$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa File: 1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa (raw, json) Hash identifier: 0FxR9pwe/jcmbe3ilY1fgT5rWa3g5e/tAuQVAF53L38= Subject key identifier: 25:A3:78:9B:E3:3C:A0:59:D6:C1:EF:EE:E5:AF:24:91:92:BF:A5:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E4095DC2295EC9ED68D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 22547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:09:5d:c2:29:5e:c9:ed:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=c90f2143-9e88-45d7-a10d-2103369b5d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fe:83:ad:38:09:b4:ec:a3:4b:6f:f6:e9:c5: d7:d7:d7:10:c3:ba:6e:ce:a7:87:21:bc:22:65:fe: 12:c5:c3:37:72:0b:af:98:75:8c:92:b0:88:b4:6b: eb:66:80:c2:d0:83:c2:10:e6:f4:0d:53:f3:4a:e2: 37:f0:74:a6:df:82:44:c8:55:42:36:8c:2b:f5:8b: a6:ea:01:63:ac:7f:56:ab:61:8a:2f:68:07:d0:56: d8:77:c6:7c:1b:34:df:93:29:5a:11:f7:56:cc:2c: 50:21:7e:8d:94:a6:d8:3e:c9:87:62:aa:53:9e:94: 24:ab:5a:fc:98:ba:44:db:67:62:df:55:86:50:58: be:6d:c6:bb:9f:82:62:39:81:77:15:28:0d:a0:2f: 36:75:72:3a:66:53:d4:35:48:f8:6c:c2:23:51:ae: d4:f6:26:dc:ac:8f:7e:6b:cd:cf:5b:63:e4:8f:ba: c6:78:ab:53:c8:57:ae:9e:00:cc:67:33:b1:83:af: ff:9a:6e:de:e5:12:0b:c4:e8:a3:aa:b5:67:b5:df: 86:18:ec:df:2d:7c:81:6d:e3:0e:d0:05:d0:24:c1: 7c:95:37:7a:95:05:ee:ff:3a:87:51:11:a5:2f:49: fe:7e:9d:83:15:f5:ca:3f:24:bc:a3:bb:38:dd:fa: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:78:9B:E3:3C:A0:59:D6:C1:EF:EE:E5:AF:24:91:92:BF:A5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:65:5c:e9:cb:9c:91:e9:d0:34:21:d2:de:30:4c:fb:ab:9b: 35:52:6b:9c:16:b0:d3:d7:c7:7d:88:4a:b6:fc:bf:44:f1:a2: 7f:f5:e9:af:0f:bc:8a:d7:c2:04:7e:cb:f0:3c:b6:32:21:8a: a0:03:13:c6:23:b1:a3:e8:c3:2a:03:c0:2b:4a:01:79:3d:89: 4a:ec:a9:b9:46:ae:03:3d:3f:55:49:a4:4b:f8:f3:aa:44:da: 29:41:21:5e:4b:dd:5d:76:3d:5a:ae:98:d7:7b:f6:4b:76:f6: 65:ba:aa:3f:13:dc:0d:a7:3c:00:d3:fa:9b:d7:e5:48:c1:9c: c5:11:68:5f:f1:11:a3:3a:f5:d4:55:87:14:51:61:a4:5c:88: 7b:b6:6a:b7:86:c1:ae:3b:f8:d2:f9:a4:8e:a3:67:9a:ad:21: 17:1c:56:7f:b9:9a:59:a3:fd:0c:21:05:84:f8:d4:7c:0c:3d: 1b:c0:b7:b8:56:d4:a1:7b:0b:a9:4b:a9:f9:60:eb:d6:08:16: d9:1f:ca:4b:5f:e2:11:95:58:96:3b:39:36:5b:fe:c1:57:b7: 73:52:a7:ae:81:94:2c:59:db:a8:f4:2d:aa:67:11:a4:d5:f7: 02:e5:bd:3f:24:49:f0:60:79:40:07:c7:e1:f0:7f:c3:a6:21: 11:af:f5:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOQJXcIpXsntaNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YzkwZjIxNDMtOWU4OC00NWQ3LWExMGQtMjEwMzM2OWI1ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf6DrTgJtOyjS2/26cXX19cQw7puzqeHIbwi Zf4SxcM3cguvmHWMkrCItGvrZoDC0IPCEOb0DVPzSuI38HSm34JEyFVCNowr9Yum 6gFjrH9Wq2GKL2gH0FbYd8Z8GzTfkylaEfdWzCxQIX6NlKbYPsmHYqpTnpQkq1r8 mLpE22di31WGUFi+bca7n4JiOYF3FSgNoC82dXI6ZlPUNUj4bMIjUa7U9ibcrI9+ a83PW2Pkj7rGeKtTyFeungDMZzOxg6//mm7e5RILxOijqrVntd+GGOzfLXyBbeMO 0AXQJMF8lTd6lQXu/zqHURGlL0n+fp2DFfXKPyS8o7s43fpLNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCWjeJvjPKBZ1sHv7uWvJJGSv6VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWRjM2ZlYjYtYmQxMS0z ZDJmLWFjZTUtYTY0YWNkZGQ1MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQZVzpy5yR6dA0IdLeMEz7q5s1UmucFrDT18d9iEq2/L9E8aJ/9emv D7yK18IEfsvwPLYyIYqgAxPGI7Gj6MMqA8ArSgF5PYlK7Km5Rq4DPT9VSaRL+POq RNopQSFeS91ddj1arpjXe/ZLdvZluqo/E9wNpzwA0/qb1+VIwZzFEWhf8RGjOvXU VYcUUWGkXIh7tmq3hsGuO/jS+aSOo2earSEXHFZ/uZpZo/0MIQWE+NR8DD0bwLe4 VtShewupS6n5YOvWCBbZH8pLX+IRlViWOzk2W/7BV7dzUqeugZQsWduo9C2qZxGk 1fcC5b0/JEnwYHlAB8fh8H/DpiERr/W0 -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:41 2025 by rpki-client