$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa File: 36ed91fb-062d-351c-b4c9-180bcb664af4.roa (raw, json) Hash identifier: 6Sm8/7TClm9WNyo/FO1hexCeKv9iBL8xUInZQ66QjsY= Subject key identifier: 0E:DB:53:B6:9E:E9:3A:EB:D9:A2:AB:28:A6:A7:A6:D0:96:18:B3:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E1F6B26FBE1A1BC33580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36629 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:f6:b2:6f:be:1a:1b:c3:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=dd443a71-a4c6-4ec0-b2f9-d01fbdc8937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:82:ff:e3:ea:7b:0f:d9:bc:58:05:a1:fe:a1: 85:ea:da:9c:32:50:bd:8c:77:53:7c:e9:ad:f9:1b: 95:db:5d:87:2a:4b:0d:70:27:8c:f6:5a:d2:55:24: 07:1d:21:0f:32:2b:bd:b6:d3:80:72:06:c8:ea:3a: 98:a0:5e:85:de:a2:fb:37:9f:38:ef:40:99:fc:88: 29:e1:c1:15:10:aa:1f:30:29:25:97:58:01:8a:eb: 79:5d:f0:65:bb:f1:02:39:87:c2:8e:97:57:fe:72: 47:70:c5:7d:95:89:d4:95:f1:7c:df:2c:79:3b:79: fb:28:00:c0:63:b4:a9:5c:ff:1f:74:9e:80:93:1c: b4:7a:b7:3a:4d:1c:76:32:92:02:37:78:f7:7f:d0: 18:22:2e:3d:7f:da:65:58:19:22:7b:b2:09:85:0a: ec:c7:92:9e:48:4a:e6:51:fa:9c:72:7a:eb:95:19: e5:55:e1:db:20:d4:3f:cc:90:02:f8:74:ae:41:f3: 0a:9f:4a:ba:37:29:ab:bb:2f:9b:6c:d6:7b:30:c9: 7c:cd:d2:f4:5a:03:73:ce:c1:98:62:b3:de:88:c3: ce:d4:fd:dc:0a:0b:0b:f7:0b:00:b7:47:e1:79:26: 27:90:94:44:d2:66:aa:46:fa:48:c2:f8:92:c3:03: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DB:53:B6:9E:E9:3A:EB:D9:A2:AB:28:A6:A7:A6:D0:96:18:B3:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b5:94:f0:7c:9f:6a:01:19:0d:e6:e5:96:51:f2:02:fa:82: 60:0a:cb:99:b4:b6:ed:7f:97:7c:f1:70:7c:a0:ad:4d:f3:6d: 92:a5:f2:d5:aa:72:01:58:c0:6b:f2:7f:a3:ac:eb:2e:11:cc: ae:dd:bc:e4:2f:69:aa:54:6e:c7:86:89:dd:3f:76:23:bf:7f: c9:fd:e8:1d:4c:7d:b6:43:33:1d:de:a9:d4:cf:af:bb:6c:f7: 75:9a:4d:f3:71:bb:83:36:c5:28:d0:f4:7c:23:c5:a2:54:91: bb:f6:68:70:33:f2:ba:5d:fe:70:60:5c:43:65:87:29:67:86: 44:a5:62:04:e5:25:65:2a:09:e9:20:be:94:69:78:78:a0:4b: a1:ea:df:29:a3:36:8a:b8:d5:ab:05:fe:6c:f2:cd:a2:34:6a: 3b:83:6d:c5:5e:e3:2f:34:6a:85:a6:0c:24:95:c6:ba:32:74: c8:01:24:6b:ba:78:6e:01:68:91:42:0a:4f:dc:ba:c4:3f:19: 0c:fd:bb:49:e9:12:23:6a:5b:4f:d1:5e:8a:5a:f2:1c:24:92: 00:e8:4b:e7:b8:5c:7f:f2:18:9f:05:ff:1a:0e:6b:a7:58:9d: d4:8f:bd:a7:87:dc:09:9b:6c:45:37:94:83:28:3a:35:b4:0f: a9:e8:e5:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOH2sm++GhvDNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZGQ0NDNhNzEtYTRjNi00ZWMwLWIyZjktZDAxZmJkYzg5MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IL/4+p7D9m8WAWh/qGF6tqcMlC9jHdTfOmt +RuV212HKksNcCeM9lrSVSQHHSEPMiu9ttOAcgbI6jqYoF6F3qL7N58470CZ/Igp 4cEVEKofMCkll1gBiut5XfBlu/ECOYfCjpdX/nJHcMV9lYnUlfF83yx5O3n7KADA Y7SpXP8fdJ6Akxy0erc6TRx2MpICN3j3f9AYIi49f9plWBkie7IJhQrsx5KeSErm UfqccnrrlRnlVeHbINQ/zJAC+HSuQfMKn0q6Nymruy+bbNZ7MMl8zdL0WgNzzsGY YrPeiMPO1P3cCgsL9wsAt0fheSYnkJRE0maqRvpIwviSwwNshQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA7bU7ae6Trr2aKrKKanptCWGLO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzZlZDkxZmItMDYyZC0z NTFjLWI0YzktMTgwYmNiNjY0YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCtZTwfJ9qARkN5uWWUfIC+oJgCsuZtLbtf5d88XB8oK1N822SpfLV qnIBWMBr8n+jrOsuEcyu3bzkL2mqVG7HhondP3Yjv3/J/egdTH22QzMd3qnUz6+7 bPd1mk3zcbuDNsUo0PR8I8WiVJG79mhwM/K6Xf5wYFxDZYcpZ4ZEpWIE5SVlKgnp IL6UaXh4oEuh6t8pozaKuNWrBf5s8s2iNGo7g23FXuMvNGqFpgwklca6MnTIASRr unhuAWiRQgpP3LrEPxkM/btJ6RIjaltP0V6KWvIcJJIA6EvnuFx/8hifBf8aDmun WJ3Uj72nh9wJm2xFN5SDKDo1tA+p6OVb -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:34 2025 by rpki-client