$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa File: 14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa (raw, json) Hash identifier: HJMtVLZQdNBNZqVJ1iMwN8Zfzm2F9whqxYFg+c6pqLo= Subject key identifier: 1C:45:8F:EB:B1:A1:BF:8D:63:15:98:A1:C7:20:7A:73:D7:6A:E1:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3204E01401E2B423600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 27544 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:20:4e:01:40:1e:2b:42:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1900ff5b-3a5f-45b8-9f34-644d8984f177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:ce:7a:48:21:1c:ee:f5:c1:1b:f0:3f:c6: bd:69:88:c4:63:1f:7c:44:c8:91:e6:ca:9a:d1:57: 7c:2a:9f:74:e8:c5:48:30:1a:a1:13:3e:a2:68:3e: 61:c2:ce:36:0f:2c:ff:14:69:ad:69:17:c9:26:78: a0:30:8f:b7:48:62:71:38:46:19:99:8a:67:02:d2: 13:2b:55:79:65:26:ed:03:90:24:0d:76:f0:3c:7e: 58:22:a7:02:ad:26:7b:e5:a2:ee:bf:e3:c7:04:01: 42:1f:3a:32:46:d1:2c:ec:bf:f3:23:90:ff:a6:4f: 7d:54:2c:6c:97:97:4d:63:b5:b4:48:6f:75:d0:48: b7:bc:9a:31:a9:f2:de:8d:f3:f5:da:e8:1b:c8:61: 6e:9a:da:ff:ae:99:d7:cb:0d:13:d6:9e:1c:cc:b3: 23:19:d1:4a:35:a9:77:38:a6:24:11:fc:39:fd:de: 18:87:c6:78:78:af:b0:3f:8c:97:e0:d4:e8:a8:e9: 55:23:7c:e5:87:7d:cc:a3:3d:a5:c2:04:87:f7:5f: dd:73:cb:69:e3:68:a7:36:e6:ac:dc:50:02:80:0f: 45:5a:06:6b:8e:69:28:4b:d6:51:2c:1d:dd:91:dd: 9f:5f:84:42:a5:bc:2d:a0:83:d9:ae:15:4b:3a:a6: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:8F:EB:B1:A1:BF:8D:63:15:98:A1:C7:20:7A:73:D7:6A:E1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:24:06:d1:12:9f:0a:cb:81:ed:69:62:8f:7d:bb:5d:76:58: 80:cd:5f:36:68:aa:35:a0:6e:26:3d:44:2c:8f:6b:33:49:e0: 22:71:74:bd:43:e7:e2:83:fa:4c:e5:54:7b:15:da:11:1b:e7: 99:54:c7:50:6b:6e:49:a7:fe:b8:16:7a:17:32:60:46:5e:fa: 39:1d:ad:05:13:5e:78:40:24:4b:26:28:33:ad:02:0b:a0:8e: b6:05:a0:87:33:36:f4:33:34:98:5e:46:ce:70:52:c9:d8:60: 4a:57:52:dc:59:53:af:00:95:62:80:d9:db:58:e5:7d:34:d2: 02:1e:80:6d:ac:2c:da:71:2a:53:67:8d:64:82:53:4a:a2:2c: a6:0d:ae:e5:49:1d:6c:b7:39:63:0a:c3:5b:1b:ea:23:75:41: ed:80:d6:d9:7a:03:c5:23:4e:02:ae:db:af:8a:d9:85:fa:54: 82:75:1a:92:90:34:71:86:9e:fb:76:73:cf:ac:2e:cc:0a:2e: ff:a0:08:2e:a4:b4:91:3d:6c:76:f3:da:fd:7c:40:77:9e:f1: b7:4d:78:6a:19:73:5f:49:0a:2a:1e:fe:1f:92:fd:c1:cc:dc: a5:6a:13:8a:42:d8:c8:ee:bc:de:22:7c:9d:c9:23:18:d5:57: dd:ce:5a:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOMgTgFAHitCNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTkwMGZmNWItM2E1Zi00NWI4LTlmMzQtNjQ0ZDg5ODRmMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgbOekghHO71wRvwP8a9aYjEYx98RMiR5sqa 0Vd8Kp906MVIMBqhEz6iaD5hws42Dyz/FGmtaRfJJnigMI+3SGJxOEYZmYpnAtIT K1V5ZSbtA5AkDXbwPH5YIqcCrSZ75aLuv+PHBAFCHzoyRtEs7L/zI5D/pk99VCxs l5dNY7W0SG910Ei3vJoxqfLejfP12ugbyGFumtr/rpnXyw0T1p4czLMjGdFKNal3 OKYkEfw5/d4Yh8Z4eK+wP4yX4NToqOlVI3zlh33Moz2lwgSH91/dc8tp42inNuas 3FACgA9FWgZrjmkoS9ZRLB3dkd2fX4RCpbwtoIPZrhVLOqailQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBxFj+uxob+NYxWYoccgenPXauEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTRhNmU1MGEtMTI3NC0z OWExLWIzNTktZThjOGYyMGJmYzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPJAbREp8Ky4HtaWKPfbtddliAzV82aKo1oG4mPUQsj2szSeAicXS9 Q+fig/pM5VR7FdoRG+eZVMdQa25Jp/64FnoXMmBGXvo5Ha0FE154QCRLJigzrQIL oI62BaCHMzb0MzSYXkbOcFLJ2GBKV1LcWVOvAJVigNnbWOV9NNICHoBtrCzacSpT Z41kglNKoiymDa7lSR1stzljCsNbG+ojdUHtgNbZegPFI04CrtuvitmF+lSCdRqS kDRxhp77dnPPrC7MCi7/oAgupLSRPWx289r9fEB3nvG3TXhqGXNfSQoqHv4fkv3B zNylahOKQtjI7rzeInydySMY1Vfdzloh -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:38 2025 by rpki-client