$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa File: 5aa49181-7067-32b3-a458-81e58ac1d399.roa (raw, json) Hash identifier: h/djXaj21laxCxJFCqlptk0NmkplGXZDsogWEnlz1OU= Subject key identifier: 06:52:DC:DC:76:99:40:1E:36:2F:EE:91:1F:BE:0B:59:89:4C:5F:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E19F64976023B452A140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396554 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:9f:64:97:60:23:b4:52:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=bd14412b-a337-4b6e-8fc3-cde3201896a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:6f:24:32:d2:dd:0c:8f:cc:e4:bd:a4:97: 66:39:3f:7c:e0:92:de:cc:4e:8b:d1:7f:8f:76:d4: dd:5f:7c:f1:54:3f:ea:19:29:1f:4f:19:0c:ea:e9: c5:74:c6:94:5d:17:e3:cc:3e:ee:03:4c:e4:90:cf: ab:c6:ca:66:40:f1:82:ac:fa:05:a3:39:36:bc:3e: cb:cb:70:8b:eb:c0:73:bd:57:89:4e:7c:3c:7c:d6: ca:5e:89:ef:bb:74:96:75:1c:00:7f:70:f4:bf:5a: a6:85:df:42:ff:97:f1:1a:1d:3f:5f:92:ba:5d:b3: 4d:98:18:ad:28:af:c8:5e:dd:b4:9b:eb:0b:3e:02: 7a:d5:43:94:5f:cc:bc:1a:76:d2:fa:a3:3d:3d:c5: bc:7b:3d:95:48:d7:b7:11:95:0d:8f:be:e3:9d:17: 6b:91:52:ec:0c:54:d5:14:f5:2c:f3:44:b6:30:5c: be:90:1c:43:6d:54:9a:50:58:df:3e:11:93:2c:d4: ab:fb:1f:1a:48:6c:95:3d:08:de:6f:ae:ce:13:65: 92:cd:76:24:d3:db:d0:8a:4b:df:bd:08:87:43:fa: 29:9b:d8:67:22:7b:d1:c1:0b:c1:9c:f0:4c:0e:f7: 56:f5:53:a6:ea:32:03:44:22:62:5c:f1:62:e5:ac: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:52:DC:DC:76:99:40:1E:36:2F:EE:91:1F:BE:0B:59:89:4C:5F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0a:23:a9:a1:23:da:f4:21:bd:8c:a3:91:7a:bd:7a:69:62: ea:b3:93:d9:31:0d:98:f8:a7:88:ad:68:4e:0f:6d:df:ec:d7: dc:6b:a7:ca:f6:23:11:36:84:a8:3d:df:71:cc:06:f9:08:1b: 83:b2:0a:fd:e6:8c:a9:fa:5a:2c:06:1a:92:08:e9:b5:ec:48: 8c:87:c7:82:74:f9:86:01:50:ad:a0:e3:a4:94:33:6e:0b:57: d9:f8:45:32:f6:df:e9:95:4d:16:f3:7f:84:eb:b3:f2:47:ee: 18:a9:0e:18:99:1f:0c:9a:de:a7:f7:dd:55:23:91:01:0d:e1: 8f:c0:b0:50:e4:63:cd:a2:a6:4e:08:10:13:af:39:72:6a:e4: c4:43:5c:59:27:f6:c4:69:52:3c:fb:d2:4c:d5:4a:74:ea:7c: d0:47:38:57:8d:6f:89:2e:60:a7:14:ad:a9:cd:98:ff:c2:a5: 48:d4:88:23:78:d4:3b:9c:28:77:c1:e4:04:f9:bf:ff:b8:53: 5d:79:c8:56:4d:e3:08:69:b6:f3:ba:ea:a4:c3:e7:11:a6:9e: 80:3b:af:57:65:b5:82:34:20:61:6e:54:67:f1:8f:e3:bf:c1: 6d:b4:5e:4c:b1:c3:9a:1e:18:20:74:af:d6:c9:66:a0:b9:b2: 72:68:20:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOGfZJdgI7RSoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YmQxNDQxMmItYTMzNy00YjZlLThmYzMtY2RlMzIwMTg5NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH5vJDLS3QyPzOS9pJdmOT984JLezE6L0X+P dtTdX3zxVD/qGSkfTxkM6unFdMaUXRfjzD7uA0zkkM+rxspmQPGCrPoFozk2vD7L y3CL68BzvVeJTnw8fNbKXonvu3SWdRwAf3D0v1qmhd9C/5fxGh0/X5K6XbNNmBit KK/IXt20m+sLPgJ61UOUX8y8GnbS+qM9PcW8ez2VSNe3EZUNj77jnRdrkVLsDFTV FPUs80S2MFy+kBxDbVSaUFjfPhGTLNSr+x8aSGyVPQjeb67OE2WSzXYk09vQikvf vQiHQ/opm9hnInvRwQvBnPBMDvdW9VOm6jIDRCJiXPFi5ayk+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAZS3Nx2mUAeNi/ukR++C1mJTF/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDkxODEtNzA2Ny0z MmIzLWE0NTgtODFlNThhYzFkMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkCiOpoSPa9CG9jKORer16aWLqs5PZMQ2Y+KeIrWhOD23f7Nfca6fK 9iMRNoSoPd9xzAb5CBuDsgr95oyp+losBhqSCOm17EiMh8eCdPmGAVCtoOOklDNu C1fZ+EUy9t/plU0W83+E67PyR+4YqQ4YmR8Mmt6n991VI5EBDeGPwLBQ5GPNoqZO CBATrzlyauTEQ1xZJ/bEaVI8+9JM1Up06nzQRzhXjW+JLmCnFK2pzZj/wqVI1Igj eNQ7nCh3weQE+b//uFNdechWTeMIabbzuuqkw+cRpp6AO69XZbWCNCBhblRn8Y/j v8FttF5MscOaHhggdK/WyWagubJyaCB4 -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:41 2025 by rpki-client