$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c56fdd-6dd1-3af7-b0ef-783dd407a4b7.roa File: 35c56fdd-6dd1-3af7-b0ef-783dd407a4b7.roa (raw, json) Hash identifier: kJYQgtmM+lz2aVBlAZIMD5okCOydlZmh8pOOMRopqKs= Subject key identifier: F0:22:04:61:51:8B:5F:E7:29:DC:17:4D:7E:49:EA:88:26:57:EE:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E51D4C5C23D7A1DC6530 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c56fdd-6dd1-3af7-b0ef-783dd407a4b7.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397212 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e5:1d:4c:5c:23:d7:a1:dc:65:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=c6872b9c-f24e-4463-87ca-6b2228ce2a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:d3:fc:be:1f:42:fa:f3:9b:f0:48:81:8f: 46:15:94:63:74:62:c4:8f:1f:ec:79:00:24:5d:9d: 41:ac:12:58:4a:dc:99:c9:7c:65:f5:3f:ca:bc:43: 2d:68:f3:83:db:03:df:a0:14:a0:89:b6:de:35:95: dd:f8:cc:9a:3b:47:e1:23:ca:a8:51:60:56:e9:41: 62:90:d8:7c:a5:16:f6:89:f4:ef:4f:1b:60:56:27: ce:cb:bf:a7:67:28:22:cb:1e:a5:9d:2f:0e:89:1f: c7:9c:9e:1a:5c:82:d6:2c:2b:e7:fc:72:2d:35:e3: ee:5a:61:a0:b1:55:ee:57:99:39:ba:1b:56:0b:0c: ee:84:2c:75:4f:7e:91:46:4f:e3:1f:6f:91:5b:de: 37:e9:99:2f:93:51:b6:ba:b7:6a:2f:6b:e1:58:1c: 66:28:51:76:f2:f3:5c:3f:1c:ab:9a:af:ba:f0:fc: 03:69:6a:e2:f1:b2:9e:ea:51:9d:63:7a:87:7a:03: 1a:03:89:7e:cc:e9:e8:77:78:b7:85:83:85:0a:d8: a4:70:59:9b:ef:c3:22:e6:e5:6e:82:f6:07:c0:fe: c7:88:5f:43:47:1b:58:c8:7d:31:ab:9a:0a:2e:b4: a7:d8:64:31:b2:01:18:37:86:da:68:a2:dc:df:83: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:22:04:61:51:8B:5F:E7:29:DC:17:4D:7E:49:EA:88:26:57:EE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c56fdd-6dd1-3af7-b0ef-783dd407a4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b8:8c:f7:1b:74:74:23:51:de:39:e6:8b:d9:0e:b7:b5:f7: cb:cb:cc:e1:d0:00:78:ce:65:14:a5:0d:ba:2c:cc:53:d0:4c: 73:33:f3:fc:b1:c1:af:2a:ca:53:15:2a:4c:93:21:da:e1:a8: c7:35:22:f1:f5:e7:c4:d4:c6:e4:82:bf:e2:32:9b:d2:93:03: 2b:45:6c:5f:5a:32:d2:75:8e:d2:1d:3a:4f:28:62:cf:f4:03: 8d:fc:30:d2:b0:2a:53:1a:87:59:81:be:8c:3a:de:5b:62:92: 3f:6b:74:c6:67:87:fe:59:2d:09:2b:bd:f9:c3:e8:ae:5d:6a: 89:12:32:96:ae:60:9c:85:64:58:c8:1b:f5:10:0c:eb:a5:f7: 34:d4:29:f6:0c:17:15:48:53:dd:74:3a:c1:17:c0:e9:4a:10: 25:1a:49:3c:0f:b3:53:ea:80:84:a9:16:8e:61:d5:21:d8:18: b9:d8:ca:7c:5a:ff:03:89:d6:ce:d0:e4:1b:cf:78:e8:10:e9: 4d:fb:9c:4b:e4:06:cd:2f:ee:d9:29:68:37:f2:bf:b2:ad:3d: 6a:26:c7:e5:3c:4e:c0:07:65:98:60:71:7a:88:6c:36:66:3d: 95:0f:b9:01:e3:b0:1e:47:5a:21:e0:59:f3:0f:08:ff:5d:b5: 40:e7:25:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOUdTFwj16HcZTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YzY4NzJiOWMtZjI0ZS00NDYzLTg3Y2EtNmIyMjI4Y2UyYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrnT/L4fQvrzm/BIgY9GFZRjdGLEjx/seQAk XZ1BrBJYStyZyXxl9T/KvEMtaPOD2wPfoBSgibbeNZXd+MyaO0fhI8qoUWBW6UFi kNh8pRb2ifTvTxtgVifOy7+nZygiyx6lnS8OiR/HnJ4aXILWLCvn/HItNePuWmGg sVXuV5k5uhtWCwzuhCx1T36RRk/jH2+RW9436Zkvk1G2urdqL2vhWBxmKFF28vNc Pxyrmq+68PwDaWri8bKe6lGdY3qHegMaA4l+zOnod3i3hYOFCtikcFmb78Mi5uVu gvYHwP7HiF9DRxtYyH0xq5oKLrSn2GQxsgEYN4baaKLc34NJ2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPAiBGFRi1/nKdwXTX5J6ogmV+6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzVjNTZmZGQtNmRkMS0z YWY3LWIwZWYtNzgzZGQ0MDdhNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEuIz3G3R0I1HeOeaL2Q63tffLy8zh0AB4zmUUpQ26LMxT0ExzM/P8 scGvKspTFSpMkyHa4ajHNSLx9efE1Mbkgr/iMpvSkwMrRWxfWjLSdY7SHTpPKGLP 9AON/DDSsCpTGodZgb6MOt5bYpI/a3TGZ4f+WS0JK735w+iuXWqJEjKWrmCchWRY yBv1EAzrpfc01Cn2DBcVSFPddDrBF8DpShAlGkk8D7NT6oCEqRaOYdUh2Bi52Mp8 Wv8DidbO0OQbz3joEOlN+5xL5AbNL+7ZKWg38r+yrT1qJsflPE7AB2WYYHF6iGw2 Zj2VD7kB47AeR1oh4FnzDwj/XbVA5yXP -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:21 2025 by rpki-client