$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa File: 1324d469-061c-391a-ac60-5b462b8f6694.roa (raw, json) Hash identifier: ncGNV/j1mVBQ42TYgPOejwqu/2/re6+2pZJ7PGPiiEo= Subject key identifier: 99:97:78:47:2F:1E:E5:23:1A:25:78:E9:E6:C9:F6:D5:B6:2C:19:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3E9691162F49736CA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 20172 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:e9:69:11:62:f4:97:36:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=4074d27d-2e9a-4f7d-b93d-3e4a2e076af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:d2:f6:e2:fe:4e:d1:77:9e:52:87:15:c6: 41:5b:79:c7:39:fd:b4:f3:d4:e9:5d:8e:7e:89:10: 0a:42:25:32:b8:b6:6a:f0:7d:e8:e9:99:c1:c9:07: aa:86:3f:bc:23:25:a1:06:17:62:e1:8f:99:a5:60: 39:60:aa:ca:94:cc:01:18:80:5c:22:ec:cd:e3:c3: a6:0a:78:6a:b5:4c:9a:3a:e1:62:29:43:7f:4e:80: c0:69:5e:19:62:de:6f:16:86:66:eb:47:ba:e5:b1: dd:20:12:f0:21:df:f8:d4:71:0e:13:88:98:d0:a0: e2:27:b6:38:f9:63:76:73:83:ac:60:2f:ec:e8:58: 3e:7a:dd:f3:2d:ce:39:80:a9:90:64:4f:b6:3a:6f: 6f:1f:e0:a4:a3:fe:0e:75:40:d7:d7:10:21:a3:82: 9e:2e:52:ff:2d:6c:09:b0:42:38:a4:e7:f0:46:4a: 1f:d2:a2:e0:14:65:a1:71:a7:15:0d:29:5a:05:a1: 02:0e:bb:2c:7d:fb:d3:ce:4f:5b:67:45:64:1d:9c: 41:9c:a9:94:46:cf:61:f3:13:4e:f6:e2:ce:ca:de: 62:56:4a:10:24:0b:9f:0a:73:f3:73:a0:09:75:6e: 65:8e:07:48:e7:37:5b:6a:0e:27:0f:ac:ee:e3:82: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:78:47:2F:1E:E5:23:1A:25:78:E9:E6:C9:F6:D5:B6:2C:19:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1324d469-061c-391a-ac60-5b462b8f6694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:23:fe:df:28:e0:2e:53:21:92:1a:41:c5:8a:e9:e0:c4:19: 2b:43:00:d1:3d:08:70:a8:c5:44:37:c5:0d:6e:57:56:dd:83: 11:5a:eb:27:33:d4:8c:dc:3f:88:9c:4d:2f:e4:00:44:31:0e: 11:85:6c:b5:81:c8:98:99:6a:63:3f:a9:3b:0d:53:58:58:b1: dc:06:df:62:a9:6f:98:94:47:5f:e8:90:1a:8e:3e:65:92:ab: ee:d9:f7:3d:ae:79:13:39:c4:e2:1c:69:41:bb:8f:1d:2f:6e: b5:f3:ce:fc:08:93:d8:a5:a5:ba:1b:7b:85:28:89:4b:3b:76: d6:8e:61:4e:e3:0a:8a:5e:10:44:1e:cd:e8:c3:f0:31:9e:45: 9e:bd:08:4d:14:c3:43:b3:ab:e6:64:d8:7a:68:b7:f6:3a:0b: 47:34:50:6d:32:4e:98:dd:34:5d:b7:65:75:d3:30:6f:b7:df: 5d:fd:1e:14:e9:f6:9a:fe:cd:55:14:26:7f:1a:74:d2:b9:13: d1:62:f0:9c:6a:dd:6e:4c:ab:6a:f8:6f:a9:85:85:8a:9b:cf: be:05:d5:14:25:75:f7:33:7c:de:d5:fa:a0:f8:cd:f4:bb:b6: 40:7f:d0:30:72:b6:c6:2e:85:0c:7c:d8:c5:06:82:56:95:bc: 82:87:ce:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOPpaRFi9Jc2ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NDA3NGQyN2QtMmU5YS00ZjdkLWI5M2QtM2U0YTJlMDc2YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIvS9uL+TtF3nlKHFcZBW3nHOf2089TpXY5+ iRAKQiUyuLZq8H3o6ZnByQeqhj+8IyWhBhdi4Y+ZpWA5YKrKlMwBGIBcIuzN48Om CnhqtUyaOuFiKUN/ToDAaV4ZYt5vFoZm60e65bHdIBLwId/41HEOE4iY0KDiJ7Y4 +WN2c4OsYC/s6Fg+et3zLc45gKmQZE+2Om9vH+Cko/4OdUDX1xAho4KeLlL/LWwJ sEI4pOfwRkof0qLgFGWhcacVDSlaBaECDrssffvTzk9bZ0VkHZxBnKmURs9h8xNO 9uLOyt5iVkoQJAufCnPzc6AJdW5ljgdI5zdbag4nD6zu44I6SwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJmXeEcvHuUjGiV46ebJ9tW2LBkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTMyNGQ0NjktMDYxYy0z OTFhLWFjNjAtNWI0NjJiOGY2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0I/7fKOAuUyGSGkHFiungxBkrQwDRPQhwqMVEN8UNbldW3YMRWusn M9SM3D+InE0v5ABEMQ4RhWy1gciYmWpjP6k7DVNYWLHcBt9iqW+YlEdf6JAajj5l kqvu2fc9rnkTOcTiHGlBu48dL2618878CJPYpaW6G3uFKIlLO3bWjmFO4wqKXhBE Hs3ow/AxnkWevQhNFMNDs6vmZNh6aLf2OgtHNFBtMk6Y3TRdt2V10zBvt99d/R4U 6faa/s1VFCZ/GnTSuRPRYvCcat1uTKtq+G+phYWKm8++BdUUJXX3M3ze1fqg+M30 u7ZAf9AwcrbGLoUMfNjFBoJWlbyCh87V -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:20 2025 by rpki-client