$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa File: 3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa (raw, json) Hash identifier: MFmLui1+NJC2z836ZI56y+sri+fsSlaVBlBf97+mUjc= Subject key identifier: 97:A3:D3:61:92:95:AC:6A:D4:F2:DF:87:33:3A:5F:70:DE:79:90:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E62802C31D3AC29726B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36620 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e6:28:02:c3:1d:3a:c2:97:26:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=63c008f7-e3ed-48d9-a9f1-548ee4696430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:72:9a:6d:b3:d4:35:3d:01:26:cc:aa:53: cd:04:b9:14:57:5a:45:82:10:40:12:55:33:27:ba: 53:e6:2b:21:e7:0b:2c:a7:ba:73:a3:6c:0c:0c:2c: b7:76:d9:92:2a:3b:3d:eb:dd:2e:f5:41:e8:f7:35: 84:e9:2d:b0:23:66:61:52:12:05:b3:a6:b6:c9:24: c7:22:e1:ec:6d:47:18:e9:e5:2e:b7:23:43:51:6a: 9d:a1:b3:01:39:07:60:1f:77:35:ba:c9:97:05:d3: d7:1a:15:2a:ad:38:92:eb:aa:95:d5:d5:9d:82:f3: 12:66:4b:79:6a:84:1f:5a:e1:27:f7:25:4e:fe:de: 56:4c:b9:99:a0:50:60:16:65:a9:d3:86:11:7e:6b: 7d:4c:ca:e6:ca:fb:a4:47:1d:a3:b1:f4:6b:1a:ca: 03:e7:66:77:40:4e:ca:8d:a6:e8:8f:6f:26:e1:f8: a0:bf:87:25:9f:d7:df:bc:94:74:cb:0d:33:18:96: b1:8b:8b:75:40:5c:a7:2b:fc:e1:87:2f:5e:14:56: b5:ff:e3:d1:6e:83:b6:bb:51:15:70:6f:60:d7:83: d3:b5:fa:41:6d:b4:ac:6a:ff:75:8f:9a:72:d3:94: 97:fa:90:9b:be:c3:b5:32:78:e7:e8:c0:e9:cd:47: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A3:D3:61:92:95:AC:6A:D4:F2:DF:87:33:3A:5F:70:DE:79:90:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:29:21:a5:f2:de:7b:bc:bf:ff:49:7d:51:01:0c:be:b8:99: da:9c:8c:92:fe:74:60:ed:cc:33:64:73:44:63:b6:9a:ea:24: 3f:03:c1:e3:aa:90:e0:05:13:c5:a2:6e:5c:67:e0:e3:9a:3a: 18:34:34:8d:5d:c6:1e:9c:3c:57:1d:d9:49:5d:eb:0e:14:a9: 2a:aa:5f:6e:87:67:64:b2:6a:16:55:7b:77:ec:7d:98:b4:27: a7:a6:0a:75:73:21:04:2b:29:ac:6b:bf:a4:fc:a5:3e:93:c4: 1f:cc:b6:3a:db:fa:11:95:b9:d7:af:a5:57:7d:45:f2:fc:39: 0f:ca:0c:1b:a1:f8:63:b2:cb:28:78:83:48:63:07:b3:0b:4b: 10:0e:7c:c1:db:59:03:1e:eb:f0:88:25:3d:31:88:b5:ca:60: 93:0b:bd:3a:19:86:ea:31:96:00:5f:a9:83:df:8b:19:3f:4c: 6f:fa:7a:f3:31:df:dc:b3:d0:da:52:87:1e:9c:ae:d5:6a:46: 74:49:2b:38:2b:7a:33:5f:66:9f:c1:ba:88:27:d3:d0:b0:ae: ca:78:5b:ca:94:ff:f1:20:91:7a:28:f5:c1:be:b3:a5:50:d5: 20:55:21:97:0f:55:4a:9c:21:24:cc:c5:d9:f2:78:58:0d:37: 0d:1f:23:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOYoAsMdOsKXJrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NjNjMDA4ZjctZTNlZC00OGQ5LWE5ZjEtNTQ4ZWU0Njk2NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxRymm2z1DU9ASbMqlPNBLkUV1pFghBAElUz J7pT5ish5wssp7pzo2wMDCy3dtmSKjs9690u9UHo9zWE6S2wI2ZhUhIFs6a2ySTH IuHsbUcY6eUutyNDUWqdobMBOQdgH3c1usmXBdPXGhUqrTiS66qV1dWdgvMSZkt5 aoQfWuEn9yVO/t5WTLmZoFBgFmWp04YRfmt9TMrmyvukRx2jsfRrGsoD52Z3QE7K jaboj28m4figv4cln9ffvJR0yw0zGJaxi4t1QFynK/zhhy9eFFa1/+PRboO2u1EV cG9g14PTtfpBbbSsav91j5py05SX+pCbvsO1Mnjn6MDpzUfTiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJej02GSlaxq1PLfhzM6X3DeeZCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EyYjhkYWYtZjQ5My0z ZTY4LTgyZTMtNDNlMDc1YjRjM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnKSGl8t57vL//SX1RAQy+uJnanIyS/nRg7cwzZHNEY7aa6iQ/A8Hj qpDgBRPFom5cZ+DjmjoYNDSNXcYenDxXHdlJXesOFKkqql9uh2dksmoWVXt37H2Y tCenpgp1cyEEKymsa7+k/KU+k8QfzLY62/oRlbnXr6VXfUXy/DkPygwbofhjssso eINIYwezC0sQDnzB21kDHuvwiCU9MYi1ymCTC706GYbqMZYAX6mD34sZP0xv+nrz Md/cs9DaUocenK7VakZ0SSs4K3ozX2afwbqIJ9PQsK7KeFvKlP/xIJF6KPXBvrOl UNUgVSGXD1VKnCEkzMXZ8nhYDTcNHyM+ -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:37 2025 by rpki-client