$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa File: 5aae1681-a715-398d-93e4-ba01ef68fe79.roa (raw, json) Hash identifier: jvGKTwJ/nF9mi+eAV9v8hwJhBXlkL2uncmWUg/owcEw= Subject key identifier: B1:04:F4:AB:09:5C:7D:9D:AD:D0:B0:5B:38:81:27:D9:67:C7:B5:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3041BE5D2E49A21FA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:04:1b:e5:d2:e4:9a:21:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1671e11b-bcb8-430d-bde0-d37205e1d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:57:45:03:cb:44:41:1b:d4:03:5f:e5:99: 0a:aa:97:a6:f1:9e:4d:8c:e5:b8:5a:a0:ec:f7:24: 37:6d:50:9c:31:fb:fd:8b:59:ab:7f:2a:65:05:e0: 9b:87:94:46:e9:9a:20:a7:b0:3b:9d:43:1e:b7:a2: 67:c1:0a:a3:13:ba:7b:4c:1f:e7:99:f0:b5:91:93: e1:81:13:ae:5a:55:0b:7d:86:de:e7:cc:21:d8:0e: 3c:fa:cb:6f:af:6f:0e:7d:08:1e:3e:7f:b3:dc:71: 4a:aa:56:54:17:71:e1:a5:83:0a:24:f8:f0:64:c8: 22:d8:be:17:f7:17:36:99:02:e3:1f:32:7d:ed:cc: c9:04:2e:a1:77:39:24:0c:35:fb:49:e9:5b:d5:b4: 39:d8:03:4b:9a:3d:0f:48:be:d9:08:5e:7b:e2:c1: 4c:a2:e4:a0:67:20:b4:e4:e5:7f:4c:d5:99:85:9a: cb:2c:15:20:04:c6:1d:7c:44:88:d6:cf:70:c7:9a: fd:bf:55:33:8f:28:ab:de:c8:5b:41:f5:61:91:fb: 91:16:d8:93:8b:16:16:9d:15:08:d9:a1:32:ae:25: 79:6e:f9:51:20:b3:3b:a9:80:9a:29:1b:2c:ad:74: 2f:5c:24:ab:61:05:15:ee:05:78:83:ac:e0:11:4f: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:04:F4:AB:09:5C:7D:9D:AD:D0:B0:5B:38:81:27:D9:67:C7:B5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:87:61:6a:97:98:81:49:32:67:4d:3f:2a:34:7d:45:37:32: fe:ec:05:d2:63:02:98:bc:9b:68:b8:78:84:22:8c:68:e9:e8: 25:97:8a:af:42:18:5f:73:dd:56:7c:fc:f4:a3:79:df:5d:cc: bd:3e:1d:bc:13:c2:d5:fb:f6:fd:5d:a4:5a:18:e5:bb:00:58: ee:d6:a0:22:9f:08:41:8f:fd:3e:65:5d:05:3a:58:13:71:f3: d4:da:80:e9:7a:22:69:8f:ad:c9:f7:3f:78:af:5a:ae:cb:d9: 6c:31:3e:e9:72:f9:a8:c3:2f:8d:f1:21:b1:2b:d5:a9:6d:94: 5d:0b:c7:94:09:d5:29:2d:a8:53:48:90:fd:00:4e:48:ca:4d: 2e:1b:ff:09:0c:32:05:4a:b6:61:91:f5:af:dc:22:55:ba:b1: ed:7b:af:4a:ee:7b:76:7c:02:60:8f:7c:74:b3:d9:1b:84:ae: 78:24:eb:25:39:4e:4b:e0:a3:75:db:d3:5c:08:62:56:86:10: b1:19:94:00:e8:c3:c4:bc:55:bd:31:5f:29:1a:3a:04:14:1e: a2:e8:ef:24:ef:e1:4f:fc:d7:c1:a7:a2:47:8b:52:32:bf:ca: 77:a0:a7:89:a4:b2:d4:7a:07:f2:59:5a:c2:f8:48:bf:bd:3c: a9:cc:cf:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOMEG+XS5Joh+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTY3MWUxMWItYmNiOC00MzBkLWJkZTAtZDM3MjA1ZTFkNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aVXRQPLREEb1ANf5ZkKqpem8Z5NjOW4WqDs 9yQ3bVCcMfv9i1mrfyplBeCbh5RG6Zogp7A7nUMet6JnwQqjE7p7TB/nmfC1kZPh gROuWlULfYbe58wh2A48+stvr28OfQgePn+z3HFKqlZUF3HhpYMKJPjwZMgi2L4X 9xc2mQLjHzJ97czJBC6hdzkkDDX7Selb1bQ52ANLmj0PSL7ZCF574sFMouSgZyC0 5OV/TNWZhZrLLBUgBMYdfESI1s9wx5r9v1Uzjyir3shbQfVhkfuRFtiTixYWnRUI 2aEyriV5bvlRILM7qYCaKRssrXQvXCSrYQUV7gV4g6zgEU+uFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLEE9KsJXH2drdCwWziBJ9lnx7VPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhZTE2ODEtYTcxNS0z OThkLTkzZTQtYmEwMWVmNjhmZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEh2Fql5iBSTJnTT8qNH1FNzL+7AXSYwKYvJtouHiEIoxo6egll4qv Qhhfc91WfPz0o3nfXcy9Ph28E8LV+/b9XaRaGOW7AFju1qAinwhBj/0+ZV0FOlgT cfPU2oDpeiJpj63J9z94r1quy9lsMT7pcvmowy+N8SGxK9WpbZRdC8eUCdUpLahT SJD9AE5Iyk0uG/8JDDIFSrZhkfWv3CJVurHte69K7nt2fAJgj3x0s9kbhK54JOsl OU5L4KN129NcCGJWhhCxGZQA6MPEvFW9MV8pGjoEFB6i6O8k7+FP/NfBp6JHi1Iy v8p3oKeJpLLUegfyWVrC+Ei/vTypzM9J -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:44 2025 by rpki-client