$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa File: 4de38486-00f8-322f-ab21-b6f3878c6517.roa (raw, json) Hash identifier: Aw8z68gWLP6z4Tm607FatwdyARAEz9WD5Uk5vS6X1Gs= Subject key identifier: 62:6F:5D:DC:44:05:02:24:07:36:B8:E1:8B:39:DE:D9:C9:6D:4B:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E18E8FFB77BE6F603ECE Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36630 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:8e:8f:fb:77:be:6f:60:3e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=233872f5-66ad-4b72-9613-bb39c3a2df97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:b1:51:03:97:c8:61:99:9c:3a:d4:ac:34: 5e:52:66:70:5d:6c:de:e7:ee:f5:4d:aa:b2:14:02: e5:55:cf:58:81:45:2a:10:a3:fd:d6:dc:49:81:e6: 4e:cd:ad:e2:34:12:85:e2:4d:19:f6:a3:ea:bc:d3: 9d:53:3a:05:2f:a3:a5:d7:16:c3:4c:72:0a:f6:6b: 7b:2f:89:ff:3b:46:86:ba:d5:8c:90:eb:7e:da:20: ae:7b:2b:56:b2:b3:a0:ef:d5:37:d2:97:c2:88:10: 3e:77:b9:31:8d:11:4c:cc:c4:09:8d:88:25:22:74: 46:0b:4c:9f:3b:75:7b:9e:ff:fe:ff:5f:d0:71:4b: c0:0e:d5:96:70:c4:38:3f:b4:41:11:51:17:f9:a1: 6a:b9:d2:19:59:e0:98:39:69:0d:f4:16:b3:85:23: f6:d2:f6:a4:3d:15:88:43:2c:7f:7a:b8:8c:00:00: fc:db:3c:d6:20:87:b1:b0:25:c0:53:cb:29:bb:f1: 60:e3:d1:c9:01:10:e1:35:74:19:33:e3:3b:99:73: a7:27:43:08:58:ea:7e:30:71:47:71:05:96:75:23: f2:a3:d5:d1:aa:ea:ca:ef:7f:fc:a0:e1:01:9b:d3: b9:78:ff:6e:00:ba:17:19:a0:b1:f3:07:74:48:09: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:5D:DC:44:05:02:24:07:36:B8:E1:8B:39:DE:D9:C9:6D:4B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:4e:8c:69:8d:17:ce:fc:1b:c7:e3:c6:d2:36:76:19:84: e4:b1:cd:70:e9:c0:be:e0:56:8e:e9:9b:c5:29:37:9a:d0:88: 5a:69:c6:6f:9a:7e:fd:c0:b0:26:a6:84:67:44:22:88:ce:5e: 02:4b:fd:aa:94:83:81:81:bc:90:1a:66:57:b7:72:50:6c:3f: 45:40:ae:78:a7:e4:42:03:7e:40:f1:76:70:f4:f1:b2:2d:99: ab:ed:24:2c:96:71:0d:c3:6f:86:0c:29:94:53:e5:a2:a4:28: 5e:a7:f5:a1:41:99:90:5e:59:4f:fd:af:a6:af:d4:27:1c:4b: 6d:44:fd:53:0d:84:1e:97:62:2d:81:2f:6e:4e:d9:5e:43:38: c3:62:9a:48:78:2c:7f:9d:b6:2a:81:06:bd:35:c7:90:7a:4e: a0:ee:66:82:70:e5:bc:c4:ba:6e:f7:d8:8b:82:64:41:35:0e: a4:d9:06:a0:bd:76:fb:71:58:70:c8:a0:20:ff:8b:f4:cf:5c: 57:8b:8b:76:c9:51:47:d0:fc:de:38:79:9c:5e:5e:aa:56:f7: 41:d3:1c:ec:14:36:bf:6a:a8:b7:4c:c9:6f:54:5a:d9:d6:42: f4:39:b6:78:9b:95:2d:44:eb:71:3d:27:1f:6a:5d:70:f6:ac: 0b:ac:11:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOGOj/t3vm9gPs4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MjMzODcyZjUtNjZhZC00YjcyLTk2MTMtYmIzOWMzYTJkZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOSxUQOXyGGZnDrUrDReUmZwXWze5+71Taqy FALlVc9YgUUqEKP91txJgeZOza3iNBKF4k0Z9qPqvNOdUzoFL6Ol1xbDTHIK9mt7 L4n/O0aGutWMkOt+2iCueytWsrOg79U30pfCiBA+d7kxjRFMzMQJjYglInRGC0yf O3V7nv/+/1/QcUvADtWWcMQ4P7RBEVEX+aFqudIZWeCYOWkN9BazhSP20vakPRWI Qyx/eriMAAD82zzWIIexsCXAU8spu/Fg49HJARDhNXQZM+M7mXOnJ0MIWOp+MHFH cQWWdSPyo9XRqurK73/8oOEBm9O5eP9uALoXGaCx8wd0SAmwDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGJvXdxEBQIkBza44Ys53tnJbUtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRlMzg0ODYtMDBmOC0z MjJmLWFiMjEtYjZmMzg3OGM2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAmE6MaY0Xzvwbx+PG0jZ2GYTksc1w6cC+4FaO6ZvFKTea0IhaacZv mn79wLAmpoRnRCKIzl4CS/2qlIOBgbyQGmZXt3JQbD9FQK54p+RCA35A8XZw9PGy LZmr7SQslnENw2+GDCmUU+WipChep/WhQZmQXllP/a+mr9QnHEttRP1TDYQel2It gS9uTtleQzjDYppIeCx/nbYqgQa9NceQek6g7maCcOW8xLpu99iLgmRBNQ6k2Qag vXb7cVhwyKAg/4v0z1xXi4t2yVFH0PzeOHmcXl6qVvdB0xzsFDa/aqi3TMlvVFrZ 1kL0ObZ4m5UtROtxPScfal1w9qwLrBGE -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:34 2025 by rpki-client