$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa File: 1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa (raw, json) Hash identifier: zBM49GOdDL6wgGM2I9+abxx2TbO0wINqzlVJwXR97cM= Subject key identifier: 87:66:9A:DA:D7:54:C6:D9:2E:2A:E3:D8:A3:88:4E:C3:D0:96:95:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E585EDAE39560B1B2CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396613 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e5:85:ed:ae:39:56:0b:1b:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=33aa2e35-46e8-4a69-b786-c7608b6a30b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:c9:89:3f:0a:34:19:77:91:45:a0:ab:9f: f6:d3:48:b3:aa:11:bf:d9:47:63:03:b0:31:47:20: cc:00:27:48:d5:6d:5f:5a:d0:aa:2b:35:61:d4:dc: af:8c:9b:d9:fd:5b:9b:30:65:28:fc:56:d7:39:90: f2:16:ad:3d:44:8a:cd:26:73:fa:83:41:b3:ea:15: 10:6b:a6:9b:dd:59:f6:9b:ad:b9:80:fb:db:d2:73: 7d:22:50:75:f3:ff:e9:1d:ab:f5:ba:b2:ca:04:fc: 97:53:47:f3:dc:c5:5c:0c:c3:d6:9c:e9:19:3e:c2: d6:18:7c:ab:55:b2:b4:73:a7:56:83:8a:58:21:70: 7b:a6:28:d9:9b:32:94:cb:fe:8b:0e:ee:c0:11:22: eb:ab:c6:77:8c:ff:49:7f:c6:7c:73:b5:fc:f0:3b: 31:62:06:e6:76:6b:8f:c8:e3:9a:3f:66:fc:d9:97: db:54:9f:da:d8:63:0f:c8:bc:40:26:9e:5e:de:78: 1d:3b:01:53:d0:9e:40:0e:32:14:ae:09:0e:dd:d2: 2c:93:2c:ac:0e:e2:82:a9:e0:46:cb:c6:34:cd:97: 39:01:35:c8:e5:09:5f:49:62:5b:00:19:ee:86:3c: 71:39:23:42:41:17:fd:ea:cd:47:43:77:fa:f7:7c: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:66:9A:DA:D7:54:C6:D9:2E:2A:E3:D8:A3:88:4E:C3:D0:96:95:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8c:01:b1:f6:41:1b:2a:f2:27:69:04:23:08:14:79:e2:69: 5f:65:46:ec:5d:b2:f6:a1:a1:bf:9c:71:2f:f2:04:49:98:b2: 09:e7:d9:41:f6:03:9e:a7:9b:68:b5:53:98:04:1c:28:10:30: b4:03:fc:d3:46:6a:dc:2d:2f:c3:36:7a:ec:03:45:87:11:5d: 94:f0:0b:ca:95:0b:5b:41:31:7e:b0:f7:c9:f9:59:58:bc:cf: 94:76:78:dc:89:57:82:83:ec:4c:58:52:7c:44:9f:51:38:63: 2c:48:e9:da:8f:cb:cb:95:f9:9a:d7:2b:9d:0d:22:cf:32:52: 7c:c5:fc:bd:77:1c:25:b5:f3:76:e9:c7:78:53:01:7e:76:a6: 42:ec:66:36:9f:8e:84:df:47:a5:35:fe:1f:6d:b5:f1:34:04: 67:09:cd:9b:4c:e7:bf:eb:f0:c5:6d:5d:e9:36:2d:a8:04:91: 9e:e1:f4:a9:7f:92:39:8b:30:b1:10:00:a6:03:94:41:d7:08: 15:87:a6:7d:e4:a5:dd:04:80:66:03:e8:4b:93:54:bb:fc:95: f0:e6:b0:75:7d:a0:55:c5:af:4a:b7:61:b5:1f:53:30:6e:a2: d6:97:5d:c5:66:80:3e:e2:c2:02:35:17:2e:d0:2b:82:0b:06: 39:61:08:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOWF7a45VgsbLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MzNhYTJlMzUtNDZlOC00YTY5LWI3ODYtYzc2MDhiNmEzMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJHJiT8KNBl3kUWgq5/200izqhG/2UdjA7Ax RyDMACdI1W1fWtCqKzVh1NyvjJvZ/VubMGUo/FbXOZDyFq09RIrNJnP6g0Gz6hUQ a6ab3Vn2m625gPvb0nN9IlB18//pHav1urLKBPyXU0fz3MVcDMPWnOkZPsLWGHyr VbK0c6dWg4pYIXB7pijZmzKUy/6LDu7AESLrq8Z3jP9Jf8Z8c7X88DsxYgbmdmuP yOOaP2b82ZfbVJ/a2GMPyLxAJp5e3ngdOwFT0J5ADjIUrgkO3dIskyysDuKCqeBG y8Y0zZc5ATXI5QlfSWJbABnuhjxxOSNCQRf96s1HQ3f693wZAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIdmmtrXVMbZLirj2KOITsPQlpWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiNTA4MjMtMjQzYy0z YmVjLWFjOTAtMmYwZDYwMzhjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApjAGx9kEbKvInaQQjCBR54mlfZUbsXbL2oaG/nHEv8gRJmLIJ59lB 9gOep5totVOYBBwoEDC0A/zTRmrcLS/DNnrsA0WHEV2U8AvKlQtbQTF+sPfJ+VlY vM+UdnjciVeCg+xMWFJ8RJ9ROGMsSOnaj8vLlfma1yudDSLPMlJ8xfy9dxwltfN2 6cd4UwF+dqZC7GY2n46E30elNf4fbbXxNARnCc2bTOe/6/DFbV3pNi2oBJGe4fSp f5I5izCxEACmA5RB1wgVh6Z95KXdBIBmA+hLk1S7/JXw5rB1faBVxa9Kt2G1H1Mw bqLWl13FZoA+4sICNRcu0CuCCwY5YQgA -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:23 2025 by rpki-client