$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa File: 32457c4d-3c91-3d94-bcdd-950431e64872.roa (raw, json) Hash identifier: Su5a/ncIAiaa0rTKNRGwkzgUXhs8XchPOLI6ochFaBE= Subject key identifier: 12:78:38:42:64:16:43:16:9B:3F:E5:34:F9:11:4D:05:95:8D:EC:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9BCB747C3461A00495A5DB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 0 IP address blocks: 216.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:74:7c:34:61:a0:04:95:a5:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=a149e7f8-d699-461d-a56f-c33c721cf87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:aa:6e:05:7e:ae:27:f3:9d:53:02:d7:d3: 69:f7:46:70:7d:a6:5d:45:75:4c:ac:02:52:e3:7c: da:44:5a:5d:8b:9b:c3:54:53:77:aa:af:df:47:ff: 53:ea:64:83:6f:50:a0:43:c8:9d:40:2c:98:c8:cc: 88:1d:14:97:dc:dd:2d:79:d3:31:0c:31:2c:13:e8: 6d:b7:da:b5:55:dd:ef:ff:27:96:f5:ef:4a:1b:49: f9:e2:75:e1:70:d6:7a:b8:02:d3:bb:32:0f:e3:c2: 9b:9b:f1:45:be:dc:39:0e:0c:78:b2:98:03:83:5b: 64:68:80:c7:5b:ff:1d:42:6b:b2:54:09:92:3b:d3: ea:1d:b7:7b:e6:0a:7c:3e:5c:04:14:80:74:a7:6d: 36:9b:32:6c:1c:1c:2f:10:a4:d0:c5:4b:e7:ac:5a: 10:4f:2c:b4:cf:f2:5c:9d:7f:fb:23:a5:40:af:b1: 07:fd:7d:c8:b6:22:77:27:55:07:d7:0a:56:82:4b: d3:68:b2:80:c4:5e:8f:76:91:87:77:eb:9a:fa:c2: f8:b3:9f:8c:c4:bf:33:43:0d:11:95:20:58:00:4c: 19:ea:5a:75:dd:57:3a:ec:5b:a5:83:46:ca:65:d6: ff:7b:aa:80:19:1a:c7:65:73:69:9d:6b:a2:78:8e: ca:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:78:38:42:64:16:43:16:9B:3F:E5:34:F9:11:4D:05:95:8D:EC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fc:da:4b:a4:40:9c:3d:6b:69:99:60:35:6a:52:d6:79:c8: 3b:0c:6b:5e:be:e7:64:50:1d:4a:11:97:3a:7d:3e:dd:b6:e5: f3:23:84:18:07:51:0e:d4:2e:49:08:73:77:c8:46:e1:84:c5: 79:50:84:45:6f:d6:6b:ce:dd:64:a1:4f:fd:b3:6f:9a:fb:a4: d0:58:12:36:fc:c8:42:c4:c1:5d:f1:0e:7d:53:5b:ff:56:40: 14:91:82:3d:27:8d:3a:80:8b:e3:58:f5:06:0e:7b:7e:a1:88: 91:17:05:23:cb:61:9d:51:40:2e:f1:0d:43:2a:96:5b:f8:72: 50:94:02:1b:ca:46:8e:fa:9b:c8:79:1d:73:e2:7c:e8:e5:31: d1:49:03:4d:85:91:eb:07:15:f8:34:3e:5a:1d:9d:fa:e4:fb: 3c:5c:3c:5f:07:5a:7d:0f:d9:69:dc:f6:a8:92:fb:f6:66:25: ba:bd:4a:b1:5f:c3:11:ff:c7:ab:45:ac:e7:fd:c3:7c:27:53: 5a:20:57:e6:7d:40:be:c9:20:5a:b6:1e:0b:0c:55:5b:20:a1: d7:88:6c:90:14:d3:ec:3c:89:df:c1:83:28:2a:b7:aa:da:d7: d8:80:48:33:fe:84:c9:ec:54:dd:09:d9:3b:0d:61:6a:7b:ed: 01:fa:c1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3R8NGGgBJWl20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk YTE0OWU3ZjgtZDY5OS00NjFkLWE1NmYtYzMzYzcyMWNmODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgKqbgV+rifznVMC19Np90ZwfaZdRXVMrAJS 43zaRFpdi5vDVFN3qq/fR/9T6mSDb1CgQ8idQCyYyMyIHRSX3N0tedMxDDEsE+ht t9q1Vd3v/yeW9e9KG0n54nXhcNZ6uALTuzIP48Kbm/FFvtw5Dgx4spgDg1tkaIDH W/8dQmuyVAmSO9PqHbd75gp8PlwEFIB0p202mzJsHBwvEKTQxUvnrFoQTyy0z/Jc nX/7I6VAr7EH/X3ItiJ3J1UH1wpWgkvTaLKAxF6PdpGHd+ua+sL4s5+MxL8zQw0R lSBYAEwZ6lp13Vc67Fulg0bKZdb/e6qAGRrHZXNpnWuieI7KXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ4OEJkFkMWmz/lNPkRTQWVjeyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI0NTdjNGQtM2M5MS0z ZDk0LWJjZGQtOTUwNDMxZTY0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT82kukQJw9a2mZYDVqUtZ5yDsMa16+52RQHUoRlzp9Pt225fMjhBgH UQ7ULkkIc3fIRuGExXlQhEVv1mvO3WShT/2zb5r7pNBYEjb8yELEwV3xDn1TW/9W QBSRgj0njTqAi+NY9QYOe36hiJEXBSPLYZ1RQC7xDUMqllv4clCUAhvKRo76m8h5 HXPifOjlMdFJA02FkesHFfg0Plodnfrk+zxcPF8HWn0P2Wnc9qiS+/ZmJbq9SrFf wxH/x6tFrOf9w3wnU1ogV+Z9QL7JIFq2HgsMVVsgodeIbJAU0+w8id/Bgygqt6ra 19iASDP+hMnsVN0J2TsNYWp77QH6wZs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:05 2025 by rpki-client