36:31:e0: 51:04:db:d6:74:09:c1:27:45:f3:a5:99:47:c1:d0:c7:75:36: 6b:f2:81:c1:22:85:18:67:16:2c:c5:ce:9c:8d:9b:54:2f:9f: 97:31:cb:8d:79:38:31:3e:d8:5f:d2:1f:17:3d:07:54:4b:44: 01:22:54:b3:f0:61:af:60:ad:4c:41:6f:88:cc:e1:17:5b:0b: 04:0a:85:26:ea:ce:80:b7:a9:26:43:c9:b0:99:8f:67:95:7e: 40:1a:6c:75:9e:46:08:e1:3f:c1:f5:69:69:b9:bf:fb:b1:95: 89:ed:47:a2:e2:03:b6:00:c9:e0:50:16:7e:52:ec:f8:6b:14: 52:e1:e5:0d:92:2a:5a:8c:95:e9:3d:fb:f1:78:6d:da:10:14: 55:34:27:9b:ac:a0:9b:2c:9e:b8:1d:b2:6b:b7:e4:7e:c9:4b: 9b:51:33:39:fb:75:c0:58:95:33:0c:5f:af:bf:81:9f:b1:e3: 7c:2b:6d:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3ymagXQjfIh4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MTFiY2VjMzgtZWQ2ZC00ZjAyLThlMGEtMWE5MmFiZWE1ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsjkp+q8/Fzu02Cw9gKyDe2uRVrIOH6z2Gm /IYynJKMkW/V3FGBy4LcQiFenBJV5sTDl2RwGHgkSlNw4t9URYiS5HqDqB+Llj7U Xn15IRe8F0iH1MCFble40ISFmh78BTmNwJxAqs+JJMr1/uan6GnyyZwcnf0nsrFI Hyt1E2yIRbSlv8O0sZf2WMcOCJjT1ZUB4XCOy2lzKV3it9HBOja0Y4V+RIGK2Eq3 xkchA+O0YC+3mkSGrgeuun0Yj03D0CS0qhyU80dY+SPV8k7xzkZOTpX8TxveL5FY z0I3F8BtLmB1BEdjEPl6yoXHI7OIthKr1HxsIfIx3AeSGPOCewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAXJ1fiDh264UMPSUnYHwqLuEtpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM1YmUwYTEtMjU0ZS0z OWRhLWIzMTctMjVlYmI1NGJlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+iF6AsuUom9uu0KRP6mO5EM4VdEFgk2SIk3TsQ+U0sT7XKxdjembd Z4FwxI1mm3g64p5oAQDegQ1wIY0m83NTvYL2gf02MeBRBNvWdAnBJ0XzpZlHwdDH dTZr8oHBIoUYZxYsxc6cjZtUL5+XMcuNeTgxPthf0h8XPQdUS0QBIlSz8GGvYK1M QW+IzOEXWwsECoUm6s6At6kmQ8mwmY9nlX5AGmx1nkYI4T/B9Wlpub/7sZWJ7Uei 4gO2AMngUBZ+Uuz4axRS4eUNkipajJXpPfvxeG3aEBRVNCebrKCbLJ64HbJrt+R+ yUubUTM5+3XAWJUzDF+vv4GfseN8K200 -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:44 2025 by rpki-client