$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa File: 9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa (raw, json) Hash identifier: VM4XfmR350dCrA86C99o8ygTSKynCEpmIDAgG0GRln0= Subject key identifier: AA:F8:68:E3:8E:D7:DC:50:71:EF:F8:AF:3C:A0:F9:51:39:CC:B6:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B7758DD32DC52679CE3340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 397203 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:75:8d:d3:2d:c5:26:79:ce:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=f78f0556-7620-4f01-a4a9-0a1c6cc44f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:09:37:db:0b:5d:ba:46:df:bf:a9:59:11: 60:9e:5e:d9:cf:90:85:18:a9:14:d4:84:a4:43:ac: 9d:75:51:ef:14:0c:2e:72:9e:89:f2:99:c9:2b:bd: 0f:32:92:aa:6a:d0:42:50:aa:4c:57:77:0d:b1:6e: 0f:a6:5d:a8:02:27:50:16:7e:82:b6:39:24:03:cf: 3c:63:de:d2:f2:07:03:aa:c9:e4:fe:3e:7f:96:a9: 2d:a3:ef:27:87:76:a1:7c:55:31:b4:81:19:6b:4f: 81:ac:c3:0f:29:4a:42:7b:12:f7:4d:e5:03:3e:9f: 8d:6b:47:44:15:d2:fa:e9:ad:72:71:27:9e:26:37: aa:4e:8d:06:3e:b4:95:58:6f:c1:7a:ad:7d:73:63: 15:7b:03:28:d6:df:e7:86:7d:42:1b:b3:2f:08:64: 2d:ee:bc:76:ff:82:64:04:54:a9:58:ca:5e:ac:1a: 6a:52:24:45:a7:ad:3e:e4:1d:b0:b5:3f:ee:6e:e5: c6:77:e1:58:49:46:96:f5:61:60:ce:5a:d4:83:a4: 10:6f:1e:44:37:f4:33:db:08:67:d4:d8:55:6d:e2: 55:66:c5:51:31:9c:74:93:9e:5a:58:d2:4a:42:2d: 86:56:75:8f:3f:e8:d7:41:73:85:64:0c:20:16:2f: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:68:E3:8E:D7:DC:50:71:EF:F8:AF:3C:A0:F9:51:39:CC:B6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c216660-e4b8-3e37-9f9a-2b99d91a9168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:40:0b:e2:ca:85:66:d6:15:ac:a3:58:ce:0d:e5:c5:e6:bf: c3:04:4c:a4:bd:5a:46:dd:7c:20:ff:73:ff:fc:97:af:58:23: 4e:b1:be:d9:10:ad:7c:0e:db:6d:31:11:88:bd:09:61:7b:d6: f1:3b:f5:5b:64:7f:f8:f9:a9:13:32:16:d0:8b:1f:90:09:d9: 2c:00:a5:02:1a:d2:59:9c:75:f7:8d:0c:15:79:b4:5f:53:73: 32:b9:c6:64:43:6d:4c:3c:d1:43:d2:7d:4d:a9:f6:3d:62:7c: 44:08:e1:1c:cd:ce:f9:10:4d:98:c1:67:cb:76:75:a6:54:2c: f2:1f:17:b3:12:0c:70:ff:12:9a:ee:b3:5f:9a:79:7e:2a:64: e1:5c:72:07:af:19:13:4c:99:41:78:3d:00:80:ee:b5:75:5c: 4e:aa:07:d7:9b:4e:06:c0:54:96:25:e0:45:62:05:71:92:22: 40:d5:e9:a7:bc:75:f4:91:06:c9:92:3e:a5:92:24:7b:ae:e1: 03:68:a5:89:bb:8e:e9:8b:b2:33:78:b1:3d:26:e2:29:6f:33: 46:33:d2:9f:6d:cc:60:0b:86:9a:5c:a2:23:5f:6a:1f:6e:a3: ed:61:b0:a5:b8:28:da:88:8d:3b:59:e0:fd:0d:d1:fa:13:52: 84:21:e3:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3WN0y3FJnnOM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Zjc4ZjA1NTYtNzYyMC00ZjAxLWE0YTktMGExYzZjYzQ0ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfAJN9sLXbpG37+pWRFgnl7Zz5CFGKkU1ISk Q6yddVHvFAwucp6J8pnJK70PMpKqatBCUKpMV3cNsW4Ppl2oAidQFn6CtjkkA888 Y97S8gcDqsnk/j5/lqkto+8nh3ahfFUxtIEZa0+BrMMPKUpCexL3TeUDPp+Na0dE FdL66a1ycSeeJjeqTo0GPrSVWG/Beq19c2MVewMo1t/nhn1CG7MvCGQt7rx2/4Jk BFSpWMperBpqUiRFp60+5B2wtT/ubuXGd+FYSUaW9WFgzlrUg6QQbx5EN/Qz2whn 1NhVbeJVZsVRMZx0k55aWNJKQi2GVnWPP+jXQXOFZAwgFi8utwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKr4aOOO19xQce/4rzyg+VE5zLZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWMyMTY2NjAtZTRiOC0z ZTM3LTlmOWEtMmI5OWQ5MWE5MTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4QAviyoVm1hWso1jODeXF5r/DBEykvVpG3Xwg/3P//JevWCNOsb7Z EK18DtttMRGIvQlhe9bxO/VbZH/4+akTMhbQix+QCdksAKUCGtJZnHX3jQwVebRf U3MyucZkQ21MPNFD0n1NqfY9YnxECOEczc75EE2YwWfLdnWmVCzyHxezEgxw/xKa 7rNfmnl+KmThXHIHrxkTTJlBeD0AgO61dVxOqgfXm04GwFSWJeBFYgVxkiJA1emn vHX0kQbJkj6lkiR7ruEDaKWJu47pi7IzeLE9JuIpbzNGM9KfbcxgC4aaXKIjX2of bqPtYbCluCjaiI07WeD9DdH6E1KEIeMd -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:38 2025 by rpki-client