$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa File: ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa (raw, json) Hash identifier: +vwtdiX+m+xJoVbxwUBi+/jHPYI3UllvhE7DzgMYN+Q= Subject key identifier: 65:CB:96:DE:A1:8B:31:CD:40:D3:3A:FB:AD:6A:80:CF:2C:DD:57:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77937A3330D4FEB2FF52E Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396617 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:79:37:a3:33:0d:4f:eb:2f:f5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=8b4ea1f6-79a3-4dce-a4a6-f4236c264259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:ec:56:6a:fb:38:1e:67:38:64:0b:c6:e3: 27:38:0b:88:d6:ab:6e:85:33:7f:4f:9a:ba:25:18: f7:3c:47:fd:e9:bb:90:e2:79:ce:c5:3a:4d:c6:7a: 95:65:b1:54:6a:ff:dc:64:96:6d:02:30:49:60:31: b0:88:e8:5a:7b:66:b0:23:1f:74:3b:b2:01:82:ba: 6c:ec:9f:dd:d9:c3:3b:cd:fa:4d:a1:9e:fd:a3:e6: fb:2c:72:37:6d:9b:a9:1c:99:df:e3:37:f8:10:80: 19:5e:f1:3c:0e:ea:8c:63:41:bc:c5:45:a0:f2:5d: 84:dd:e9:92:d0:95:0a:cd:11:41:a0:d1:51:86:d5: ca:89:c2:5c:3e:0b:b5:86:29:6c:84:d9:c2:b2:29: b2:13:c1:b0:dc:79:c4:c7:89:a4:88:ea:ab:41:12: bf:39:c2:8e:9d:f8:7d:c5:d4:5e:ca:7c:12:c1:df: 51:a7:17:80:d7:6f:a1:26:6f:76:4e:c2:97:7b:ad: 04:9d:42:ef:68:26:48:c7:99:17:d3:96:8a:00:bb: e3:24:ff:24:09:ce:c1:5a:4f:94:0a:7f:c6:58:36: e3:18:74:25:2b:78:ce:3a:d5:3a:36:22:40:c9:26: 67:78:24:9b:d4:fa:21:5d:74:3c:52:65:69:f2:9a: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:96:DE:A1:8B:31:CD:40:D3:3A:FB:AD:6A:80:CF:2C:DD:57:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9d040c-a663-3f6e-b71d-b58d1c81a3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:26:e8:d8:7b:03:1c:08:a8:a2:ab:22:0e:7c:da:45:98:f6: 8f:3d:b7:a2:3f:b6:55:78:9d:4a:90:5d:d1:ca:a2:7b:d2:38: 8d:6f:db:ad:d0:e2:07:4c:23:6f:7d:25:d2:4c:fb:6b:19:f0: 01:88:4c:5c:6b:7e:48:3d:df:44:65:2f:a0:5b:c3:89:83:79: 2e:86:2e:88:1c:e4:4c:dc:fd:56:e9:d2:97:e1:77:be:93:c9: 05:b5:27:53:57:61:48:b8:f1:e8:8b:3c:4e:e7:ef:1f:dc:c6: b3:4c:5a:e1:04:b5:44:2c:95:1b:66:fb:6a:43:17:2f:4c:29: 95:ad:29:4d:ab:80:68:c3:17:0f:17:c6:30:bf:ad:30:29:91: 3a:dc:a0:0c:77:45:e5:ad:18:27:cb:fb:04:0e:0b:7f:36:12: e0:13:e7:a3:03:be:66:d5:dd:9a:2d:74:eb:0d:2f:5f:85:d3: fb:12:9a:9b:61:b7:02:c3:e2:9b:84:d2:e5:9a:9c:3b:82:53: ff:5d:b0:22:2b:20:f2:91:8a:53:ce:e5:f2:58:b4:63:a0:6a: 45:50:ba:56:fa:11:c6:c8:f1:ba:a5:d6:4d:00:95:25:b8:ba: 9f:07:cc:9f:84:13:64:7b:d8:fd:ff:df:92:56:9c:97:14:30: d2:e3:14:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3k3ozMNT+sv9S4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OGI0ZWExZjYtNzlhMy00ZGNlLWE0YTYtZjQyMzZjMjY0MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/nsVmr7OB5nOGQLxuMnOAuI1qtuhTN/T5q6 JRj3PEf96buQ4nnOxTpNxnqVZbFUav/cZJZtAjBJYDGwiOhae2awIx90O7IBgrps 7J/d2cM7zfpNoZ79o+b7LHI3bZupHJnf4zf4EIAZXvE8DuqMY0G8xUWg8l2E3emS 0JUKzRFBoNFRhtXKicJcPgu1hilshNnCsimyE8Gw3HnEx4mkiOqrQRK/OcKOnfh9 xdReynwSwd9RpxeA12+hJm92TsKXe60EnULvaCZIx5kX05aKALvjJP8kCc7BWk+U Cn/GWDbjGHQlK3jOOtU6NiJAySZneCSb1PohXXQ8UmVp8ppn3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXLlt6hizHNQNM6+61qgM8s3VcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI5ZDA0MGMtYTY2My0z ZjZlLWI3MWQtYjU4ZDFjODFhM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFJujYewMcCKiiqyIOfNpFmPaPPbeiP7ZVeJ1KkF3RyqJ70jiNb9ut 0OIHTCNvfSXSTPtrGfABiExca35IPd9EZS+gW8OJg3kuhi6IHORM3P1W6dKX4Xe+ k8kFtSdTV2FIuPHoizxO5+8f3MazTFrhBLVELJUbZvtqQxcvTCmVrSlNq4BowxcP F8Ywv60wKZE63KAMd0XlrRgny/sEDgt/NhLgE+ejA75m1d2aLXTrDS9fhdP7Epqb YbcCw+KbhNLlmpw7glP/XbAiKyDykYpTzuXyWLRjoGpFULpW+hHGyPG6pdZNAJUl uLqfB8yfhBNke9j9/9+SVpyXFDDS4xQg -----END CERTIFICATE-----Generated at Mon Oct 20 08:07:07 2025 by rpki-client