$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa File: f8572b75-cff9-35aa-b031-036f8f47dec8.roa (raw, json) Hash identifier: PGDg46tbc4Hi8hwznlSCU+HpJs8rtRkrWAx4Hyc48uE= Subject key identifier: 86:95:45:BE:20:04:C5:F9:D1:43:CA:2A:3F:7C:54:8C:37:74:DE:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B775F4D1324D9A3ECAD9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396590 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:75:f4:d1:32:4d:9a:3e:ca:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=42ef2b0c-791f-45f4-8fb7-68bdc7a786cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:e8:bd:f3:05:06:d9:0b:ed:3a:1c:6c:a3: 54:a0:53:5b:27:9a:c8:9b:de:6c:ff:e1:b2:1b:07: 15:6e:1e:64:59:3a:94:dc:20:c2:b2:72:87:ea:a5: 6c:0e:5f:77:62:31:e7:0f:43:43:a6:80:b3:ed:97: 39:4f:ab:4a:4a:41:ab:17:49:a3:b5:7f:f8:be:74: 15:6e:b0:09:12:6f:9b:f2:44:0f:9d:3b:3f:c1:6b: a9:dd:05:6b:4b:59:4b:3d:7c:eb:b4:9d:a0:18:90: db:b5:69:cf:74:2a:49:b9:7f:3d:16:d3:ad:e5:c7: 95:ff:30:e3:bb:be:9c:95:0e:2d:e6:5e:9b:e6:89: 3a:4a:db:a0:a6:6e:02:1a:2f:69:45:63:92:ea:2d: 70:27:22:d9:cc:cf:04:1e:61:57:85:e7:34:73:1b: d5:7a:46:ed:6a:54:eb:ac:70:0b:12:9a:5b:1a:34: a1:08:0a:23:9a:2a:25:30:47:6a:82:a8:04:23:f9: ea:8c:84:33:9d:59:d8:06:f0:5c:22:df:b2:b4:4a: 39:45:a6:b7:11:21:72:10:6a:e6:d9:f6:da:fe:18: 22:61:10:cb:be:b0:01:de:f5:8f:76:61:fe:af:ca: 92:10:3c:f3:63:4e:30:e6:30:ab:8a:e3:14:a1:e5: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:45:BE:20:04:C5:F9:D1:43:CA:2A:3F:7C:54:8C:37:74:DE:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:21:2b:f8:d0:2d:8d:fc:31:d4:bd:17:b6:f8:23:05:1d: 8f:07:45:20:28:aa:fe:1b:02:77:bf:82:d5:89:34:b7:e1:52: 6f:02:42:64:ad:dd:82:11:bc:0d:20:4d:45:e6:a0:57:d3:f6: 85:bd:1d:f3:f2:ab:38:69:6a:a9:af:ad:08:9f:11:76:1c:a0: 02:28:53:4b:fe:13:85:08:ae:be:e6:7f:52:d0:f7:97:ba:b7: 02:c9:99:04:6e:d9:f8:e6:15:9f:2f:4f:a1:0d:c2:fe:87:c8: 96:ec:d8:ed:00:ae:3c:87:47:39:4b:b3:13:86:03:9a:0b:e2: 09:82:cf:8e:1d:e9:68:ce:75:f0:21:be:20:74:57:c0:ac:ed: 14:61:3d:72:32:46:ef:1c:47:3c:48:a2:0d:a8:9e:e9:9d:cf: 8d:82:24:f9:fa:cd:0c:d6:bb:65:2a:b6:28:0a:a3:06:16:69: 84:77:7f:14:7d:58:35:d7:6b:5a:63:e0:fb:d9:56:0f:be:48: dc:a3:2b:2b:32:0a:d2:a5:57:05:50:c0:0f:ae:79:e5:8f:df: 29:d4:3d:a6:f7:8f:3b:24:d3:70:7a:a2:77:56:39:8f:77:ec: 63:e5:2c:75:63:a1:ff:41:6b:4c:25:da:f9:10:e5:f6:53:ff: 74:98:81:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3X00TJNmj7K2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDJlZjJiMGMtNzkxZi00NWY0LThmYjctNjhiZGM3YTc4NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfjovfMFBtkL7TocbKNUoFNbJ5rIm95s/+Gy GwcVbh5kWTqU3CDCsnKH6qVsDl93YjHnD0NDpoCz7Zc5T6tKSkGrF0mjtX/4vnQV brAJEm+b8kQPnTs/wWup3QVrS1lLPXzrtJ2gGJDbtWnPdCpJuX89FtOt5ceV/zDj u76clQ4t5l6b5ok6Stugpm4CGi9pRWOS6i1wJyLZzM8EHmFXhec0cxvVekbtalTr rHALEppbGjShCAojmiolMEdqgqgEI/nqjIQznVnYBvBcIt+ytEo5Raa3ESFyEGrm 2fba/hgiYRDLvrAB3vWPdmH+r8qSEDzzY04w5jCriuMUoeVy8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaVRb4gBMX50UPKKj98VIw3dN7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg1NzJiNzUtY2ZmOS0z NWFhLWIwMzEtMDM2ZjhmNDdkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeaCEr+NAtjfwx1L0XtvgjBR2PB0UgKKr+GwJ3v4LViTS34VJvAkJk rd2CEbwNIE1F5qBX0/aFvR3z8qs4aWqpr60InxF2HKACKFNL/hOFCK6+5n9S0PeX urcCyZkEbtn45hWfL0+hDcL+h8iW7NjtAK48h0c5S7MThgOaC+IJgs+OHeloznXw Ib4gdFfArO0UYT1yMkbvHEc8SKINqJ7pnc+NgiT5+s0M1rtlKrYoCqMGFmmEd38U fVg112taY+D72VYPvkjcoysrMgrSpVcFUMAPrnnlj98p1D2m9487JNNweqJ3VjmP d+xj5Sx1Y6H/QWtMJdr5EOX2U/90mIHI -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:41 2025 by rpki-client