$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa File: dd8a995e-ded4-3180-b959-a5098f3033df.roa (raw, json) Hash identifier: REenS/RMAvsPBOTgjn6CnctqvCWUxPlrljrOtHjeDWc= Subject key identifier: ED:78:BF:E5:2A:3F:0D:1C:7D:E4:0C:C6:67:FF:37:2D:9E:71:26:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B80B77CEDF9C1E23A51D4E400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396544 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7c:ed:f9:c1:e2:3a:51:d4:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=f74f08e4-fa96-42a5-9421-b49a81e11898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:8c:4b:ff:d0:69:ab:01:2c:1e:d7:0f:15: 91:70:65:8d:db:eb:d5:e9:fc:11:3b:2f:c2:1e:8d: a7:15:3c:d7:df:65:57:7c:f0:da:f0:91:be:dc:1e: f9:fb:7f:cf:79:8a:f9:52:18:ad:4e:ba:92:e1:dd: 23:8c:ec:0c:c3:21:b0:af:d6:a7:97:62:bb:6b:02: 55:f0:c7:01:2b:82:6b:65:49:0b:a1:0a:3a:7f:0c: cb:20:88:c0:11:ad:44:47:9d:2c:f0:d0:23:9f:52: db:e2:e8:e9:64:93:2c:82:69:be:af:2b:9b:ff:5e: 59:73:e3:97:e7:4d:33:03:50:53:de:c3:44:80:0c: 21:27:60:2d:1d:59:dc:ae:9d:9d:bf:37:09:6d:da: 69:59:4b:83:25:05:56:08:fd:5d:5a:6d:59:eb:9e: 89:50:79:1a:d1:fe:71:52:c7:2d:43:6f:27:33:61: 82:c3:74:1a:cd:cc:79:d9:b7:46:1d:14:21:ce:b3: 62:e0:fe:18:33:b4:c4:cf:21:7b:9d:13:d3:31:44: f4:83:38:f3:15:60:3a:de:80:49:10:d9:6f:34:74: f6:21:a8:8b:a1:25:06:49:09:78:9f:26:f8:fd:21: 77:3b:5a:6b:8d:0a:ca:b4:90:93:47:78:88:a6:8b: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:78:BF:E5:2A:3F:0D:1C:7D:E4:0C:C6:67:FF:37:2D:9E:71:26:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:73:2a:7d:7e:fa:9d:25:f8:cd:55:df:7f:9d:20:53:44: 7d:9d:e9:08:dc:32:28:3f:75:4d:9b:cd:c1:c5:f1:8c:3e:6d: fc:ab:f4:25:e0:65:44:73:27:dd:af:44:bd:e2:c0:e3:1a:f4: d6:28:a1:a3:ae:bb:f1:73:60:b9:bd:ee:10:f4:c9:63:0b:bc: 4f:00:7f:68:02:7c:93:85:7c:e4:5a:9f:8e:d0:a9:f3:41:ae: 1b:97:bd:c8:24:8a:78:2e:d3:d9:3b:ce:f1:7c:61:77:c5:99: 37:b2:6e:fb:f1:f2:d3:db:0e:5c:b3:87:22:91:16:92:9a:74: 22:06:6a:65:6c:cf:35:de:65:6f:49:c6:95:2b:f4:b5:e6:15: ab:3e:e2:ab:9a:f4:f4:80:6e:43:28:6a:92:e5:25:0e:64:d6: 42:46:9e:33:69:2d:44:c4:c8:86:1d:00:05:37:24:cc:e6:0b: 36:01:26:83:3d:a2:2d:f9:4c:40:bc:47:bb:31:c8:7c:38:8e: 73:04:cb:00:17:70:7c:39:42:fe:e1:39:fa:37:7d:c5:6e:e1: a1:a2:9d:9b:49:2c:53:fb:46:d4:05:21:a7:91:b3:bf:ec:0f: 93:47:c8:ba:9a:54:b4:09:10:38:13:63:6d:44:be:e3:17:3e: 4d:7a:56:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3zt+cHiOlHU5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Zjc0ZjA4ZTQtZmE5Ni00MmE1LTk0MjEtYjQ5YTgxZTExODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnmMS//QaasBLB7XDxWRcGWN2+vV6fwROy/C Ho2nFTzX32VXfPDa8JG+3B75+3/PeYr5UhitTrqS4d0jjOwMwyGwr9anl2K7awJV 8McBK4JrZUkLoQo6fwzLIIjAEa1ER50s8NAjn1Lb4ujpZJMsgmm+ryub/15Zc+OX 500zA1BT3sNEgAwhJ2AtHVncrp2dvzcJbdppWUuDJQVWCP1dWm1Z656JUHka0f5x UsctQ28nM2GCw3Qazcx52bdGHRQhzrNi4P4YM7TEzyF7nRPTMUT0gzjzFWA63oBJ ENlvNHT2IaiLoSUGSQl4nyb4/SF3O1prjQrKtJCTR3iIpotNwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO14v+UqPw0cfeQMxmf/Ny2ecSauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4YTk5NWUtZGVkNC0z MTgwLWI5NTktYTUwOThmMzAzM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACJHMqfX76nSX4zVXff50gU0R9nekI3DIoP3VNm83BxfGMPm38q/Ql 4GVEcyfdr0S94sDjGvTWKKGjrrvxc2C5ve4Q9MljC7xPAH9oAnyThXzkWp+O0Knz Qa4bl73IJIp4LtPZO87xfGF3xZk3sm778fLT2w5cs4cikRaSmnQiBmplbM813mVv ScaVK/S15hWrPuKrmvT0gG5DKGqS5SUOZNZCRp4zaS1ExMiGHQAFNyTM5gs2ASaD PaIt+UxAvEe7Mch8OI5zBMsAF3B8OUL+4Tn6N33FbuGhop2bSSxT+0bUBSGnkbO/ 7A+TR8i6mlS0CRA4E2NtRL7jFz5NelYa -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:14 2025 by rpki-client