$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa File: a159a91f-8956-3df2-8be2-9a8e8214d926.roa (raw, json) Hash identifier: fshHZnRlO0BtpVenyJTlCBvBQCSVE9Bqw4wNbM1fGDk= Subject key identifier: 01:61:01:80:C5:01:52:CE:CD:B1:AE:D0:A6:C4:06:32:5F:8C:6B:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77991AD90BFEBFF4D9700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 397193 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:79:91:ad:90:bf:eb:ff:4d:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=2b4207f0-7760-4a4e-926a-0393fa73e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:74:49:b9:a1:3d:4f:c8:27:e1:1e:96:4c: 6b:5f:bd:77:73:33:62:69:20:34:8b:10:fb:f0:87: e2:da:39:e2:65:8d:4e:ca:77:4a:fc:1d:99:6a:0c: c1:85:9a:b5:76:0e:b4:75:52:23:c7:28:bd:df:32: a0:a6:a8:16:01:de:56:8d:97:dd:01:90:a5:e6:4c: 37:c9:bb:99:30:1c:22:42:6d:e4:0c:ab:7b:3b:23: af:6e:0a:31:2e:8d:f2:b5:10:dc:25:c5:50:a2:f8: 95:ac:92:2f:a8:1c:f2:a6:bb:29:cf:fd:3f:0d:b5: 39:80:2f:1e:f3:19:bc:ca:c8:eb:2d:0f:7b:60:99: 19:c8:38:42:08:db:9d:1e:4b:01:64:2a:d0:d3:38: ec:e9:5d:46:aa:d8:f4:11:9a:61:3a:e0:46:37:f1: 7b:d3:b7:c7:98:60:ec:78:61:f2:ef:07:f7:f1:34: e4:ce:3a:c9:c4:8e:a5:c3:2f:f9:56:01:8f:46:27: cb:0e:84:d6:c4:12:d3:39:0b:71:3d:ee:dc:f3:21: de:08:aa:2b:f2:a4:d6:21:61:06:c6:0a:52:14:b5: bf:b5:18:9a:0d:e8:b1:7a:7a:73:2b:28:d3:c7:28: 6e:a0:4f:56:f9:b8:e6:4b:02:04:d0:99:5a:3e:d5: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:01:80:C5:01:52:CE:CD:B1:AE:D0:A6:C4:06:32:5F:8C:6B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:23:cf:e7:64:da:af:da:68:09:37:d9:63:e4:d1:84:e1:45: c3:86:c1:e7:42:5d:9e:3d:ff:6d:3b:e1:b4:cb:bd:17:e8:24: 07:50:62:55:8a:dc:9b:6d:5b:b1:10:5f:62:34:83:a6:7d:4b: 60:6f:c9:b5:a7:2e:f8:65:95:c4:32:d1:44:d9:e5:b1:bf:6e: b3:38:61:fe:c3:c0:9d:3c:44:7c:f7:ff:c4:ee:7a:5f:41:32: b5:cc:4d:75:84:68:9c:ac:7f:7c:38:f6:ac:96:2a:5e:c8:ff: 39:e4:c5:a0:e8:5e:30:99:24:f1:6e:71:0e:a6:38:fb:83:35: 19:31:e2:d6:ec:d4:b0:27:18:2b:d8:e8:98:11:99:75:01:95: 1e:70:08:ca:7c:02:ec:33:e9:47:5b:1d:44:fa:dc:8c:77:21: 1e:b0:c8:92:08:6c:71:58:f8:b8:07:ce:6f:4a:2d:61:12:f4: f6:a8:57:6b:77:0a:cb:59:b1:67:4f:99:7a:12:93:f3:32:a4: f0:13:de:49:b6:2c:77:87:8b:37:0b:4b:91:92:69:1a:06:ed: f7:3c:59:71:7a:91:45:5f:47:56:7c:06:22:e9:d8:5f:63:8e: 00:68:a1:74:b7:54:c3:73:df:94:09:9a:3f:1c:4f:75:a7:b0: 12:20:5d:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3mRrZC/6/9NlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MmI0MjA3ZjAtNzc2MC00YTRlLTkyNmEtMDM5M2ZhNzNlM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgp0SbmhPU/IJ+EelkxrX713czNiaSA0ixD7 8Ifi2jniZY1OyndK/B2ZagzBhZq1dg60dVIjxyi93zKgpqgWAd5WjZfdAZCl5kw3 ybuZMBwiQm3kDKt7OyOvbgoxLo3ytRDcJcVQoviVrJIvqBzyprspz/0/DbU5gC8e 8xm8ysjrLQ97YJkZyDhCCNudHksBZCrQ0zjs6V1Gqtj0EZphOuBGN/F707fHmGDs eGHy7wf38TTkzjrJxI6lwy/5VgGPRifLDoTWxBLTOQtxPe7c8yHeCKor8qTWIWEG xgpSFLW/tRiaDeixenpzKyjTxyhuoE9W+bjmSwIE0JlaPtVUnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAFhAYDFAVLOzbGu0KbEBjJfjGu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE1OWE5MWYtODk1Ni0z ZGYyLThiZTItOWE4ZTgyMTRkOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjI8/nZNqv2mgJN9lj5NGE4UXDhsHnQl2ePf9tO+G0y70X6CQHUGJV itybbVuxEF9iNIOmfUtgb8m1py74ZZXEMtFE2eWxv26zOGH+w8CdPER89//E7npf QTK1zE11hGicrH98OPaslipeyP855MWg6F4wmSTxbnEOpjj7gzUZMeLW7NSwJxgr 2OiYEZl1AZUecAjKfALsM+lHWx1E+tyMdyEesMiSCGxxWPi4B85vSi1hEvT2qFdr dwrLWbFnT5l6EpPzMqTwE95Jtix3h4s3C0uRkmkaBu33PFlxepFFX0dWfAYi6dhf Y44AaKF0t1TDc9+UCZo/HE91p7ASIF2I -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:05 2025 by rpki-client