$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa File: 0b790125-1c37-32a2-9a6f-6d1917a58a47.roa (raw, json) Hash identifier: vxt3/p42AleE40Y5ZnADdo7H1HRzkDG9VJAkp37EMYM= Subject key identifier: 96:4F:AC:77:BA:1B:8B:A6:22:23:1B:8B:12:74:09:46:D9:4E:BB:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E41801BCC58469F1A560 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396561 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:18:01:bc:c5:84:69:f1:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1a862981-ef64-4a06-9666-50e9359d7ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:c6:a3:f0:a5:80:f5:6c:fd:6a:72:b9:ba: bd:a7:f3:b1:e3:40:37:ee:a6:c5:a4:17:06:d2:35: 18:a4:7e:0e:b2:c2:8c:2f:bc:97:27:67:09:f1:bb: e7:38:b7:e6:1c:f7:4a:7e:47:ea:ba:65:a1:05:4e: 84:25:77:12:77:17:1f:96:39:81:c8:cd:c3:37:b4: 02:03:76:dc:a7:6d:5a:18:22:02:27:1f:a9:69:3d: e8:34:0e:05:61:8d:5c:94:50:35:36:6b:2d:8c:2a: b6:a4:71:db:2a:be:58:a2:b6:7c:69:14:33:b2:d4: d2:8e:ed:8e:80:38:c9:e8:36:5f:2a:37:6d:14:63: fe:d2:af:9f:e2:1c:01:48:ce:33:b1:ce:77:80:bf: c4:62:47:bd:08:6a:0d:b3:08:10:94:07:75:52:aa: bb:7a:e7:92:24:77:25:bb:24:e7:1d:87:45:c4:f5: 53:64:eb:02:1a:ce:f6:f4:11:f6:6f:d1:70:2f:14: 70:ac:01:a6:20:fb:b1:27:44:11:fb:88:a4:05:e3: da:f5:56:75:43:e1:56:45:3c:6e:fb:17:72:c8:c6: 41:97:dd:5a:2d:e4:32:40:d0:a1:40:35:e1:eb:ad: 2b:75:b3:ae:1e:7d:b5:c1:54:48:83:2b:b1:82:f5: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:AC:77:BA:1B:8B:A6:22:23:1B:8B:12:74:09:46:D9:4E:BB:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9e:42:aa:41:f3:bd:fb:8e:e6:15:d4:31:72:23:5d:a1:06: 54:f9:00:92:e1:9d:b0:3f:ac:42:bc:ec:f2:f2:8b:97:0b:d7: ba:8f:88:e3:a5:3b:bd:9a:30:24:73:c3:b5:98:f1:ce:29:fa: cb:bc:3e:ce:2e:07:38:8b:0c:16:bd:bb:64:b9:83:72:2c:3f: 4e:85:17:23:dc:3d:68:d8:9c:a4:c0:0e:15:ba:7e:60:92:81: cd:d8:72:8e:d2:35:78:12:2b:dc:25:95:87:c2:54:7f:8c:fd: a8:e9:49:1c:74:7e:d9:53:04:e2:0f:80:05:8b:e4:d7:0d:51: fb:6f:29:ef:cb:62:3c:dd:8c:35:b7:ae:56:0b:61:c9:36:e0: bb:f9:e7:09:86:f3:a0:7b:30:f3:6c:ff:e9:c8:64:28:b7:03: 0c:9d:a8:a7:91:43:01:a5:cb:2e:33:99:0e:7a:54:d0:fe:58: 06:df:1a:51:ae:c2:30:49:5f:19:09:06:7f:32:e9:3c:a7:4e: 19:61:0c:ea:0b:ea:d5:dd:28:e8:b6:3d:ce:35:38:16:a6:54: 4b:6f:94:81:5e:49:3b:27:9f:64:80:3d:be:76:0f:6b:03:db: ed:77:f7:b2:a3:e6:5e:bd:72:22:48:9d:e9:18:3b:95:1d:ce: af:c9:bd:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOQYAbzFhGnxpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MWE4NjI5ODEtZWY2NC00YTA2LTk2NjYtNTBlOTM1OWQ3ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQjGo/ClgPVs/Wpyubq9p/Ox40A37qbFpBcG 0jUYpH4OssKML7yXJ2cJ8bvnOLfmHPdKfkfqumWhBU6EJXcSdxcfljmByM3DN7QC A3bcp21aGCICJx+paT3oNA4FYY1clFA1NmstjCq2pHHbKr5YorZ8aRQzstTSju2O gDjJ6DZfKjdtFGP+0q+f4hwBSM4zsc53gL/EYke9CGoNswgQlAd1Uqq7eueSJHcl uyTnHYdFxPVTZOsCGs729BH2b9FwLxRwrAGmIPuxJ0QR+4ikBePa9VZ1Q+FWRTxu +xdyyMZBl91aLeQyQNChQDXh660rdbOuHn21wVRIgyuxgvVMaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZPrHe6G4umIiMbixJ0CUbZTrsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI3OTAxMjUtMWMzNy0z MmEyLTlhNmYtNmQxOTE3YTU4YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7nkKqQfO9+47mFdQxciNdoQZU+QCS4Z2wP6xCvOzy8ouXC9e6j4jj pTu9mjAkc8O1mPHOKfrLvD7OLgc4iwwWvbtkuYNyLD9OhRcj3D1o2JykwA4Vun5g koHN2HKO0jV4EivcJZWHwlR/jP2o6UkcdH7ZUwTiD4AFi+TXDVH7bynvy2I83Yw1 t65WC2HJNuC7+ecJhvOgezDzbP/pyGQotwMMnainkUMBpcsuM5kOelTQ/lgG3xpR rsIwSV8ZCQZ/Muk8p04ZYQzqC+rV3Sjotj3ONTgWplRLb5SBXkk7J59kgD2+dg9r A9vtd/eyo+ZevXIiSJ3pGDuVHc6vyb1E -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:41 2025 by rpki-client