$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa File: 684a7ddc-fe37-3898-a92f-52690e597b61.roa (raw, json) Hash identifier: cVUgZ3dL8PWJKa/VchT2UdnyWn1e247hiUhdR7RDEXQ= Subject key identifier: DC:A9:2C:B4:59:F1:CB:8A:A0:B4:57:A0:A2:25:47:56:58:FB:CD:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77D231BB348C4F45FAB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396587 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7d:23:1b:b3:48:c4:f4:5f:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=091dfdaf-705e-4b98-bb16-3805fb6ff132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:09:2f:75:a1:ea:2f:30:87:2d:67:ea:34: 07:78:eb:79:4e:d0:2e:77:2e:63:ee:79:e1:38:6a: ec:ed:b5:31:ba:09:e8:34:6b:76:ac:32:df:bb:d4: 3a:ae:70:f8:59:12:52:34:b8:41:dd:58:76:92:49: d1:37:b2:df:29:50:2c:cf:b6:a2:9c:2b:42:99:6e: af:c7:a9:b1:95:f0:a2:22:ca:a0:56:93:b8:2b:83: 70:ab:38:e4:90:c7:00:da:89:be:3d:d6:f2:c2:7c: 2e:d7:72:5e:5b:a8:1e:89:94:a0:86:59:71:e2:89: bd:25:36:98:fd:a7:88:43:15:93:20:66:27:0c:4c: 9d:c1:ec:59:31:b7:04:e3:b4:5a:f9:13:07:72:5a: 34:d0:c2:20:12:6d:a1:a1:f1:b3:5e:fa:9f:3b:26: 5b:0d:c2:43:b5:ee:bf:fc:43:c9:28:4a:c6:59:5f: b1:8f:26:7b:06:ad:e9:2d:31:91:ac:55:36:d3:32: b0:e3:c5:0c:8f:4e:62:bb:17:b1:d7:66:df:d8:89: 1e:16:c6:2f:02:99:30:68:a3:8f:4f:3b:d3:4f:ab: 1c:bd:01:29:8e:b5:c0:07:98:32:a1:3f:70:d6:3f: f8:20:ea:f8:cf:35:74:c2:69:cc:f5:94:95:3f:ef: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:2C:B4:59:F1:CB:8A:A0:B4:57:A0:A2:25:47:56:58:FB:CD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:80:d2:92:e4:43:b8:55:ec:b7:a1:fc:3b:38:cc:87:b9:5d: 4d:72:c3:d3:32:86:f9:c1:54:2d:1b:a6:14:d8:92:98:85:b0: e1:27:24:4b:7d:8b:2e:fb:4b:f6:cb:18:87:3f:a4:ef:db:5c: ce:e9:8c:e7:b2:49:e3:ca:4d:36:fc:d6:bb:33:eb:58:4a:f9: aa:03:d1:a6:5f:ab:f7:65:d3:c1:a6:aa:05:30:de:18:5d:59: c9:47:53:2d:54:cc:4c:d2:36:5b:25:0e:fe:10:d3:15:f3:48: 1c:41:8e:a9:cb:9f:b8:72:34:11:77:28:b3:03:1b:ce:6d:66: 10:a4:85:63:5e:de:9f:91:97:7c:9b:ad:4c:96:e9:24:23:2a: 09:58:2f:e9:84:97:d1:4a:28:38:50:aa:cd:f0:dd:dc:f2:11: 47:46:54:ab:44:42:44:f1:70:83:26:dc:47:65:81:8b:27:1c: 62:98:e6:ad:9c:f4:f2:39:e3:c3:40:6c:e2:4e:84:d2:2a:c7: 08:d2:cd:1f:35:95:ca:8e:38:10:b2:e9:c7:93:54:31:b7:b7: a6:88:78:d7:08:02:9d:b6:33:c9:93:15:f5:80:45:6e:bb:78: 54:68:dc:17:bc:4a:55:79:a4:9f:a9:59:81:55:f0:58:46:dc: 01:1e:09:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt30jG7NIxPRfqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MDkxZGZkYWYtNzA1ZS00Yjk4LWJiMTYtMzgwNWZiNmZmMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C0JL3Wh6i8why1n6jQHeOt5TtAudy5j7nnh OGrs7bUxugnoNGt2rDLfu9Q6rnD4WRJSNLhB3Vh2kknRN7LfKVAsz7ainCtCmW6v x6mxlfCiIsqgVpO4K4NwqzjkkMcA2om+Pdbywnwu13JeW6geiZSghllx4om9JTaY /aeIQxWTIGYnDEydwexZMbcE47Ra+RMHclo00MIgEm2hofGzXvqfOyZbDcJDte6/ /EPJKErGWV+xjyZ7Bq3pLTGRrFU20zKw48UMj05iuxex12bf2IkeFsYvApkwaKOP TzvTT6scvQEpjrXAB5gyoT9w1j/4IOr4zzV0wmnM9ZSVP+/ZsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNypLLRZ8cuKoLRXoKIlR1ZY+812MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjg0YTdkZGMtZmUzNy0z ODk4LWE5MmYtNTI2OTBlNTk3YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxgNKS5EO4Vey3ofw7OMyHuV1NcsPTMob5wVQtG6YU2JKYhbDhJyRL fYsu+0v2yxiHP6Tv21zO6Yznsknjyk02/Na7M+tYSvmqA9GmX6v3ZdPBpqoFMN4Y XVnJR1MtVMxM0jZbJQ7+ENMV80gcQY6py5+4cjQRdyizAxvObWYQpIVjXt6fkZd8 m61MlukkIyoJWC/phJfRSig4UKrN8N3c8hFHRlSrREJE8XCDJtxHZYGLJxximOat nPTyOePDQGziToTSKscI0s0fNZXKjjgQsunHk1Qxt7emiHjXCAKdtjPJkxX1gEVu u3hUaNwXvEpVeaSfqVmBVfBYRtwBHgkb -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:17 2025 by rpki-client