$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/109decda-79a6-329f-b219-7a19937f843c.roa File: 109decda-79a6-329f-b219-7a19937f843c.roa (raw, json) Hash identifier: O5+nvaxUEZdwI8NQguBaBX/Yv+gnTbknaaOQkmQYEu0= Subject key identifier: 19:65:57:96:28:26:65:76:40:79:33:BF:EA:9A:BF:E7:81:4B:C0:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3581F53253E8DCFB680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/109decda-79a6-329f-b219-7a19937f843c.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36622 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:58:1f:53:25:3e:8d:cf:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=188173a5-f648-4251-8181-d8f6a44508ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:0d:6b:02:41:47:4b:f5:64:ae:b9:78:0f: a2:7c:88:c5:fc:1c:06:78:f5:c0:8a:83:0e:2b:37: b3:5b:3c:19:3a:98:c3:59:a4:8d:c4:08:07:eb:c1: f5:69:74:6f:82:ae:ca:27:79:cf:9b:ab:78:10:6a: 46:75:b2:cb:f5:14:ed:b7:8a:c5:00:9a:d4:a6:c1: 14:ab:f6:68:b7:1e:66:03:2e:67:8a:d3:f2:dc:01: 96:89:cb:47:da:27:3b:5f:07:27:99:4f:d7:a2:a8: bc:d1:5c:67:c0:8e:6e:ff:b6:7b:e4:4d:ab:6a:b2: 52:47:96:94:55:da:7c:c3:8b:4f:a4:e2:16:b6:99: dc:9b:0a:09:54:a7:28:0b:57:17:38:f4:72:61:51: 8a:02:66:18:8c:f7:77:b0:53:d1:9a:cc:64:d5:c6: 2b:b6:34:43:72:24:f8:8b:b8:9c:11:1c:76:f3:7e: 7d:65:63:1d:9d:3c:02:e9:00:6d:bd:26:78:cc:71: b0:09:ee:9c:70:a8:68:e0:c1:e7:f9:3b:1f:07:a8: e2:e9:d7:4d:80:6d:d9:90:43:12:a5:02:c5:17:25: d1:07:5e:0c:52:73:63:48:cb:32:46:fd:18:5d:a2: d9:2a:d7:f3:67:e4:a6:06:85:e8:46:e9:5b:01:09: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:57:96:28:26:65:76:40:79:33:BF:EA:9A:BF:E7:81:4B:C0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/109decda-79a6-329f-b219-7a19937f843c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:38:db:6e:39:1f:d9:03:46:b7:66:73:20:04:95:00:61:26: 04:cd:8b:2a:33:c0:13:f6:49:22:dc:cd:11:3b:25:e4:80:e3: 7a:d3:6a:c9:bb:c9:4d:44:f8:55:9e:3c:af:d6:54:7b:63:a7: ed:cf:83:11:9c:b9:40:bd:f2:d1:0a:73:1e:da:6e:1e:16:33: 42:4b:b5:b7:ae:3c:e2:d2:81:e3:a3:79:a0:e2:73:ef:33:53: d4:5b:0e:b3:b8:e7:c7:d4:e9:d4:05:00:fb:ff:4d:b7:77:f5: 17:13:dd:ff:a2:b4:29:11:b1:84:e8:35:3d:16:0c:54:b2:a1: d9:14:f8:a7:6e:e1:49:88:a8:e3:dd:34:10:45:28:40:f1:fc: 6a:02:68:dc:d3:0f:72:e6:df:07:e7:e2:ed:64:70:b0:28:0f: 41:a2:7b:64:35:35:00:a5:20:aa:30:39:90:a6:df:8b:88:b7: 75:7a:3e:1c:26:f4:33:92:50:58:46:a8:b0:0d:48:97:ae:a3: e7:f0:88:71:05:74:62:c4:54:fd:d6:73:2e:70:5c:ca:6f:f3: 29:26:97:2a:ce:b6:f5:3d:57:e1:45:49:64:16:59:6c:d5:55: cf:f2:32:c4:c4:9f:e8:31:37:00:2f:f5:0b:71:3c:3d:24:4d: e7:58:24:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcONYH1MlPo3PtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTg4MTczYTUtZjY0OC00MjUxLTgxODEtZDhmNmE0NDUwOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqisNawJBR0v1ZK65eA+ifIjF/BwGePXAioMO KzezWzwZOpjDWaSNxAgH68H1aXRvgq7KJ3nPm6t4EGpGdbLL9RTtt4rFAJrUpsEU q/Zotx5mAy5nitPy3AGWictH2ic7XwcnmU/Xoqi80VxnwI5u/7Z75E2rarJSR5aU Vdp8w4tPpOIWtpncmwoJVKcoC1cXOPRyYVGKAmYYjPd3sFPRmsxk1cYrtjRDciT4 i7icERx28359ZWMdnTwC6QBtvSZ4zHGwCe6ccKho4MHn+TsfB6ji6ddNgG3ZkEMS pQLFFyXRB14MUnNjSMsyRv0YXaLZKtfzZ+SmBoXoRulbAQlsKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBllV5YoJmV2QHkzv+qav+eBS8CoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTA5ZGVjZGEtNzlhNi0z MjlmLWIyMTktN2ExOTkzN2Y4NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcONtuOR/ZA0a3ZnMgBJUAYSYEzYsqM8AT9kki3M0ROyXkgON602rJ u8lNRPhVnjyv1lR7Y6ftz4MRnLlAvfLRCnMe2m4eFjNCS7W3rjzi0oHjo3mg4nPv M1PUWw6zuOfH1OnUBQD7/023d/UXE93/orQpEbGE6DU9FgxUsqHZFPinbuFJiKjj 3TQQRShA8fxqAmjc0w9y5t8H5+LtZHCwKA9BontkNTUApSCqMDmQpt+LiLd1ej4c JvQzklBYRqiwDUiXrqPn8IhxBXRixFT91nMucFzKb/MpJpcqzrb1PVfhRUlkFlls 1VXP8jLExJ/oMTcAL/ULcTw9JE3nWCRF -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:17 2025 by rpki-client