$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e52b69b-b254-3ad0-ba7b-9ed3dfe36479.roa File: 5e52b69b-b254-3ad0-ba7b-9ed3dfe36479.roa (raw, json) Hash identifier: 7CuM9nsyaX/fs9YHci0hUF0mIHcwXG7G9xKodtKek1U= Subject key identifier: EF:46:E6:30:82:8A:84:6F:91:0B:A0:6C:B1:ED:5B:55:A6:CF:BB:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E4CEB3DB6CBE9CF1ECA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e52b69b-b254-3ad0-ba7b-9ed3dfe36479.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397206 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:ce:b3:db:6c:be:9c:f1:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=7436cb91-3cfe-422e-ac19-d60c1c76b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:85:f8:b9:ef:eb:f6:2f:94:2b:e4:9f:02: f4:89:0a:27:06:ee:61:37:15:38:96:ad:86:9c:6a: e5:f3:02:c9:87:0c:d9:58:e4:7b:da:63:e6:0f:ea: 43:36:c0:31:c4:8f:57:b1:cd:9d:8d:16:78:3d:18: 84:60:12:ad:fb:f0:55:d6:0a:88:7b:20:08:97:c6: 55:16:80:16:f6:7e:66:09:3c:12:c7:f1:1f:6e:23: 40:38:49:b7:17:24:a6:ef:a2:e9:f7:b6:d1:07:f1: 5b:05:62:4b:fc:65:cd:99:bb:41:65:b2:21:10:ae: 05:ca:a7:72:7e:c9:cd:18:e2:ed:5b:b4:0b:b4:80: 94:31:35:94:bc:1e:19:47:57:fa:6b:a0:fd:25:6b: ba:e5:a0:2d:5b:f4:4c:95:f9:36:5a:ad:dc:3b:9a: 97:2f:34:8e:f1:62:1d:12:56:bc:12:11:60:a4:9f: 44:2c:7e:16:30:4e:17:dd:7f:04:1d:54:10:ea:c7: b1:ce:4b:14:bb:3b:3b:1d:38:c8:1c:e9:de:4c:d5: a1:f1:13:1e:2c:b1:e6:a2:ba:47:9d:3a:45:1f:8a: 7f:0a:5b:46:a0:ad:53:e2:6e:df:1e:48:f4:0e:6d: 8b:9b:67:36:34:70:e1:3d:c1:3d:6d:25:3c:dd:96: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:E6:30:82:8A:84:6F:91:0B:A0:6C:B1:ED:5B:55:A6:CF:BB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e52b69b-b254-3ad0-ba7b-9ed3dfe36479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:65:90:e1:e6:8e:10:61:17:14:53:cf:9e:c7:77:48:81:67: 4c:86:73:53:6e:95:9a:b4:92:bd:00:a6:e9:cd:d6:c5:8c:9c: aa:32:64:cf:b5:97:33:bf:fe:c2:d0:cd:35:06:6a:af:4a:1a: c5:60:b9:88:30:71:08:3c:0e:da:87:f7:83:4e:5f:4d:ef:2b: 24:6e:30:05:fb:0d:2e:73:04:09:33:da:22:0d:37:eb:ec:ad: 6b:81:97:c9:14:93:46:e3:fe:6d:9c:2a:cd:77:b3:29:a6:ea: e0:e2:54:63:f6:56:03:d9:ac:08:3e:68:96:7d:b6:c4:36:98: 4d:b9:32:70:3a:c9:fd:d2:62:2a:d5:c0:c0:28:53:d9:60:8d: e7:a3:2a:db:d5:52:9f:98:47:bf:0f:92:cc:78:0f:1b:7d:96: 11:1e:a6:01:cf:01:78:64:0d:27:34:d0:a6:aa:6e:8b:67:0c: 3f:3f:00:a0:6d:97:e4:5e:21:55:78:3d:c3:a4:17:76:f0:11: d2:5b:5a:50:63:1f:fd:90:55:cb:00:a6:bf:89:c9:df:f7:81: 48:6c:24:35:fe:25:e5:b4:f8:de:6d:c3:c3:a3:5d:6f:3d:f4: 4f:f0:99:93:fa:5f:10:e9:4f:54:15:57:a0:43:37:9a:b7:81: 03:3c:39:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOTOs9tsvpzx7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NzQzNmNiOTEtM2NmZS00MjJlLWFjMTktZDYwYzFjNzZiM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyceF+Lnv6/YvlCvknwL0iQonBu5hNxU4lq2G nGrl8wLJhwzZWOR72mPmD+pDNsAxxI9Xsc2djRZ4PRiEYBKt+/BV1gqIeyAIl8ZV FoAW9n5mCTwSx/EfbiNAOEm3FySm76Lp97bRB/FbBWJL/GXNmbtBZbIhEK4Fyqdy fsnNGOLtW7QLtICUMTWUvB4ZR1f6a6D9JWu65aAtW/RMlfk2Wq3cO5qXLzSO8WId Ela8EhFgpJ9ELH4WME4X3X8EHVQQ6sexzksUuzs7HTjIHOneTNWh8RMeLLHmorpH nTpFH4p/CltGoK1T4m7fHkj0Dm2Lm2c2NHDhPcE9bSU83ZbOCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO9G5jCCioRvkQugbLHtW1Wmz7tPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWU1MmI2OWItYjI1NC0z YWQwLWJhN2ItOWVkM2RmZTM2NDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4ZZDh5o4QYRcUU8+ex3dIgWdMhnNTbpWatJK9AKbpzdbFjJyqMmTP tZczv/7C0M01BmqvShrFYLmIMHEIPA7ah/eDTl9N7yskbjAF+w0ucwQJM9oiDTfr 7K1rgZfJFJNG4/5tnCrNd7Mppurg4lRj9lYD2awIPmiWfbbENphNuTJwOsn90mIq 1cDAKFPZYI3noyrb1VKfmEe/D5LMeA8bfZYRHqYBzwF4ZA0nNNCmqm6LZww/PwCg bZfkXiFVeD3DpBd28BHSW1pQYx/9kFXLAKa/icnf94FIbCQ1/iXltPjebcPDo11v PfRP8JmT+l8Q6U9UFVegQzeat4EDPDnd -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:31 2025 by rpki-client