$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a744887d-d75f-3d15-8376-6eaabf1e3174.roa File: a744887d-d75f-3d15-8376-6eaabf1e3174.roa (raw, json) Hash identifier: WBU7YAYBLyQ13SuX+5rAdCCsOBJP3uoJnCSI5cEP34M= Subject key identifier: 26:9C:58:D2:18:B0:7E:DA:7A:27:0A:0D:3B:C4:E7:7C:97:CD:5D:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77D594B3CADF90F604180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a744887d-d75f-3d15-8376-6eaabf1e3174.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396826 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7d:59:4b:3c:ad:f9:0f:60:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=3f2ad6b7-d340-4380-93f7-83b7bdaca895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:54:7d:94:6a:c5:bd:3c:86:79:b0:84:d8: 0d:88:ce:ab:b4:0d:b6:7d:88:14:c5:a5:da:d7:f9: 2b:f1:94:92:91:d0:d9:93:7b:e3:93:59:9a:97:55: 3e:1a:03:af:90:38:7a:58:0a:92:ac:83:37:65:95: 41:84:d9:4a:6b:4f:f9:32:20:99:56:c7:13:61:8a: 80:6b:3a:cb:3b:31:60:3d:e7:94:2d:17:a5:56:e1: fb:d4:81:1a:37:4e:ee:57:42:f0:f7:bb:b1:d8:cb: 13:25:46:ee:69:39:d2:83:c6:d9:03:ff:70:37:8b: cf:8e:c0:87:d0:e1:bf:6e:8a:43:6e:06:55:06:91: 04:e3:af:99:45:bd:7f:61:d6:f3:98:15:4a:3f:44: 8c:7a:d8:12:36:a7:d6:c0:f4:30:db:b8:3b:ab:2d: 31:fb:04:e3:a8:ce:c7:66:c8:90:f3:8b:f9:08:2a: 3d:49:96:07:ff:3c:66:72:8d:2e:8a:47:eb:a5:ab: 28:0c:f1:62:d0:6e:22:6f:55:bb:0b:28:fc:5d:04: 42:aa:41:29:b9:7b:db:c9:f1:17:48:ae:5e:5a:2e: c7:9f:ae:21:9d:21:8f:07:4c:bc:b3:91:52:7b:da: ea:87:2c:c5:cc:4a:ea:cb:f2:a5:90:52:54:7e:b2: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:58:D2:18:B0:7E:DA:7A:27:0A:0D:3B:C4:E7:7C:97:CD:5D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a744887d-d75f-3d15-8376-6eaabf1e3174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8d:cb:84:6b:72:5d:42:b2:f2:4b:8f:84:a6:e2:40:14:09: 59:53:ed:b0:f9:c6:cf:1f:26:8d:8c:cb:a8:6b:6f:40:d3:b7: dc:bd:f3:48:67:06:f5:3b:a8:02:74:1f:17:39:4f:e6:21:c4: bb:35:5f:b1:17:d7:8a:24:7e:b5:97:2f:7d:52:a0:62:01:f8: 53:34:e4:b3:23:55:9e:d8:e6:bd:0f:9b:7a:5f:6f:cc:a4:4c: dc:27:ba:17:7a:88:f2:60:77:78:20:83:ec:fa:38:e7:01:99: ee:70:cc:04:0a:22:6e:01:b9:05:e8:25:f9:84:d1:9c:1b:13: d7:4a:ae:75:df:19:6a:b0:68:a2:18:db:8e:1b:3a:bc:fc:67: 4a:da:2b:de:a9:af:3b:f6:00:8c:c0:a5:d6:50:4f:b8:81:42: e7:82:1b:a8:e8:c5:89:99:18:cf:37:66:5e:f0:7a:f0:0d:af: 61:41:14:90:05:bd:64:df:d2:3e:8b:99:a7:65:4c:17:4c:3a: a7:c7:5c:0d:35:d1:ee:38:2a:e7:0c:50:4c:a7:72:a5:30:2d: 83:b2:d2:ae:0f:be:15:94:f6:56:cd:67:53:81:05:a3:1e:a2: 07:c5:92:d4:32:28:ae:80:65:fa:c3:88:74:fa:fd:54:ac:12: 6f:8d:69:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt31ZSzyt+Q9gQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk M2YyYWQ2YjctZDM0MC00MzgwLTkzZjctODNiN2JkYWNhODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/RUfZRqxb08hnmwhNgNiM6rtA22fYgUxaXa 1/kr8ZSSkdDZk3vjk1mal1U+GgOvkDh6WAqSrIM3ZZVBhNlKa0/5MiCZVscTYYqA azrLOzFgPeeULRelVuH71IEaN07uV0Lw97ux2MsTJUbuaTnSg8bZA/9wN4vPjsCH 0OG/bopDbgZVBpEE46+ZRb1/YdbzmBVKP0SMetgSNqfWwPQw27g7qy0x+wTjqM7H ZsiQ84v5CCo9SZYH/zxmco0uikfrpasoDPFi0G4ib1W7Cyj8XQRCqkEpuXvbyfEX SK5eWi7Hn64hnSGPB0y8s5FSe9rqhyzFzErqy/KlkFJUfrIQHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCacWNIYsH7aeicKDTvE53yXzV3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTc0NDg4N2QtZDc1Zi0z ZDE1LTgzNzYtNmVhYWJmMWUzMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpjcuEa3JdQrLyS4+EpuJAFAlZU+2w+cbPHyaNjMuoa29A07fcvfNI Zwb1O6gCdB8XOU/mIcS7NV+xF9eKJH61ly99UqBiAfhTNOSzI1We2Oa9D5t6X2/M pEzcJ7oXeojyYHd4IIPs+jjnAZnucMwECiJuAbkF6CX5hNGcGxPXSq513xlqsGii GNuOGzq8/GdK2iveqa879gCMwKXWUE+4gULnghuo6MWJmRjPN2Ze8HrwDa9hQRSQ Bb1k39I+i5mnZUwXTDqnx1wNNdHuOCrnDFBMp3KlMC2DstKuD74VlPZWzWdTgQWj HqIHxZLUMiiugGX6w4h0+v1UrBJvjWkA -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:57 2025 by rpki-client