$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/861b1f13-b1a3-396d-8304-b0b8dd591037.roa File: 861b1f13-b1a3-396d-8304-b0b8dd591037.roa (raw, json) Hash identifier: yWWgyLU9tzYpAq6CINV/ZVUR3ZL6T5F4fVf+A7nPjgI= Subject key identifier: 8E:6F:1D:EF:5A:09:91:28:53:54:39:D4:89:96:A4:CF:91:A3:A6:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B776F4B539A496B3A6E680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/861b1f13-b1a3-396d-8304-b0b8dd591037.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36619 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:76:f4:b5:39:a4:96:b3:a6:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e1d08430-639d-4d58-8cdf-f8365f09a005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:13:af:89:e4:ab:61:73:10:ca:d7:97:c0: 51:0d:cb:60:52:34:77:d0:8f:ce:e6:3a:82:1e:71: 5f:82:d5:14:4a:a7:c7:11:da:07:40:b6:52:ea:a6: f2:2e:76:17:a9:05:01:5e:85:03:71:b8:ea:28:19: 7d:64:53:80:f5:c4:c6:67:2b:6e:92:3f:f2:fb:ac: dd:52:01:39:c9:e4:7a:30:9f:63:7c:00:3b:97:93: 67:1f:c3:98:e5:01:1f:35:f0:e1:05:5b:87:32:f2: 37:f1:8b:4c:4b:d7:c9:c9:c9:01:cc:62:75:61:db: 5b:3c:23:be:f3:0f:38:e9:d8:b8:9e:6c:c1:41:ce: 12:8d:fa:b4:e4:1d:b9:c0:5f:c3:a8:94:8c:3e:df: 96:f4:af:ec:2a:36:37:13:a5:3b:19:38:44:a7:29: 5c:f2:93:e4:17:53:22:78:71:9c:0b:db:a9:83:3c: 68:ef:8c:d4:46:74:8d:bf:8a:20:42:71:98:f7:5b: f2:56:3a:6d:b7:57:f9:04:3e:92:5b:29:d8:18:9a: a2:fc:2e:b7:8c:df:f5:ce:0c:be:6d:b5:c3:05:34: 38:59:41:b9:51:b8:d9:84:08:3f:cc:f2:82:bb:d2: 6f:bc:16:35:4d:9b:4a:f8:b7:ca:41:ff:37:b1:15: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:1D:EF:5A:09:91:28:53:54:39:D4:89:96:A4:CF:91:A3:A6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/861b1f13-b1a3-396d-8304-b0b8dd591037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:90:54:4b:ef:e5:6f:d6:11:0b:b3:3f:32:0f:d4:ec:68:ef: b8:2a:e0:a5:41:19:19:66:93:19:ab:bc:20:03:74:9a:28:c7: 83:76:96:0a:63:cd:56:55:99:e1:e3:48:d1:bb:33:5a:64:50: 4d:55:d1:33:68:cd:1e:36:a8:c6:bf:ed:85:68:84:1d:7b:5a: da:37:79:01:e8:5a:2a:a4:c1:68:c0:7d:7d:da:d3:4b:ae:54: 9c:d2:2c:55:7d:47:bf:c0:f4:ff:dd:bc:34:8a:93:34:54:25: c1:4d:1b:8b:f5:d5:15:33:12:cc:c9:be:95:1f:8c:f3:c0:8b: ce:13:62:76:67:6f:72:04:ca:88:b6:1e:bf:72:b8:be:29:8b: 26:12:24:68:36:99:68:cc:ee:a2:67:47:8b:23:5c:04:52:cc: 63:19:0e:f2:91:17:0c:54:0d:6b:0c:77:4a:28:02:b6:11:e1: 60:72:49:96:23:a7:c7:4f:94:70:96:fb:c1:62:ac:b9:fc:03: 78:9a:9c:dc:cc:33:8f:1c:cb:d0:07:45:4a:f5:b6:5b:c8:dd: dd:32:3d:30:16:38:d6:0b:75:a3:f1:c9:a4:4b:2a:63:79:23: 9e:3e:e6:79:fc:47:8c:9a:3c:b3:28:18:a3:52:b0:64:8d:a1: a5:59:7b:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3b0tTmklrOm5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTFkMDg0MzAtNjM5ZC00ZDU4LThjZGYtZjgzNjVmMDlhMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ0Tr4nkq2FzEMrXl8BRDctgUjR30I/O5jqC HnFfgtUUSqfHEdoHQLZS6qbyLnYXqQUBXoUDcbjqKBl9ZFOA9cTGZytukj/y+6zd UgE5yeR6MJ9jfAA7l5NnH8OY5QEfNfDhBVuHMvI38YtMS9fJyckBzGJ1YdtbPCO+ 8w846di4nmzBQc4Sjfq05B25wF/DqJSMPt+W9K/sKjY3E6U7GThEpylc8pPkF1Mi eHGcC9upgzxo74zURnSNv4ogQnGY91vyVjptt1f5BD6SWynYGJqi/C63jN/1zgy+ bbXDBTQ4WUG5UbjZhAg/zPKCu9JvvBY1TZtK+LfKQf83sRW8swIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5vHe9aCZEoU1Q51ImWpM+Ro6ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYxYjFmMTMtYjFhMy0z OTZkLTgzMDQtYjBiOGRkNTkxMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPkFRL7+Vv1hELsz8yD9TsaO+4KuClQRkZZpMZq7wgA3SaKMeDdpYK Y81WVZnh40jRuzNaZFBNVdEzaM0eNqjGv+2FaIQde1raN3kB6FoqpMFowH192tNL rlSc0ixVfUe/wPT/3bw0ipM0VCXBTRuL9dUVMxLMyb6VH4zzwIvOE2J2Z29yBMqI th6/cri+KYsmEiRoNplozO6iZ0eLI1wEUsxjGQ7ykRcMVA1rDHdKKAK2EeFgckmW I6fHT5RwlvvBYqy5/AN4mpzczDOPHMvQB0VK9bZbyN3dMj0wFjjWC3Wj8cmkSypj eSOePuZ5/EeMmjyzKBijUrBkjaGlWXvn -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:14 2025 by rpki-client