$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: ICf1tLevnczVg+hl2FziCe8wuMzRReWDd6A3UQWs5cY= Subject key identifier: CF:CA:A1:AF:D6:75:0C:14:AF:34:B8:D1:0F:4E:0B:0D:73:40:A2:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E49F890371BC8A7378C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:9f:89:03:71:bc:8a:73:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9bcb344e-166b-4558-be04-f68d6e46c2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:60:ae:74:53:d8:cd:54:72:98:68:1c:6b: 39:55:22:eb:39:1e:4c:87:f4:35:0d:c0:58:6f:ce: 5b:4b:8f:31:9d:4b:df:55:68:43:05:e0:71:24:93: d5:3e:21:8f:58:ee:d0:c7:51:05:69:8a:77:f4:fd: c1:32:7e:67:66:3f:a3:f7:18:be:94:44:f0:61:73: 38:14:3e:b2:ba:b0:25:95:47:62:dc:50:71:51:7e: 01:c0:1e:dd:4b:31:92:e9:a8:a9:6b:aa:ee:37:3e: 5f:be:80:7e:a7:41:50:48:38:6b:14:64:ce:f1:81: 2a:17:9a:9a:80:38:ea:6e:19:b4:f5:6a:b2:bd:9d: 91:ab:70:23:61:63:c5:00:83:de:03:4a:de:75:90: cf:2b:a8:05:ee:fd:88:6f:77:46:bb:cc:72:c8:66: 7c:54:5b:db:e7:29:33:51:51:cf:92:81:d9:8b:48: f3:a0:fb:ab:ce:ac:4e:a4:e2:8a:6d:b0:83:d2:f3: 2a:c9:dc:59:42:93:a3:c7:5e:f1:28:c8:36:bd:29: fa:52:74:d4:34:83:c4:79:29:a9:31:ef:ef:37:61: 2b:61:0e:4c:88:ac:d5:53:63:e7:c0:80:5e:36:0d: 10:96:db:fa:14:a6:90:1c:5c:e1:ee:50:67:6e:2e: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CA:A1:AF:D6:75:0C:14:AF:34:B8:D1:0F:4E:0B:0D:73:40:A2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c7:e5:11:55:fe:95:c4:2d:d1:51:a2:2b:84:eb:fe:bc:13: fe:0a:7a:4b:79:51:60:62:0d:cb:c6:03:fb:82:2d:93:bb:b6: 46:45:1e:45:8f:0c:2a:f7:da:be:e9:a1:55:77:e0:ce:45:ce: be:8f:b9:e3:75:c0:a3:28:da:b3:2f:43:6d:c3:fd:74:b3:95: 68:92:16:41:ea:d4:8c:95:d5:e3:b3:c7:42:ee:8e:4d:a2:b6: ed:19:3f:00:1e:ab:28:71:83:0f:6a:89:fc:e2:2e:10:16:f4: 66:ca:ca:c5:3c:23:72:30:c1:fc:aa:e9:a5:c3:96:27:9a:da: 37:8d:6d:1b:18:71:86:3a:33:d9:28:97:c6:fc:0d:4c:e6:72: c2:b8:06:f3:d1:9d:69:e3:d7:19:62:b2:1e:e0:3c:a7:60:5b: e3:f4:5e:60:1d:68:fb:ab:4f:34:99:23:39:07:7f:92:7c:4c: 96:32:76:28:e7:7c:51:96:58:f7:a0:01:fc:83:51:49:67:5d: 67:3e:ef:1c:48:eb:c3:06:bf:98:bf:0e:cf:42:8c:06:3a:8c: e5:6d:e7:4d:64:be:98:ad:e1:c9:64:29:46:05:fd:1c:74:db: e2:7c:73:a4:39:33:b6:88:98:be:b1:36:ec:ce:67:97:22:85: f7:20:b8:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOSfiQNxvIpzeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWJjYjM0NGUtMTY2Yi00NTU4LWJlMDQtZjY4ZDZlNDZjMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMJgrnRT2M1UcphoHGs5VSLrOR5Mh/Q1DcBY b85bS48xnUvfVWhDBeBxJJPVPiGPWO7Qx1EFaYp39P3BMn5nZj+j9xi+lETwYXM4 FD6yurAllUdi3FBxUX4BwB7dSzGS6aipa6ruNz5fvoB+p0FQSDhrFGTO8YEqF5qa gDjqbhm09WqyvZ2Rq3AjYWPFAIPeA0redZDPK6gF7v2Ib3dGu8xyyGZ8VFvb5ykz UVHPkoHZi0jzoPurzqxOpOKKbbCD0vMqydxZQpOjx17xKMg2vSn6UnTUNIPEeSmp Me/vN2ErYQ5MiKzVU2PnwIBeNg0Qltv6FKaQHFzh7lBnbi5XDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM/Koa/WdQwUrzS40Q9OCw1zQKKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkx+URVf6VxC3RUaIrhOv+vBP+CnpLeVFgYg3LxgP7gi2Tu7ZGRR5F jwwq99q+6aFVd+DORc6+j7njdcCjKNqzL0Ntw/10s5VokhZB6tSMldXjs8dC7o5N orbtGT8AHqsocYMPaon84i4QFvRmysrFPCNyMMH8qumlw5Ynmto3jW0bGHGGOjPZ KJfG/A1M5nLCuAbz0Z1p49cZYrIe4DynYFvj9F5gHWj7q080mSM5B3+SfEyWMnYo 53xRllj3oAH8g1FJZ11nPu8cSOvDBr+Yvw7PQowGOozlbedNZL6YreHJZClGBf0c dNvifHOkOTO2iJi+sTbszmeXIoX3ILir -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:03 2025 by rpki-client