$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa File: 32457c4d-3c91-3d94-bcdd-950431e64872.roa (raw, json) Hash identifier: FuknB9YQYlmv0iR6G4jxvL2sbXE0WTZWQTeX6IQ1cOc= Subject key identifier: B0:E5:37:72:EF:ED:7F:AE:F8:29:DA:DD:D6:CD:27:B5:59:38:1F:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7C8766ECE4FD6CA3F7CC6A84 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 0 IP address blocks: 216.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:66:ec:e4:fd:6c:a3:f7:cc:6a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=add955e1-c385-4282-baff-88e036337dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:63:70:8d:0e:f4:85:b7:17:9d:3c:79:44: 5c:f5:48:fc:b2:b6:9d:85:bc:d2:dc:25:12:49:ce: ed:b8:96:36:da:ec:fc:8e:db:81:52:8b:b7:ca:6c: 01:e3:1d:50:85:56:fe:74:b5:14:b6:36:58:b4:46: 91:ad:2e:dd:7d:0e:a8:cf:f9:a3:1a:1a:ef:85:9a: 3d:1a:0b:7e:03:69:6e:fe:7f:73:f6:24:2d:fd:0b: d2:8a:08:6a:41:26:70:1a:f7:7f:10:bb:b9:41:a0: 15:09:cc:ed:93:f1:8c:21:52:7f:21:e8:7f:91:f2: bf:42:75:22:17:d8:9e:dc:67:59:17:ce:cc:80:d0: 62:d9:87:bc:78:4d:36:71:71:5b:32:30:de:8e:78: e0:0e:d3:3e:35:d8:b6:48:63:e3:f9:ec:d5:80:63: a0:35:da:0e:f4:ba:cb:70:12:24:b5:f8:71:46:ea: 7e:52:a2:a0:44:38:e1:34:77:08:ce:c6:9a:b9:8d: 54:68:e2:25:18:d6:db:45:42:f7:a2:f6:33:2c:92: 7c:f3:8d:4a:83:4f:1b:b9:85:d0:87:80:11:3d:21: e1:a8:a9:a7:bc:51:26:f6:d7:28:b9:d3:f2:92:4b: 18:6f:2a:4f:d9:a7:9f:7c:3e:fd:32:86:f4:40:0a: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E5:37:72:EF:ED:7F:AE:F8:29:DA:DD:D6:CD:27:B5:59:38:1F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cb:31:9b:6d:74:6a:93:5e:2f:0a:63:29:6c:59:18:9d:77: 53:72:db:d4:8a:f4:6a:79:ed:d0:90:cd:e7:90:b8:b7:ab:19: 36:25:ef:9b:b7:d0:58:55:f7:c2:2d:60:88:69:83:f9:63:b5: 75:97:ad:af:4e:1a:22:7a:56:86:05:9f:31:82:ef:bd:b4:38: 4b:a5:84:16:e2:c9:ef:56:17:1f:d1:37:1a:64:eb:4b:ac:7c: 1e:0a:61:5a:93:0f:d9:25:85:de:a7:89:d7:bc:60:37:6e:98: 4b:71:24:4c:91:9c:de:b7:a1:4b:2f:a3:78:07:8d:e7:c5:3b: 1d:96:20:06:42:98:03:31:fe:5b:d8:01:8f:9e:bf:6f:2f:d8: d5:61:1e:2c:4a:4c:33:ee:8b:61:75:6b:25:d9:75:4a:05:37: 1b:cc:97:26:5b:f6:7f:71:ee:eb:76:e5:22:9d:11:53:86:8e: 32:8e:0c:3b:5a:71:fc:e6:70:20:d9:36:8e:3b:07:e7:5c:3d: 97:5e:13:24:70:b6:19:4b:e8:22:0e:e0:cf:d3:3a:95:79:78: 99:a8:d4:61:a7:d9:1e:d8:7d:8f:c8:7b:7e:08:ea:a1:20:b0: 30:fd:89:53:f1:40:df:86:be:70:60:9e:07:f3:70:62:a8:00: ee:a2:55:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2bs5P1so/fMaoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YWRkOTU1ZTEtYzM4NS00MjgyLWJhZmYtODhlMDM2MzM3ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6pjcI0O9IW3F508eURc9Uj8sradhbzS3CUS Sc7tuJY22uz8jtuBUou3ymwB4x1QhVb+dLUUtjZYtEaRrS7dfQ6oz/mjGhrvhZo9 Ggt+A2lu/n9z9iQt/QvSighqQSZwGvd/ELu5QaAVCcztk/GMIVJ/Ieh/kfK/QnUi F9ie3GdZF87MgNBi2Ye8eE02cXFbMjDejnjgDtM+Ndi2SGPj+ezVgGOgNdoO9LrL cBIktfhxRup+UqKgRDjhNHcIzsaauY1UaOIlGNbbRUL3ovYzLJJ8841Kg08buYXQ h4ARPSHhqKmnvFEm9tcoudPykksYbypP2aeffD79Mob0QAqPDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDlN3Lv7X+u+Cna3dbNJ7VZOB+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI0NTdjNGQtM2M5MS0z ZDk0LWJjZGQtOTUwNDMxZTY0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITLMZttdGqTXi8KYylsWRidd1Ny29SK9Gp57dCQzeeQuLerGTYl75u3 0FhV98ItYIhpg/ljtXWXra9OGiJ6VoYFnzGC7720OEulhBbiye9WFx/RNxpk60us fB4KYVqTD9klhd6nide8YDdumEtxJEyRnN63oUsvo3gHjefFOx2WIAZCmAMx/lvY AY+ev28v2NVhHixKTDPui2F1ayXZdUoFNxvMlyZb9n9x7ut25SKdEVOGjjKODDta cfzmcCDZNo47B+dcPZdeEyRwthlL6CIO4M/TOpV5eJmo1GGn2R7YfY/Ie34I6qEg sDD9iVPxQN+GvnBgngfzcGKoAO6iVdE= -----END CERTIFICATE-----Generated at Thu Oct 30 03:18:59 2025 by rpki-client