$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa File: f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json) Hash identifier: sNm6G2Zc4Ag6vU5KhP66VnTUMYQqUtERC1ej9GaITuk= Subject key identifier: 22:6D:43:FA:56:98:F3:98:D9:D3:A3:FB:52:C8:41:8A:B6:DE:D4:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77BF7D9FB76ADD8F39B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396610 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7b:f7:d9:fb:76:ad:d8:f3:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=cac68ea7-82b3-414c-babf-2279f4b44ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:db:1d:66:ad:40:a5:b7:e1:ac:5c:e3:ba: 13:9f:43:c1:d0:f7:a1:be:da:d1:1b:67:08:a7:a2: c5:db:7b:aa:d1:a2:c8:48:f5:2d:8f:59:b3:d7:19: 84:f2:6f:31:5e:b6:d3:78:de:b8:dc:bd:0a:6f:8a: b1:13:05:80:bf:ed:7c:60:4c:c5:41:f3:7e:eb:66: a0:5f:4d:60:79:bf:ca:43:84:4a:c1:3e:d1:ae:39: 70:2f:96:a0:ed:28:5d:67:e2:11:66:76:57:87:25: ce:84:84:38:22:64:c3:03:cc:59:0e:a9:c1:22:49: f6:c3:5b:ee:5d:6a:16:e2:e6:49:65:01:bb:2f:8d: 66:a8:5a:21:ff:79:07:38:4d:d8:1b:0e:29:89:3f: 08:b0:d7:75:b5:fe:e7:09:ac:d2:10:24:a0:27:15: ff:09:58:e8:a0:3a:7b:9a:62:5a:d8:33:46:b6:4d: 04:e0:9f:89:f5:90:25:96:f9:66:ef:e7:67:da:ff: 63:29:bd:ac:35:8e:18:4b:93:e9:30:8a:75:39:c9: 70:31:8f:7b:f1:0e:d4:8b:9f:48:07:ec:f0:5a:f8: 49:d0:81:dc:e0:25:93:85:97:63:96:8b:28:db:70: bb:7d:ae:38:6b:05:b3:a2:8b:85:32:30:29:d0:e4: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6D:43:FA:56:98:F3:98:D9:D3:A3:FB:52:C8:41:8A:B6:DE:D4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:31:ee:3b:4e:94:4c:35:90:9e:30:d8:39:ae:3b:9b:8b:35: 22:02:55:a6:3c:52:ef:25:ba:fa:15:d0:1c:9d:be:6d:2b:6f: c5:9f:56:80:03:c6:b0:be:15:d5:c6:a7:a8:3f:db:b3:77:ef: 20:80:ff:cf:49:9d:42:e9:5a:15:20:5f:87:38:c8:2f:f9:ba: 33:6b:a6:23:13:ef:27:8a:f3:ca:8d:04:2c:5d:4e:2a:ee:4d: 37:2d:31:76:9a:20:80:16:2c:7d:d5:3b:f0:f7:66:7c:58:15: e2:76:ca:b4:16:7b:e2:9d:9a:39:ef:77:0d:54:71:59:5e:97: 95:3a:74:92:03:5a:7f:34:87:9b:b3:f2:e6:43:dc:65:ec:31: 8b:15:37:a1:93:62:62:54:c8:1d:ee:3f:42:7c:5f:10:51:1f: b8:ee:31:46:17:75:d9:9e:b7:18:f8:dd:47:14:9e:3f:58:ed: 08:9a:84:d7:40:4a:8d:aa:7e:9f:b9:aa:9f:a4:47:ba:85:44: 52:ac:4c:68:40:1a:10:de:63:ed:7b:5b:dc:9c:b4:9b:1a:af: ce:6d:eb:52:cc:03:1f:48:43:6d:eb:c4:65:b7:29:dc:1b:2b: bd:1c:ef:b5:2e:42:12:34:7a:7f:59:3a:ea:d4:a5:24:ff:ed: 6e:2b:b3:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3v32ft2rdjzmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Y2FjNjhlYTctODJiMy00MTRjLWJhYmYtMjI3OWY0YjQ0ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCfbHWatQKW34axc47oTn0PB0PehvtrRG2cI p6LF23uq0aLISPUtj1mz1xmE8m8xXrbTeN643L0Kb4qxEwWAv+18YEzFQfN+62ag X01geb/KQ4RKwT7RrjlwL5ag7ShdZ+IRZnZXhyXOhIQ4ImTDA8xZDqnBIkn2w1vu XWoW4uZJZQG7L41mqFoh/3kHOE3YGw4piT8IsNd1tf7nCazSECSgJxX/CVjooDp7 mmJa2DNGtk0E4J+J9ZAllvlm7+dn2v9jKb2sNY4YS5PpMIp1OclwMY978Q7Ui59I B+zwWvhJ0IHc4CWThZdjloso23C7fa44awWzoouFMjAp0ORRiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJtQ/pWmPOY2dOj+1LIQYq23tSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE2NmQzM2UtMGJlOC0z ODdkLThhOTAtZWM5YTVkMjRhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJMe47TpRMNZCeMNg5rjubizUiAlWmPFLvJbr6FdAcnb5tK2/Fn1aA A8awvhXVxqeoP9uzd+8ggP/PSZ1C6VoVIF+HOMgv+boza6YjE+8nivPKjQQsXU4q 7k03LTF2miCAFix91Tvw92Z8WBXidsq0FnvinZo573cNVHFZXpeVOnSSA1p/NIeb s/LmQ9xl7DGLFTehk2JiVMgd7j9CfF8QUR+47jFGF3XZnrcY+N1HFJ4/WO0ImoTX QEqNqn6fuaqfpEe6hURSrExoQBoQ3mPte1vcnLSbGq/ObetSzAMfSENt68Rltync Gyu9HO+1LkISNHp/WTrq1KUk/+1uK7Oi -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:16 2025 by rpki-client