$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa File: 8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa (raw, json) Hash identifier: xBHAnR6fCEsmRZE8QYWz5pkPlRGR9+HgfEk6xMD2+qc= Subject key identifier: 91:46:A2:33:AE:05:E7:CA:51:02:D7:43:4B:8D:6E:C8:2D:FC:5D:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B777E5E99C1170B5225C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396583 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:77:e5:e9:9c:11:70:b5:22:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=221bc7e2-ed4e-445a-9614-ec6301d1ce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:97:44:51:fd:3b:ce:ae:bc:e0:f1:da:63: 2c:87:5d:ac:74:e9:fd:c7:f8:34:1f:e2:f9:a3:1a: 6d:b0:18:f4:94:b7:40:8b:a2:6d:c1:16:44:f5:30: c9:ce:2e:ab:2e:6b:67:97:77:67:c8:68:2b:a2:44: fd:72:56:c0:82:d3:30:b5:64:f0:a1:56:72:b8:53: ec:19:a8:6a:30:8d:55:33:33:ab:fe:cd:a8:d3:a7: c8:e7:6f:df:2c:9a:ab:dd:fe:d7:2d:59:3b:c5:14: 6a:02:d7:14:18:ce:93:80:33:b0:af:95:9d:a5:91: 0f:d1:5e:c0:59:2a:c4:12:48:a1:90:57:6b:d0:7b: 8e:47:f1:a8:8e:80:29:81:64:19:1a:57:67:53:92: bf:91:0e:52:73:d5:f2:1f:74:94:ed:ac:99:83:35: 1a:90:b7:c5:73:30:62:1a:28:a5:ca:77:29:76:5d: 70:f1:da:b3:e1:00:79:d9:f1:e4:27:85:9d:5e:13: 50:97:5d:31:51:01:f2:82:e2:a2:81:b5:75:2b:ee: c0:64:0b:1e:4f:fe:d0:1d:68:4b:cd:cf:90:31:d8: 02:01:c8:cb:ea:e5:c7:f4:aa:7a:ed:cd:44:5f:af: e9:1f:a8:f3:cc:cf:a2:4b:e3:bc:9d:66:ef:71:49: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:A2:33:AE:05:E7:CA:51:02:D7:43:4B:8D:6E:C8:2D:FC:5D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a2:3d:6c:96:b2:f2:97:20:22:ca:07:2c:0f:d1:62:e8:1b: db:49:cd:db:18:0a:86:33:45:e7:0d:da:a7:9b:6e:be:a2:9f: a0:54:f8:37:52:f4:9d:4b:7c:5d:1e:2b:b0:b9:67:65:5d:62: 4f:45:cb:cc:d1:75:eb:60:f2:29:15:2f:9c:74:93:23:ff:e5: 7b:81:fe:66:ec:db:1e:60:65:32:08:fe:64:79:d7:13:9b:2a: b8:9e:f7:e2:43:66:b5:cf:4a:14:96:1d:7c:ea:a6:65:49:1e: fd:26:18:14:a6:83:80:74:ac:aa:f6:33:41:ef:8e:35:5e:67: ec:21:58:c4:ca:4f:61:c8:34:5f:c6:2a:29:64:f3:5f:9f:97: 37:69:28:30:8d:ee:8a:6c:04:66:0b:c3:cf:dd:10:5f:30:0d: 2d:8e:82:4d:f8:7e:af:af:23:af:52:df:d0:44:f6:1d:e8:58: 5f:93:7a:48:18:ba:1b:96:4e:a1:be:3b:56:be:4e:b8:be:86: b3:2c:18:81:e9:68:9a:9c:e2:73:91:aa:20:ba:13:f9:86:0e: aa:79:73:dc:42:8e:cb:8c:ed:02:4c:a1:b4:ad:55:c1:53:8e: b7:06:97:e6:a7:cd:4e:cd:95:9b:6d:c8:ad:0d:6d:99:b1:1a: e7:4f:2d:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3fl6ZwRcLUiXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MjIxYmM3ZTItZWQ0ZS00NDVhLTk2MTQtZWM2MzAxZDFjZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbGXRFH9O86uvODx2mMsh12sdOn9x/g0H+L5 oxptsBj0lLdAi6JtwRZE9TDJzi6rLmtnl3dnyGgrokT9clbAgtMwtWTwoVZyuFPs GahqMI1VMzOr/s2o06fI52/fLJqr3f7XLVk7xRRqAtcUGM6TgDOwr5WdpZEP0V7A WSrEEkihkFdr0HuOR/GojoApgWQZGldnU5K/kQ5Sc9XyH3SU7ayZgzUakLfFczBi Giilyncpdl1w8dqz4QB52fHkJ4WdXhNQl10xUQHyguKigbV1K+7AZAseT/7QHWhL zc+QMdgCAcjL6uXH9Kp67c1EX6/pH6jzzM+iS+O8nWbvcUlKkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJFGojOuBefKUQLXQ0uNbsgt/F2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIwOTYwNDctZTk5NC0z ZWMzLTlmOGMtZmZhZTZkZmY5OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBoj1slrLylyAiygcsD9Fi6BvbSc3bGAqGM0XnDdqnm26+op+gVPg3 UvSdS3xdHiuwuWdlXWJPRcvM0XXrYPIpFS+cdJMj/+V7gf5m7NseYGUyCP5kedcT myq4nvfiQ2a1z0oUlh186qZlSR79JhgUpoOAdKyq9jNB7441XmfsIVjEyk9hyDRf xiopZPNfn5c3aSgwje6KbARmC8PP3RBfMA0tjoJN+H6vryOvUt/QRPYd6Fhfk3pI GLoblk6hvjtWvk64voazLBiB6WianOJzkaoguhP5hg6qeXPcQo7LjO0CTKG0rVXB U463Bpfmp81OzZWbbcitDW2ZsRrnTy2a -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:01 2025 by rpki-client