$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa File: 5976b022-9a0f-3266-b2d2-0c6408056bad.roa (raw, json) Hash identifier: 4M9uUp9az2OYIov8b4SuQMAl1JjizDcPqrYdbVxFeW0= Subject key identifier: 1E:7D:91:2B:15:9D:99:53:21:C4:4B:5A:98:75:61:00:42:B2:65:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E07D5CCB90F255251080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396545 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e0:7d:5c:cb:90:f2:55:25:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9afe180d-4f04-4a96-9d5c-de72216d4799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:07:eb:eb:30:ea:2c:b4:cc:88:c1:8c:0c: 8e:79:76:1d:24:84:91:c2:22:73:1e:ca:74:00:00: 9d:85:e4:99:04:f8:8c:83:1a:f8:bf:f9:25:89:b2: 14:ea:6a:da:a5:6d:1d:80:e2:37:87:9b:71:6e:27: 63:49:8a:a5:b9:bd:e1:05:c9:85:cf:27:be:1f:df: 4d:bf:b9:7f:bb:d2:9a:0a:76:9b:6c:75:6f:c3:3e: f9:74:82:4e:53:7e:00:b9:50:16:7c:46:14:6e:3c: 00:54:f2:48:de:b9:52:c1:30:17:5f:e9:f5:31:60: 9b:12:33:3b:4b:ab:11:49:a3:33:2e:6e:60:55:67: 1a:ba:2d:8c:5b:3b:84:ce:1b:d1:8e:67:16:ec:7d: 73:cc:df:7e:b1:a7:f9:96:df:81:a0:a6:11:f8:6e: ab:be:3d:79:80:f6:8e:45:7a:36:00:a3:55:07:b5: ba:f0:c6:a0:fc:d9:f2:79:5c:77:c8:03:5e:5d:2d: 51:a7:d4:5c:a6:c9:ef:53:2f:18:d7:65:d6:02:40: a3:41:89:22:8e:98:ce:cb:5d:6d:77:9a:48:76:68: 1a:7b:04:a3:4e:75:05:08:82:e7:9a:ab:1a:51:d7: 94:18:33:ab:6a:97:6e:5d:0f:82:1d:54:64:c5:62: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:91:2B:15:9D:99:53:21:C4:4B:5A:98:75:61:00:42:B2:65:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:e5:e7:d7:98:ae:fb:df:cb:1c:ec:22:12:00:1e:01:b8: dc:78:93:9a:df:cc:5d:33:df:71:1b:b0:e6:3d:03:96:57:af: 85:b9:81:6c:63:84:b5:5d:9d:94:e2:45:95:fe:a7:6a:8d:2d: 75:96:60:8d:aa:c5:6c:98:ce:a7:9d:2a:db:58:a7:90:d9:0e: bb:70:bd:2b:93:a4:97:84:ce:36:55:11:32:2b:d3:e9:5b:84: cd:e3:92:c6:5f:6e:15:ea:1f:d3:b3:3e:c1:62:c8:11:56:ae: 3d:d5:5f:ec:41:64:2e:c0:33:ed:bc:6e:da:43:41:37:1d:a5: 0a:c1:2a:49:68:1d:98:34:fb:8d:17:e0:1e:de:3b:14:a4:38: 03:e7:b6:86:41:f6:cc:71:8e:a3:3a:16:1c:06:29:f2:ed:47: 0d:54:a9:bf:de:88:62:70:8c:2c:c1:e1:60:8c:18:d4:37:13: 34:bc:ec:66:0b:5a:47:a0:9e:6f:57:80:60:bc:8c:fd:76:ee: 4c:5a:25:ef:23:c2:91:00:7f:65:ad:cb:9e:2d:aa:42:e3:be: 80:39:ea:95:0c:bf:5d:e6:64:60:ad:3c:1c:b6:a0:82:05:0d: 92:c6:01:2a:45:00:63:cf:b5:da:e5:35:40:66:9d:9a:47:30: 6c:a6:fc:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOB9XMuQ8lUlEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWFmZTE4MGQtNGYwNC00YTk2LTlkNWMtZGU3MjIxNmQ0Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KwH6+sw6iy0zIjBjAyOeXYdJISRwiJzHsp0 AACdheSZBPiMgxr4v/klibIU6mrapW0dgOI3h5txbidjSYqlub3hBcmFzye+H99N v7l/u9KaCnabbHVvwz75dIJOU34AuVAWfEYUbjwAVPJI3rlSwTAXX+n1MWCbEjM7 S6sRSaMzLm5gVWcaui2MWzuEzhvRjmcW7H1zzN9+saf5lt+BoKYR+G6rvj15gPaO RXo2AKNVB7W68Mag/NnyeVx3yANeXS1Rp9RcpsnvUy8Y12XWAkCjQYkijpjOy11t d5pIdmgaewSjTnUFCILnmqsaUdeUGDOrapduXQ+CHVRkxWIpOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB59kSsVnZlTIcRLWph1YQBCsmXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk3NmIwMjItOWEwZi0z MjY2LWIyZDItMGM2NDA4MDU2YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO/eXn15iu+9/LHOwiEgAeAbjceJOa38xdM99xG7DmPQOWV6+FuYFs Y4S1XZ2U4kWV/qdqjS11lmCNqsVsmM6nnSrbWKeQ2Q67cL0rk6SXhM42VREyK9Pp W4TN45LGX24V6h/Tsz7BYsgRVq491V/sQWQuwDPtvG7aQ0E3HaUKwSpJaB2YNPuN F+Ae3jsUpDgD57aGQfbMcY6jOhYcBiny7UcNVKm/3ohicIwsweFgjBjUNxM0vOxm C1pHoJ5vV4BgvIz9du5MWiXvI8KRAH9lrcueLapC476AOeqVDL9d5mRgrTwctqCC BQ2SxgEqRQBjz7Xa5TVAZp2aRzBspvzM -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:17 2025 by rpki-client