$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa File: a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa (raw, json) Hash identifier: /g3qc26rEO6LdIAwngajvy2Pt3aRj0iY0sY0i4W0w7M= Subject key identifier: 1F:B3:7D:8E:64:56:27:18:11:1D:9D:0A:B6:15:D7:96:FE:8E:37:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B775E37AC3770C0290A5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396578 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:75:e3:7a:c3:77:0c:02:90:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e4d2b540-38e0-4aef-8934-44f5f6c59942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:d2:1a:a9:1f:fc:da:81:b5:df:ec:65:3b: 5e:40:9f:95:b0:f6:2e:0c:7e:17:80:b3:d4:6b:7f: 2b:bf:ee:de:7c:27:0c:b3:9b:a6:95:ca:0e:25:16: d5:a3:ec:c2:b8:cd:75:84:79:d9:12:db:aa:24:08: 23:74:35:ad:fd:14:eb:75:1c:13:db:9f:6f:d2:fe: de:03:b6:8b:87:db:46:c7:ce:b7:6c:70:7d:59:0a: de:d7:97:4c:ff:77:1b:00:b2:48:ba:54:0c:16:c3: 20:4b:6f:d6:b4:d7:d2:d3:1f:cc:a0:f9:4c:28:56: e1:e4:3e:84:5c:d2:e8:a7:69:20:b8:2f:f8:67:96: 10:63:c2:04:8a:9e:d1:dc:bf:70:fb:b2:b5:7a:eb: 03:35:8f:a9:90:ab:cb:6f:28:8b:7c:31:bb:fb:69: f6:ba:16:92:6d:31:ba:6c:ef:66:73:a4:fa:6e:04: 3c:12:77:85:f2:1d:d6:0e:1c:1c:32:e4:8c:ff:07: 19:ec:4f:24:2e:52:ec:91:6a:3c:d0:9e:c1:7a:1d: 79:34:79:e7:48:1f:fd:e3:83:e0:cf:b4:4d:47:e7: 7b:58:7e:88:6a:05:92:62:87:c7:7b:7b:df:c5:33: 72:8b:c8:3b:6d:b2:74:3a:b0:1c:86:98:2c:6d:fb: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B3:7D:8E:64:56:27:18:11:1D:9D:0A:B6:15:D7:96:FE:8E:37:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:95:6a:f0:2d:39:4e:dc:7a:36:c8:13:9a:d0:e6:6a:75:22: e0:3e:32:35:97:d0:c4:3f:38:c2:c3:c9:3d:dd:f1:35:41:f7: 3a:da:dc:a7:34:77:a0:32:f4:31:3b:82:55:34:35:4c:78:d1: e6:5b:46:25:73:bf:4d:e1:75:c9:1b:a0:eb:b1:d4:3a:61:e5: fd:7d:f9:08:67:aa:18:49:a9:d8:ce:20:7b:31:aa:29:9f:3a: ae:9f:5e:22:6f:5e:66:73:cc:6b:69:7c:03:1b:6d:95:ff:b9: ef:f8:56:e0:1a:c7:ff:3b:1c:c5:fb:2e:d2:ef:6f:21:a9:3a: 56:83:6e:be:ec:70:a6:d7:ba:dd:eb:70:e7:69:c3:e2:70:4a: 40:0f:ba:61:15:76:a5:38:7c:26:10:48:fa:9f:9a:7e:32:13: fe:b6:88:52:52:eb:72:a0:40:c1:34:b5:54:a2:f4:f1:5e:8c: 7a:d4:cc:94:2b:f2:5c:dc:54:3d:15:93:50:c7:33:e1:5c:7b: 30:e8:8b:d0:55:56:ac:96:fb:a2:9d:f2:f2:a6:fc:f5:43:e2: 07:ed:e5:7c:b2:05:b0:a1:2b:a5:18:fe:a1:27:48:2c:b6:9a: b8:de:cc:c4:b3:c9:6c:f1:4c:d0:d3:a5:46:a4:6c:0f:59:53: fc:31:3a:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3XjesN3DAKQpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTRkMmI1NDAtMzhlMC00YWVmLTg5MzQtNDRmNWY2YzU5OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPrSGqkf/NqBtd/sZTteQJ+VsPYuDH4XgLPU a38rv+7efCcMs5umlcoOJRbVo+zCuM11hHnZEtuqJAgjdDWt/RTrdRwT259v0v7e A7aLh9tGx863bHB9WQre15dM/3cbALJIulQMFsMgS2/WtNfS0x/MoPlMKFbh5D6E XNLop2kguC/4Z5YQY8IEip7R3L9w+7K1eusDNY+pkKvLbyiLfDG7+2n2uhaSbTG6 bO9mc6T6bgQ8EneF8h3WDhwcMuSM/wcZ7E8kLlLskWo80J7Beh15NHnnSB/944Pg z7RNR+d7WH6IagWSYofHe3vfxTNyi8g7bbJ0OrAchpgsbft8aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB+zfY5kVicYER2dCrYV15b+jjc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU5NzJmNWUtYjMzZi0z M2E1LWEwMDYtMGZiNjE2YTFjMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwlWrwLTlO3Ho2yBOa0OZqdSLgPjI1l9DEPzjCw8k93fE1Qfc62tyn NHegMvQxO4JVNDVMeNHmW0Ylc79N4XXJG6DrsdQ6YeX9ffkIZ6oYSanYziB7Maop nzqun14ib15mc8xraXwDG22V/7nv+FbgGsf/OxzF+y7S728hqTpWg26+7HCm17rd 63DnacPicEpAD7phFXalOHwmEEj6n5p+MhP+tohSUutyoEDBNLVUovTxXox61MyU K/Jc3FQ9FZNQxzPhXHsw6IvQVVaslvuinfLypvz1Q+IH7eV8sgWwoSulGP6hJ0gs tpq43szEs8ls8UzQ06VGpGwPWVP8MToN -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:03 2025 by rpki-client