$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa File: bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa (raw, json) Hash identifier: D099P9PDPtGZWdkA5J2kXhekpAjP2WRvE6tVaAhziY8= Subject key identifier: 81:61:3C:53:DC:23:3E:11:0E:47:47:11:0D:AE:45:60:25:D0:00:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77AE1C0BB553B6A3C8B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396608 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7a:e1:c0:bb:55:3b:6a:3c:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=ec772d00-3705-4aa0-91f8-a4925e649a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e6:8f:69:c1:28:27:16:a8:d9:11:9b:dd:27: 82:82:40:d2:70:09:7c:93:22:47:1c:f4:a1:cb:04: 7b:6b:3e:77:65:d0:d1:09:b1:21:11:24:09:fd:33: 9e:58:47:3a:16:e8:05:33:20:d4:26:45:c9:b2:3f: 44:40:66:92:2a:f0:35:fc:94:47:01:de:be:60:d1: 59:d5:6e:ae:f7:bd:8a:f4:48:ad:59:ea:47:2d:a5: 5b:e5:39:ee:b7:ca:b5:b7:27:b8:39:52:8e:35:f7: ff:43:b6:b9:fb:31:49:87:02:7d:77:9f:99:a8:dd: dd:1e:24:da:06:77:ad:81:90:2d:b7:98:7c:c7:2f: 7e:83:21:c9:3b:3c:c7:95:50:26:1d:97:63:96:87: 41:dd:6b:29:31:3f:49:19:e1:14:ea:35:a4:a2:f0: 80:af:13:8d:6e:94:2b:8b:2d:32:39:33:d2:7a:e9: 55:08:d3:87:0c:f3:97:56:bf:b9:7d:ec:29:8d:f1: 59:5e:51:ea:0c:dc:6d:cd:bf:9d:e1:ee:72:9c:7e: 5d:23:45:26:75:1c:76:74:72:5b:29:7f:ea:f8:82: e4:a4:60:74:b3:9b:83:bf:98:4e:ec:bb:b5:44:57: b9:5a:11:9a:4b:04:ab:d1:ea:59:6c:5a:03:38:47: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:61:3C:53:DC:23:3E:11:0E:47:47:11:0D:AE:45:60:25:D0:00:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:52:07:e2:62:75:5e:8a:1c:82:cf:7e:55:96:36:66:86:ca: e6:b7:bb:25:e1:c6:56:cb:8e:67:09:42:aa:f2:22:5c:9e:6a: 0b:ca:4d:33:9b:95:1e:17:ff:28:9c:8d:65:3a:e9:34:eb:2f: 3a:8d:f4:a7:00:fe:46:cf:b9:27:00:c2:6f:d5:21:e1:2e:03: f5:e2:b5:85:6b:af:68:01:a3:f7:5b:72:c8:3d:5f:99:50:0b: 92:a0:4d:07:d2:9e:ba:11:61:a3:4c:db:f9:9a:65:70:e8:4b: c0:9e:1c:0e:4f:4a:68:9d:f4:93:2a:a7:59:25:f7:c1:96:ec: 54:bb:9c:e4:03:0f:ba:b7:48:ed:5c:54:b4:72:a1:2a:1e:eb: e4:26:07:9a:87:89:c5:b2:fc:0f:9e:69:91:f8:8b:c6:60:6d: fc:e3:cf:f9:58:29:26:d0:6c:f1:bd:7a:c4:19:d7:5a:e9:84: 1d:91:32:fa:d5:61:9c:1d:a6:6e:ce:65:ca:78:6b:46:99:c4: 5d:9d:70:85:b4:14:74:48:73:28:4c:63:12:b9:87:52:73:74: 8d:65:df:2f:e8:00:c0:6d:ea:ea:f0:77:59:65:61:d2:d5:52: cb:2b:55:cd:f2:01:7c:e2:87:fd:96:35:6b:d1:33:3d:8b:f4: 11:5b:29:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3rhwLtVO2o8i0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZWM3NzJkMDAtMzcwNS00YWEwLTkxZjgtYTQ5MjVlNjQ5YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+aPacEoJxao2RGb3SeCgkDScAl8kyJHHPSh ywR7az53ZdDRCbEhESQJ/TOeWEc6FugFMyDUJkXJsj9EQGaSKvA1/JRHAd6+YNFZ 1W6u972K9EitWepHLaVb5Tnut8q1tye4OVKONff/Q7a5+zFJhwJ9d5+ZqN3dHiTa BnetgZAtt5h8xy9+gyHJOzzHlVAmHZdjlodB3WspMT9JGeEU6jWkovCArxONbpQr iy0yOTPSeulVCNOHDPOXVr+5fewpjfFZXlHqDNxtzb+d4e5ynH5dI0UmdRx2dHJb KX/q+ILkpGB0s5uDv5hO7Lu1RFe5WhGaSwSr0epZbFoDOEdudQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIFhPFPcIz4RDkdHEQ2uRWAl0ACeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0MzM5YzItYWI1ZC0z YWQ5LTk4MDQtODdhMTQ4ZGZiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6UgfiYnVeihyCz35VljZmhsrmt7sl4cZWy45nCUKq8iJcnmoLyk0z m5UeF/8onI1lOuk06y86jfSnAP5Gz7knAMJv1SHhLgP14rWFa69oAaP3W3LIPV+Z UAuSoE0H0p66EWGjTNv5mmVw6EvAnhwOT0ponfSTKqdZJffBluxUu5zkAw+6t0jt XFS0cqEqHuvkJgeah4nFsvwPnmmR+IvGYG3848/5WCkm0GzxvXrEGdda6YQdkTL6 1WGcHaZuzmXKeGtGmcRdnXCFtBR0SHMoTGMSuYdSc3SNZd8v6ADAberq8HdZZWHS 1VLLK1XN8gF84of9ljVr0TM9i/QRWymJ -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:08 2025 by rpki-client