$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa File: 36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa (raw, json) Hash identifier: s5IAbD0fY2K/F7iP/Wh7NwVk24WThrnpD/iTc8X4eyc= Subject key identifier: A2:0E:B9:0F:AC:FF:C2:FC:05:5D:9B:99:7B:EF:F6:D4:8C:7A:8D:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3862C9E01789782CACC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397199 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:86:2c:9e:01:78:97:82:ca:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=8833ab5c-e225-4007-a364-cd81fcf90ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:c2:ac:9c:0a:44:70:a2:c4:d8:fa:82:ae: ae:bb:0b:6c:1b:26:a7:10:e8:6b:cc:2a:fe:88:f7: 28:5d:48:e3:83:a2:24:f2:43:ef:65:2c:44:dc:39: f9:6b:9e:db:e5:2c:57:d9:20:91:73:cb:2f:2c:a0: 3d:51:8f:4f:6a:2c:cd:be:0a:02:5d:bf:38:b6:b9: 42:73:7d:da:08:d5:37:55:62:6d:b2:81:57:b3:d7: 35:b7:db:79:a5:59:c2:b3:3f:3e:d7:68:a0:18:54: 27:ef:80:ff:95:73:c7:42:fd:9f:c4:c5:55:4e:18: 2e:1f:e1:07:c6:3f:c6:ec:7c:ae:92:b7:f6:61:dd: 8c:79:ac:eb:40:88:01:c6:45:8e:a3:88:9c:ed:ee: 34:63:87:a2:d3:0c:5d:a5:e5:d9:41:0a:18:a0:01: b0:27:12:09:7f:57:ba:67:a7:05:bd:42:5d:5d:85: 6f:73:f6:7f:ce:05:6e:72:68:55:4e:8f:89:11:85: a2:c5:ef:19:2b:9a:3b:34:33:b9:7c:f9:d5:b2:0b: 53:b7:30:d5:88:35:18:04:fd:4b:7b:ee:1b:db:da: 24:49:6e:25:1f:eb:32:67:bb:a3:28:9e:ea:cc:d3: 73:56:26:4b:f5:4d:9e:c1:ce:e1:15:e0:84:08:3d: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0E:B9:0F:AC:FF:C2:FC:05:5D:9B:99:7B:EF:F6:D4:8C:7A:8D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4e:5a:b2:34:69:80:86:ae:4d:0c:94:3d:b4:c4:00:8a:ba: 8b:5f:cd:90:9b:be:f3:b9:7e:f5:a7:08:18:ab:23:6a:47:85: 8a:53:bf:4e:63:9f:c5:e3:b0:46:92:aa:3b:fe:31:02:4c:b9: b7:ae:76:fc:69:a1:5a:7a:6b:a5:70:bb:fa:13:4f:36:4c:f5: f3:23:b4:77:1b:b7:56:fe:31:fc:86:71:8c:8d:8c:18:be:4f: ed:da:42:2e:50:73:a3:35:ce:80:83:e9:af:7f:c1:96:1c:2c: d5:11:40:f2:e7:a0:39:1f:5f:5b:84:6b:8c:e5:e4:20:69:64: 15:46:17:bf:71:af:32:a1:dc:24:76:c6:73:bf:ab:03:17:a7: 37:66:06:b7:12:5a:75:0c:44:4c:5a:f8:1a:de:a5:c0:e2:68: 9c:fb:c2:bb:2a:f2:52:a7:c6:27:09:12:b6:46:71:f0:4c:cb: 4f:f7:a0:e7:8c:05:82:82:ab:82:87:19:c9:9d:3e:bc:e3:b5: b1:6b:67:9a:a8:3b:f5:6f:8c:3f:f4:3e:f6:8e:a9:d3:e4:af: 6b:51:d1:88:44:62:d7:eb:64:8a:6c:1c:26:46:0a:4c:4c:41: 1e:cc:62:8a:f4:96:68:ed:ec:07:82:54:c3:17:2c:2a:df:b3: 14:78:23:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOOGLJ4BeJeCyswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ODgzM2FiNWMtZTIyNS00MDA3LWEzNjQtY2Q4MWZjZjkwZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibbCrJwKRHCixNj6gq6uuwtsGyanEOhrzCr+ iPcoXUjjg6Ik8kPvZSxE3Dn5a57b5SxX2SCRc8svLKA9UY9PaizNvgoCXb84trlC c33aCNU3VWJtsoFXs9c1t9t5pVnCsz8+12igGFQn74D/lXPHQv2fxMVVThguH+EH xj/G7Hyukrf2Yd2MeazrQIgBxkWOo4ic7e40Y4ei0wxdpeXZQQoYoAGwJxIJf1e6 Z6cFvUJdXYVvc/Z/zgVucmhVTo+JEYWixe8ZK5o7NDO5fPnVsgtTtzDViDUYBP1L e+4b29okSW4lH+syZ7ujKJ7qzNNzViZL9U2ewc7hFeCECD001wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKIOuQ+s/8L8BV2bmXvv9tSMeo1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY4ODdiOWQtZjFhMC0z MWFkLWE1ZmEtMTUxYzg4YjY0ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPTlqyNGmAhq5NDJQ9tMQAirqLX82Qm77zuX71pwgYqyNqR4WKU79O Y5/F47BGkqo7/jECTLm3rnb8aaFaemulcLv6E082TPXzI7R3G7dW/jH8hnGMjYwY vk/t2kIuUHOjNc6Ag+mvf8GWHCzVEUDy56A5H19bhGuM5eQgaWQVRhe/ca8yodwk dsZzv6sDF6c3Zga3Elp1DERMWvga3qXA4mic+8K7KvJSp8YnCRK2RnHwTMtP96Dn jAWCgquChxnJnT6847Wxa2eaqDv1b4w/9D72jqnT5K9rUdGIRGLX62SKbBwmRgpM TEEezGKK9JZo7ewHglTDFywq37MUeCP9 -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:24 2025 by rpki-client