$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: sqVRoSeekKynhz6TGpxipawcRZCN+A+zer6FFFUQLN4= Subject key identifier: A8:FE:8C:C5:85:EA:F4:CF:A6:60:84:29:8A:24:96:61:28:C2:9D:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77C2D002521B9605A0680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7c:2d:00:25:21:b9:60:5a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=4ab0c4cb-b131-46a6-b4dd-23170d9779aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:6c:a0:55:dc:fa:80:7f:ad:52:df:77:fe: 51:22:f4:d7:3e:66:86:9e:77:2a:83:c4:ad:3f:a3: 09:8b:b4:fd:b7:17:7c:a3:38:e0:43:5a:b7:f5:d6: 64:8d:5a:bf:5d:03:c2:ad:35:c1:c6:98:50:42:b4: fa:94:6f:6f:fc:93:c1:ac:0b:a7:e6:f9:04:65:0f: 1a:1a:3c:3c:2d:99:87:36:b4:48:25:0c:8c:f8:ed: 54:99:ce:23:eb:5e:86:ea:86:a7:4a:7a:7d:15:c9: 27:ff:8c:27:08:8d:28:91:ce:c5:6d:ca:2b:5d:54: bf:17:a1:14:ce:36:35:1c:c9:8a:c6:e1:50:5c:e3: 1f:74:74:ed:3b:1f:f5:ec:60:7d:2f:7b:1c:83:40: c3:d0:97:3b:b0:3f:a1:fd:63:dd:47:fb:a3:fc:27: 4f:e1:45:88:a5:5e:9b:6f:2e:87:93:65:25:03:e4: 90:93:95:de:ba:71:c9:ea:35:02:6c:94:de:a8:af: f5:9c:31:29:8d:61:e9:8b:05:ea:6a:e6:22:3b:51: 84:c7:ba:95:67:0f:66:ea:fd:bb:83:71:82:f8:df: 23:7f:d1:4a:62:c5:6a:a1:62:24:e0:a6:8f:16:c1: 9f:0e:09:5f:0e:67:86:ce:b8:5a:ce:00:9e:ae:4b: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:8C:C5:85:EA:F4:CF:A6:60:84:29:8A:24:96:61:28:C2:9D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2a:70:38:7b:6a:fa:92:71:6f:23:e3:95:7e:48:31:49:f4: 64:b7:c0:01:81:c1:0b:b7:ee:bc:f0:e9:0f:b3:4f:fa:4e:f7: af:e0:56:57:18:55:31:28:88:85:69:6c:a6:49:41:67:b1:ba: 8f:3f:77:66:11:8f:85:5e:d4:d1:35:79:0d:90:53:b5:b0:95: ce:47:bb:27:af:3a:9a:d8:ef:e0:94:2e:07:df:e5:1f:2d:3d: c6:61:fe:ad:fa:e5:3c:6b:57:2c:67:dc:e4:bb:43:b0:42:91: a5:36:22:f7:9d:a5:c6:48:16:79:07:e3:66:28:2b:ae:87:16: c8:74:25:e7:86:b4:b4:28:a1:40:44:95:9a:09:24:11:13:c6: e4:b2:7c:b7:84:99:aa:b0:6d:5b:5e:42:e6:23:2e:ee:39:a4: d1:0b:25:40:0e:80:54:5f:6c:4e:d2:07:6f:37:cc:3f:93:24: bc:ee:4a:14:0b:54:ba:71:b0:40:ed:5d:e7:d6:9b:81:50:35: c7:ac:23:dc:2d:f0:0b:8f:08:da:b7:7f:39:1a:fd:32:3c:72: ed:3d:85:59:0b:0c:54:00:d5:06:f4:6a:80:2b:ed:28:c8:41: dc:63:1b:e6:88:8f:f9:d8:55:78:00:33:10:d7:96:ea:72:09: 10:08:4e:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3wtACUhuWBaBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NGFiMGM0Y2ItYjEzMS00NmE2LWI0ZGQtMjMxNzBkOTc3OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtsoFXc+oB/rVLfd/5RIvTXPmaGnncqg8St P6MJi7T9txd8ozjgQ1q39dZkjVq/XQPCrTXBxphQQrT6lG9v/JPBrAun5vkEZQ8a Gjw8LZmHNrRIJQyM+O1Umc4j616G6oanSnp9Fckn/4wnCI0okc7FbcorXVS/F6EU zjY1HMmKxuFQXOMfdHTtOx/17GB9L3scg0DD0Jc7sD+h/WPdR/uj/CdP4UWIpV6b by6Hk2UlA+SQk5XeunHJ6jUCbJTeqK/1nDEpjWHpiwXqauYiO1GEx7qVZw9m6v27 g3GC+N8jf9FKYsVqoWIk4KaPFsGfDglfDmeGzrhazgCerktRLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKj+jMWF6vTPpmCEKYoklmEowp2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIKnA4e2r6knFvI+OVfkgxSfRkt8ABgcELt+688OkPs0/6Tvev4FZX GFUxKIiFaWymSUFnsbqPP3dmEY+FXtTRNXkNkFO1sJXOR7snrzqa2O/glC4H3+Uf LT3GYf6t+uU8a1csZ9zku0OwQpGlNiL3naXGSBZ5B+NmKCuuhxbIdCXnhrS0KKFA RJWaCSQRE8bksny3hJmqsG1bXkLmIy7uOaTRCyVADoBUX2xO0gdvN8w/kyS87koU C1S6cbBA7V3n1puBUDXHrCPcLfALjwjat385Gv0yPHLtPYVZCwxUANUG9GqAK+0o yEHcYxvmiI/52FV4ADMQ15bqcgkQCE4v -----END CERTIFICATE-----Generated at Wed Oct 29 20:05:57 2025 by rpki-client