$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa File: e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa (raw, json) Hash identifier: pha3afeTQxiMj8X07AwVBRAo3hKqyk71GT060zGgmGw= Subject key identifier: 40:5C:20:00:FE:10:27:37:FC:BD:BB:1E:D7:92:E8:80:71:FF:F7:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B778A291A99524272BA940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396541 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:78:a2:91:a9:95:24:27:2b:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=df2279f7-873f-4964-b413-c855e409f84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:f4:05:4a:9b:52:24:ae:91:49:16:9c:ee: 9c:4b:62:0f:51:4c:5f:d0:e4:7b:01:ab:d7:0d:f4: 10:ea:61:ca:e4:42:ce:ac:a6:57:ac:3e:55:5f:1f: ce:2e:af:0a:5a:70:ea:1b:1b:0b:78:41:aa:88:e6: 47:29:30:89:93:30:0e:0e:d0:89:e1:98:4d:00:0f: 09:8a:0c:dc:80:ad:1e:b5:5e:9d:94:98:76:00:0e: 6e:85:42:2d:9e:aa:b9:ed:3e:d1:87:eb:c4:07:ff: d5:22:3d:9c:1b:26:7a:98:3e:c1:1a:d6:3a:49:9f: 63:25:89:75:69:b9:41:f3:e4:72:99:aa:0d:74:12: b6:31:59:fe:bf:65:00:74:e0:d6:00:cf:81:de:64: fe:9e:8b:2b:7e:fa:69:7a:83:89:80:5f:a4:13:4c: 93:37:bf:2a:b9:ba:20:d0:66:22:7d:3a:b5:65:fb: 71:f0:df:8d:74:38:a1:9f:e5:92:cf:b5:03:4f:d3: b7:a9:ee:42:27:2b:b2:bf:22:29:56:18:da:9c:52: 71:05:c0:d5:e7:e3:22:db:f1:eb:fa:1d:0f:5e:85: 62:44:f7:26:0c:43:b6:3f:45:a4:64:55:bf:c4:64: 4e:1a:f6:57:b7:3a:d2:2a:35:ed:01:72:2b:ab:f3: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:20:00:FE:10:27:37:FC:BD:BB:1E:D7:92:E8:80:71:FF:F7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80a9e1d-e92b-3177-9538-d2fa40fa9f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:37:c1:5f:39:6d:d4:cd:ba:b8:79:7a:55:a7:16:82:7a:fa: 33:6e:9e:99:ed:17:ae:e9:1b:4c:df:fb:20:b5:1a:8c:1f:78: e9:af:2f:cc:63:98:15:80:16:07:02:5d:43:ba:c5:c1:39:70: 55:ad:e1:7e:84:7b:78:7c:14:e4:e3:7c:2b:f2:f3:c1:ed:17: fe:72:86:e8:34:42:5a:5d:4a:da:f5:81:65:d4:fb:ab:2f:73: 96:28:d7:79:8d:d6:39:fa:3e:02:4e:2e:1a:92:7d:62:50:7d: 3e:aa:ce:c3:d2:72:fa:fa:24:0e:fa:ac:fb:68:33:30:26:c5: 90:0f:cd:b5:37:da:d7:44:e6:4b:8e:f1:bc:1f:79:c9:f2:6d: 48:4f:0d:0c:10:eb:57:dc:e0:76:c5:33:b9:0f:e9:e0:ea:80: e8:72:ed:08:5c:76:5e:54:96:b3:67:66:45:28:97:ab:c3:72: bd:80:d4:5f:a5:29:12:73:e6:22:81:e7:59:30:0c:ac:2a:11: 6d:b3:d0:79:50:65:30:2a:7e:cc:c4:5d:23:cc:ce:3a:b4:8b: 66:88:6b:34:17:46:e9:0d:2c:02:6b:87:e3:06:5a:60:c5:75: c4:5e:ef:35:38:04:2e:0a:f2:ba:e0:ff:b1:71:d6:10:df:79: a7:02:38:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3iikamVJCcrqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZGYyMjc5ZjctODczZi00OTY0LWI0MTMtYzg1NWU0MDlmODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW70BUqbUiSukUkWnO6cS2IPUUxf0OR7AavX DfQQ6mHK5ELOrKZXrD5VXx/OLq8KWnDqGxsLeEGqiOZHKTCJkzAODtCJ4ZhNAA8J igzcgK0etV6dlJh2AA5uhUItnqq57T7Rh+vEB//VIj2cGyZ6mD7BGtY6SZ9jJYl1 ablB8+RymaoNdBK2MVn+v2UAdODWAM+B3mT+nosrfvppeoOJgF+kE0yTN78qubog 0GYifTq1Zftx8N+NdDihn+WSz7UDT9O3qe5CJyuyvyIpVhjanFJxBcDV5+Mi2/Hr +h0PXoViRPcmDEO2P0WkZFW/xGROGvZXtzrSKjXtAXIrq/NBrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBcIAD+ECc3/L27HteS6IBx//e0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTgwYTllMWQtZTkyYi0z MTc3LTk1MzgtZDJmYTQwZmE5ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0N8FfOW3Uzbq4eXpVpxaCevozbp6Z7Reu6RtM3/sgtRqMH3jpry/M Y5gVgBYHAl1DusXBOXBVreF+hHt4fBTk43wr8vPB7Rf+coboNEJaXUra9YFl1Pur L3OWKNd5jdY5+j4CTi4akn1iUH0+qs7D0nL6+iQO+qz7aDMwJsWQD821N9rXROZL jvG8H3nJ8m1ITw0MEOtX3OB2xTO5D+ng6oDocu0IXHZeVJazZ2ZFKJerw3K9gNRf pSkSc+YigedZMAysKhFts9B5UGUwKn7MxF0jzM46tItmiGs0F0bpDSwCa4fjBlpg xXXEXu81OAQuCvK64P+xcdYQ33mnAjiN -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:21 2025 by rpki-client