$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: owSPfuz437EpOHtVWOUMgB72l5rEWKDYbe55v89ZhyY= Subject key identifier: 1C:6D:37:69:42:7E:E0:82:8F:AA:25:AF:F1:3F:30:6A:1A:8A:91:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77C3CB8385E605DAB5800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7c:3c:b8:38:5e:60:5d:ab:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=841f3a04-db26-4350-b7a4-fc11cfff391a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:e2:b6:fd:97:ce:02:e6:f4:08:dd:7b:b5: c4:64:16:1d:09:7f:fd:ac:1c:bc:60:17:d4:d6:ba: 4b:d6:5c:d1:08:90:d1:d8:ee:72:b3:4b:56:f1:ef: d4:7a:3d:7f:44:51:08:53:5d:80:d8:fe:c7:9d:79: 8b:53:16:f0:3d:8e:ee:ea:1a:80:07:4f:52:60:0f: d2:00:17:cb:fe:ce:08:59:f4:f9:65:f2:b4:0a:cd: 24:57:8c:ea:24:09:53:8f:3e:22:45:17:82:0e:9a: 14:ef:d4:26:f2:41:34:bc:f8:a6:00:8b:75:74:3f: 45:b8:a7:03:aa:90:e4:31:db:62:dd:34:ef:af:3e: 74:f7:0a:c1:c6:4a:d5:9b:46:ee:dd:11:f5:d3:71: fa:7e:d0:4e:71:db:46:fb:6d:0e:e2:b7:87:b7:64: a4:05:1d:59:06:61:4d:48:d6:de:2e:19:e7:e7:d1: 64:c2:cf:b4:f5:52:dd:ef:32:75:94:ab:2c:f4:99: 54:70:37:78:25:d5:c9:17:f9:ac:b3:a8:44:b2:30: 05:c3:d8:1f:11:ea:87:2f:c0:a8:6d:fa:34:6e:33: a5:f4:27:ec:f6:53:e8:0c:e3:d1:56:b4:a0:a8:9a: c2:1a:06:d9:4a:50:46:99:af:e8:01:42:87:f2:22: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:37:69:42:7E:E0:82:8F:AA:25:AF:F1:3F:30:6A:1A:8A:91:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:0f:3a:e4:f2:87:93:95:7a:44:03:87:f3:f6:98:21:c0: 16:97:c4:4d:3d:b0:60:23:55:40:b2:d5:b1:9b:24:b7:e4:2e: 09:a2:4c:b6:0a:fb:19:6f:ff:58:14:10:ac:d8:fa:8d:60:cd: 80:41:28:e1:1e:75:67:51:bf:0f:54:4a:41:15:eb:35:5b:f8: 6a:4d:32:5a:3b:52:63:4a:c2:1e:57:a2:31:72:bc:1e:ae:19: c5:b5:47:84:be:02:ce:0f:01:73:e3:d1:f1:4e:aa:e7:d3:2f: 3a:22:18:bc:a0:8e:46:6a:f6:1a:0a:62:63:e7:31:7f:20:b5: 47:62:a1:28:dd:77:cc:18:f3:e5:6e:42:9b:4f:4f:67:5f:07: 11:1d:20:7d:92:9c:68:21:90:55:00:29:50:9b:05:05:1a:76: 9e:4b:09:55:ed:4f:83:f8:70:ad:7f:ee:5c:3a:7d:80:18:26: 7b:96:06:5e:5f:35:f6:47:29:b3:60:8a:cf:1b:b2:27:79:95: b5:68:0c:39:58:5e:65:6e:28:c2:38:ac:93:ad:ea:79:ef:4c: 24:2e:2a:33:b6:2e:d7:dc:9d:3e:b8:8e:ee:7f:a9:a5:7f:1f: 80:65:46:3c:ee:03:13:d0:67:bf:1a:a4:89:10:fc:28:46:a3: 6b:6f:d7:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3w8uDheYF2rWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ODQxZjNhMDQtZGIyNi00MzUwLWI3YTQtZmMxMWNmZmYzOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Litv2XzgLm9Ajde7XEZBYdCX/9rBy8YBfU 1rpL1lzRCJDR2O5ys0tW8e/Uej1/RFEIU12A2P7HnXmLUxbwPY7u6hqAB09SYA/S ABfL/s4IWfT5ZfK0Cs0kV4zqJAlTjz4iRReCDpoU79Qm8kE0vPimAIt1dD9FuKcD qpDkMdti3TTvrz509wrBxkrVm0bu3RH103H6ftBOcdtG+20O4reHt2SkBR1ZBmFN SNbeLhnn59Fkws+09VLd7zJ1lKss9JlUcDd4JdXJF/mss6hEsjAFw9gfEeqHL8Co bfo0bjOl9Cfs9lPoDOPRVrSgqJrCGgbZSlBGma/oAUKH8iKqmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBxtN2lCfuCCj6olr/E/MGoaipFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUYg865PKHk5V6RAOH8/aYIcAWl8RNPbBgI1VAstWxmyS35C4Joky2 CvsZb/9YFBCs2PqNYM2AQSjhHnVnUb8PVEpBFes1W/hqTTJaO1JjSsIeV6Ixcrwe rhnFtUeEvgLODwFz49HxTqrn0y86Ihi8oI5GavYaCmJj5zF/ILVHYqEo3XfMGPPl bkKbT09nXwcRHSB9kpxoIZBVAClQmwUFGnaeSwlV7U+D+HCtf+5cOn2AGCZ7lgZe XzX2RymzYIrPG7IneZW1aAw5WF5lbijCOKyTrep570wkLiozti7X3J0+uI7uf6ml fx+AZUY87gMT0Ge/GqSJEPwoRqNrb9ei -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:24 2025 by rpki-client