$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa File: 1814f33e-9120-36ed-b07e-30d6034f9571.roa (raw, json) Hash identifier: fZk4s6zupeqp2yB/Xj3pqDJV00c72430IkpWznROkx8= Subject key identifier: 64:FB:DD:19:63:B1:35:5B:38:70:0B:A2:21:D5:E9:36:E5:B9:01:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77B6D0FFAE869258F5560 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 22547 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7b:6d:0f:fa:e8:69:25:8f:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e404e03f-c3a0-4f39-bd41-f63e90970e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:26:aa:b6:c0:1e:f3:c1:4f:2d:bf:67:03: 91:10:1a:4d:16:64:cc:2a:55:0c:04:f5:54:15:31: 48:56:a6:47:57:fd:60:3e:f8:77:ec:4b:13:3c:17: 1e:40:2f:8e:78:b2:da:ad:e3:55:54:79:f9:e5:be: b2:a2:c6:30:37:91:a3:7e:a1:34:d0:79:e5:58:3f: bc:d0:bc:16:a7:b3:78:03:c7:9a:f3:7e:a5:ba:a3: 62:7f:5c:f2:0d:cf:1c:35:3b:85:d7:82:43:d2:b1: 32:dd:8e:89:37:e8:90:88:ee:0d:a4:f7:95:84:b3: 7b:73:3b:50:41:b0:1e:e1:7b:0b:a6:20:d6:05:1c: 80:3d:8a:25:b0:a7:eb:9c:90:38:51:d5:ec:66:be: cb:30:88:07:cb:0e:b9:85:be:d4:ec:39:55:8b:56: 43:d3:93:56:66:63:bf:9c:0f:7f:11:86:6d:a0:c4: e5:b8:e7:40:87:31:5a:5f:3a:46:8c:cc:74:94:db: df:49:e4:c5:a3:d8:a0:43:8c:77:ac:aa:64:cc:f8: 33:7a:9b:74:d1:2b:7e:91:aa:b3:bf:99:7a:5d:2b: 40:ce:39:3e:c7:9c:d0:d7:7f:18:88:d7:e5:7c:ba: 12:e5:ad:98:7b:29:50:b8:f7:64:44:b2:82:3d:7c: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FB:DD:19:63:B1:35:5B:38:70:0B:A2:21:D5:E9:36:E5:B9:01:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:78:cf:5d:dc:4a:a6:d0:41:03:96:83:4f:e1:28:2a:7f:d9: ee:d6:77:29:5b:8f:ea:de:2b:7f:93:b0:ed:61:bf:f8:d5:6b: 08:ab:97:fb:ec:e2:c2:32:89:af:61:b4:0c:b7:b3:b4:54:af: c5:2b:e4:03:3b:11:5f:d6:77:5e:a1:d4:0f:9b:f4:35:91:40: e0:35:7e:fe:3b:1b:44:07:20:d5:1d:c9:6f:fd:67:db:9d:55: 52:7c:9b:56:26:86:ab:f0:c6:83:ec:12:52:9e:8b:56:40:a3: ad:7d:68:3f:1f:a7:a9:a0:1b:3f:cc:2f:c5:7b:fe:48:4a:3f: 8c:7d:be:e7:c6:8a:2c:f6:f1:26:4f:e6:7f:88:03:59:81:10: 0d:ae:25:60:89:24:71:73:e2:08:eb:6e:4f:28:ab:7c:79:39: a1:d3:27:c7:a7:f2:54:d0:08:84:6c:b1:51:4d:b7:75:0b:6f: bc:4e:c1:76:1c:fe:7f:f4:da:28:56:37:56:39:59:82:8c:d9: f8:de:92:f4:a3:e4:91:b7:56:fd:9a:48:ce:da:87:ea:2a:fe: 6e:a1:99:17:cf:85:e0:1e:45:04:d3:46:70:41:da:36:50:c6: 8d:ee:13:b1:34:17:64:91:e3:4d:a7:57:dd:a2:f2:e1:dd:93: a5:d5:54:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3ttD/roaSWPVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTQwNGUwM2YtYzNhMC00ZjM5LWJkNDEtZjYzZTkwOTcwZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNsmqrbAHvPBTy2/ZwOREBpNFmTMKlUMBPVU FTFIVqZHV/1gPvh37EsTPBceQC+OeLLareNVVHn55b6yosYwN5GjfqE00HnlWD+8 0LwWp7N4A8ea836luqNif1zyDc8cNTuF14JD0rEy3Y6JN+iQiO4NpPeVhLN7cztQ QbAe4XsLpiDWBRyAPYolsKfrnJA4UdXsZr7LMIgHyw65hb7U7DlVi1ZD05NWZmO/ nA9/EYZtoMTluOdAhzFaXzpGjMx0lNvfSeTFo9igQ4x3rKpkzPgzept00St+kaqz v5l6XStAzjk+x5zQ138YiNflfLoS5a2YeylQuPdkRLKCPXwM7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGT73RljsTVbOHALoiHV6TbluQHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgxNGYzM2UtOTEyMC0z NmVkLWIwN2UtMzBkNjAzNGY5NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFeM9d3Eqm0EEDloNP4Sgqf9nu1ncpW4/q3it/k7DtYb/41WsIq5f7 7OLCMomvYbQMt7O0VK/FK+QDOxFf1ndeodQPm/Q1kUDgNX7+OxtEByDVHclv/Wfb nVVSfJtWJoar8MaD7BJSnotWQKOtfWg/H6epoBs/zC/Fe/5ISj+Mfb7nxoos9vEm T+Z/iANZgRANriVgiSRxc+II625PKKt8eTmh0yfHp/JU0AiEbLFRTbd1C2+8TsF2 HP5/9NooVjdWOVmCjNn43pL0o+SRt1b9mkjO2ofqKv5uoZkXz4XgHkUE00ZwQdo2 UMaN7hOxNBdkkeNNp1fdovLh3ZOl1VSF -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:53 2025 by rpki-client