$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa File: 5c395aa6-82d8-305b-882d-70fc9f94aec8.roa (raw, json) Hash identifier: 8P4fSKu27kUm7BfkTHVwBpgLzDyOLX7pQwlXNz2ZvSU= Subject key identifier: 2C:8D:D6:C6:C2:56:56:75:01:B5:79:88:4A:8D:D5:1E:31:05:36:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E72EF965DD3A862DA900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396580 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e7:2e:f9:65:dd:3a:86:2d:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=776b8814-a292-4519-bfe4-ba5e5ea5893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:47:e6:94:07:7c:13:25:f1:9c:ea:1a:19: 7d:d6:22:96:f9:1f:f5:02:cd:76:a5:bc:a5:eb:6a: b3:9a:8d:ae:8e:56:80:1a:10:8c:41:8b:c0:76:14: 37:d9:cc:84:10:91:f6:e5:7b:4f:09:aa:59:df:5d: ef:3a:08:8c:47:ad:10:9a:a2:e9:4b:af:79:a7:65: c1:1c:c4:e1:de:3c:a5:e8:23:28:2f:74:dc:0b:b8: 73:d5:d6:69:a5:8d:7d:b4:a5:30:c2:59:a9:dd:80: 96:be:25:aa:4a:28:bf:35:cc:5c:55:36:f2:30:d1: f9:ba:da:ad:8d:75:26:0e:59:69:35:91:8c:ab:77: 70:cc:51:26:83:46:a7:e8:97:c7:05:36:a5:36:d2: b9:e0:94:77:b3:0a:e6:2b:7b:71:c7:db:54:38:83: 1e:27:6c:1d:9b:80:48:db:11:4f:1f:f3:1a:6f:23: 76:51:78:49:99:70:11:fc:13:2c:98:ab:95:7f:b3: 4a:bc:76:68:31:3c:2b:a4:b1:69:9b:68:e2:4c:b5: a5:47:75:1a:62:34:31:e6:63:e9:00:52:7f:67:5b: 90:cf:fd:66:9f:eb:9b:56:ca:46:ee:0e:69:88:55: dc:f5:c3:cf:0a:58:45:a3:5a:d5:5b:31:b3:5c:34: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:D6:C6:C2:56:56:75:01:B5:79:88:4A:8D:D5:1E:31:05:36:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:28:50:39:78:a3:94:2d:5a:96:2a:a8:74:58:dd:04:5e:c8: df:31:3a:5b:4e:12:c5:c6:89:22:8b:3a:db:6a:fd:fc:70:6b: eb:ae:73:66:e0:ad:f3:e7:83:4a:3c:68:5d:03:85:bf:59:59: 0e:9a:b8:64:1a:68:44:3f:7f:82:fa:77:0d:2a:12:71:af:1b: 82:16:2c:5b:09:63:1d:ee:8d:2a:e2:12:05:63:93:27:46:49: 1a:b0:ed:28:e9:e8:b7:05:66:00:80:fa:46:21:09:13:6f:05: 4d:79:47:cf:9c:e1:3b:31:a8:41:8c:ed:da:8e:b3:63:d8:78: 90:fc:0c:9f:2d:d4:23:47:f2:7e:bb:7c:74:d7:66:db:eb:65: 9e:a8:b0:77:37:a4:67:0d:5d:ab:f8:71:32:04:11:e6:ba:fc: 9c:a8:42:f2:f8:af:db:8b:f6:d7:97:e0:80:c6:7d:c5:fb:73: 7f:b8:64:d3:ce:03:c0:c4:7c:1b:18:a9:fe:a5:3c:8b:b4:6b: e6:ae:80:cf:28:a2:b8:21:6b:0d:0e:23:0e:45:e2:57:10:06: 85:b9:c2:9b:0a:a3:e6:87:5a:6e:39:41:16:63:d0:b1:a4:92: 00:aa:b5:ff:42:6f:39:f5:2c:22:72:23:cd:d8:19:cf:f1:20: 1f:60:45:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOcu+WXdOoYtqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk Nzc2Yjg4MTQtYTI5Mi00NTE5LWJmZTQtYmE1ZTVlYTU4OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oJH5pQHfBMl8ZzqGhl91iKW+R/1As12pbyl 62qzmo2ujlaAGhCMQYvAdhQ32cyEEJH25XtPCapZ313vOgiMR60QmqLpS695p2XB HMTh3jyl6CMoL3TcC7hz1dZppY19tKUwwlmp3YCWviWqSii/NcxcVTbyMNH5utqt jXUmDllpNZGMq3dwzFEmg0an6JfHBTalNtK54JR3swrmK3txx9tUOIMeJ2wdm4BI 2xFPH/MabyN2UXhJmXAR/BMsmKuVf7NKvHZoMTwrpLFpm2jiTLWlR3UaYjQx5mPp AFJ/Z1uQz/1mn+ubVspG7g5piFXc9cPPClhFo1rVWzGzXDTVuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCyN1sbCVlZ1AbV5iEqN1R4xBTbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMzOTVhYTYtODJkOC0z MDViLTg4MmQtNzBmYzlmOTRhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmKFA5eKOULVqWKqh0WN0EXsjfMTpbThLFxokiizrbav38cGvrrnNm 4K3z54NKPGhdA4W/WVkOmrhkGmhEP3+C+ncNKhJxrxuCFixbCWMd7o0q4hIFY5Mn RkkasO0o6ei3BWYAgPpGIQkTbwVNeUfPnOE7MahBjO3ajrNj2HiQ/AyfLdQjR/J+ u3x012bb62WeqLB3N6RnDV2r+HEyBBHmuvycqELy+K/bi/bXl+CAxn3F+3N/uGTT zgPAxHwbGKn+pTyLtGvmroDPKKK4IWsNDiMOReJXEAaFucKbCqPmh1puOUEWY9Cx pJIAqrX/Qm859SwiciPN2BnP8SAfYEVS -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:26 2025 by rpki-client