$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: SONPgElmxlh9gVRR6o62iTlnvKInQeJ5ltPONhmsn+A= Subject key identifier: 2B:EE:30:24:B0:49:FF:58:1B:FD:2D:10:86:7E:CB:CF:00:E9:F1:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E5D7437BCD2A800897C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e5:d7:43:7b:cd:2a:80:08:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=0743e7e6-6450-4a3a-814b-3349432bc7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:ee:bd:a0:b6:73:ad:a2:64:c2:a4:ca:e9: 07:b4:c8:3e:5b:0a:27:4b:d6:b0:b0:4a:fe:5d:6e: 67:79:8e:3a:3c:47:db:c0:e6:7a:0d:cd:53:39:f6: 80:9a:3c:15:8c:8b:20:06:ec:cb:8a:1e:c8:41:f2: 30:72:e9:e6:0d:ac:e6:92:d7:fa:f9:69:05:07:92: 70:a6:36:8b:6f:27:f0:4b:d4:9a:e8:9b:62:2e:d7: 0e:dc:92:4a:0c:f1:b7:8a:93:b4:46:ab:e1:c5:d1: d4:b4:1f:a4:32:1d:c7:b0:43:65:43:58:21:de:dd: b3:a0:da:fb:dd:ca:d1:05:a7:98:65:f2:65:eb:bb: 0c:9d:40:31:cf:97:10:d6:f4:85:9a:84:4d:80:20: b6:02:5e:36:ab:28:71:9b:4b:ec:9c:c4:66:f4:d9: 26:09:22:c4:15:cb:0d:07:20:2a:9d:d8:e2:d9:ba: db:ed:c5:96:93:55:bb:f1:7d:91:45:3c:20:ed:e0: 11:91:18:6d:49:9b:3d:a1:84:4b:de:b9:54:49:ac: 95:b8:ec:46:b0:b5:fb:28:ca:d5:a5:e8:22:c4:6f: 64:53:f8:74:10:63:1a:fc:a2:c9:1a:98:c2:53:c4: 10:64:db:7b:a3:bb:12:4c:9c:8f:e4:ff:4e:f6:2b: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EE:30:24:B0:49:FF:58:1B:FD:2D:10:86:7E:CB:CF:00:E9:F1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9d:68:e7:53:dd:f7:92:cb:dd:eb:d7:94:a6:4d:5e:6a:89: 6d:41:cf:d7:4e:af:7c:98:9c:18:3c:a5:7c:6c:d6:6d:d0:9b: c5:e7:a0:e4:2a:99:d8:a8:4d:54:64:dc:9d:fb:39:4c:e8:c1: e1:61:ad:da:ea:c5:38:85:b3:f2:36:d2:7d:b7:00:60:34:cc: a4:e0:f3:c8:40:e9:9d:60:79:eb:a3:97:8d:80:27:cc:af:02: 69:41:62:ba:52:26:ac:86:e6:1e:27:29:0b:26:2d:4b:ea:f5: 4e:44:24:93:44:15:4e:b8:a7:e6:51:22:80:74:91:9c:f1:23: fe:c0:e3:55:47:2f:71:41:0a:a9:76:65:3d:fe:08:f9:2a:c5: 59:e4:1a:b2:e9:7f:4a:06:b7:fe:d2:e7:50:92:2a:5f:8a:c1: fb:28:ff:49:68:68:ba:67:8d:08:3b:bb:08:be:25:55:5b:e5: 5c:02:8c:72:5d:3c:14:75:2e:52:ec:d4:82:7e:8d:45:66:cc: b0:3b:cc:e9:ed:93:77:86:08:70:b4:2f:52:38:4b:79:36:30: d4:8f:52:34:58:68:e4:37:ff:bb:34:95:bc:4c:7c:46:93:d3: 0c:33:4c:2d:67:f7:9b:8f:79:12:95:81:cd:1b:6a:22:c0:b3: 23:54:cf:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOXXQ3vNKoAIl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MDc0M2U3ZTYtNjQ1MC00YTNhLTgxNGItMzM0OTQzMmJjN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ezuvaC2c62iZMKkyukHtMg+WwonS9awsEr+ XW5neY46PEfbwOZ6Dc1TOfaAmjwVjIsgBuzLih7IQfIwcunmDazmktf6+WkFB5Jw pjaLbyfwS9Sa6JtiLtcO3JJKDPG3ipO0RqvhxdHUtB+kMh3HsENlQ1gh3t2zoNr7 3crRBaeYZfJl67sMnUAxz5cQ1vSFmoRNgCC2Al42qyhxm0vsnMRm9NkmCSLEFcsN ByAqndji2brb7cWWk1W78X2RRTwg7eARkRhtSZs9oYRL3rlUSayVuOxGsLX7KMrV pegixG9kU/h0EGMa/KLJGpjCU8QQZNt7o7sSTJyP5P9O9iudSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvuMCSwSf9YG/0tEIZ+y88A6fFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBinWjnU933ksvd69eUpk1eaoltQc/XTq98mJwYPKV8bNZt0JvF56Dk KpnYqE1UZNyd+zlM6MHhYa3a6sU4hbPyNtJ9twBgNMyk4PPIQOmdYHnro5eNgCfM rwJpQWK6UiashuYeJykLJi1L6vVORCSTRBVOuKfmUSKAdJGc8SP+wONVRy9xQQqp dmU9/gj5KsVZ5Bqy6X9KBrf+0udQkipfisH7KP9JaGi6Z40IO7sIviVVW+VcAoxy XTwUdS5S7NSCfo1FZsywO8zp7ZN3hghwtC9SOEt5NjDUj1I0WGjkN/+7NJW8THxG k9MMM0wtZ/ebj3kSlYHNG2oiwLMjVM+s -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:40 2025 by rpki-client