$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa File: 698462e2-42b4-35b5-a712-a58067b5e726.roa (raw, json) Hash identifier: K7E6klw+Qiy91X+KqfMnu6PMJpeZl8WKsowHgqFJ2m0= Subject key identifier: 4F:5D:BB:BD:DF:0E:74:1B:83:15:82:83:28:8A:23:56:71:E4:45:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E6ED55E180B9B28141D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36628 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e6:ed:55:e1:80:b9:b2:81:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=6dd51655-75b0-43cc-b2b0-60ca77a3680a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:87:49:a3:90:fe:53:e4:91:83:5a:2a:05: 40:98:61:8f:a7:3a:4e:31:51:9d:c5:f0:ad:3f:39: 9e:5b:1c:be:32:22:f3:d9:61:51:4a:6b:e3:45:e9: e4:8f:09:60:41:4f:06:e9:33:0b:c2:a1:99:be:60: bf:0e:8c:b2:a2:cc:16:0e:ba:aa:07:4c:31:31:bb: e3:14:da:69:2c:96:b2:6f:38:bb:52:bc:17:22:3e: 57:16:19:56:9a:60:c6:43:3b:b6:61:b8:27:4b:4e: 7b:d4:5e:7d:c1:dd:45:4e:9f:b1:da:b7:99:af:03: 9f:ce:4a:b1:f9:df:0d:5b:e5:f7:66:69:af:d1:cb: 89:81:aa:d6:47:65:35:df:e3:65:04:df:00:5c:96: 8d:8c:5b:07:58:6d:4e:45:0e:ea:1d:d7:21:91:c7: fc:d8:f6:6b:17:91:3a:7e:44:6a:e9:63:22:e6:f2: df:e4:05:56:17:4f:72:f3:94:03:ef:7d:b7:17:d6: 84:9d:f3:41:a0:6d:21:e3:28:13:56:85:22:b8:92: 0a:25:4e:33:e5:e1:da:fc:8a:6f:3a:21:ce:b3:25: 37:29:05:5d:a9:08:0c:74:be:87:38:56:64:eb:8b: 6b:dc:0a:8c:d9:67:1b:ea:a4:43:5b:7c:c2:9e:e3: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5D:BB:BD:DF:0E:74:1B:83:15:82:83:28:8A:23:56:71:E4:45:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b7:a7:1e:64:fa:e3:cc:ae:ed:55:f5:b6:7a:f6:98:51:0e: ac:a0:81:ff:fb:d9:aa:4e:6b:f1:10:a6:21:fa:43:f4:38:ff: 26:ad:b4:17:d1:67:2a:91:b6:de:5a:86:ba:97:9a:aa:51:17: c6:93:38:0b:5a:66:72:41:6b:68:2d:58:e0:1b:a7:a7:26:37: cf:05:6a:10:23:6b:25:43:f5:9f:86:6e:01:9f:d3:bd:73:5e: e2:f5:16:5c:8a:e4:80:c2:83:a2:68:db:43:1c:be:7c:fe:ab: 98:d8:7c:73:48:52:8f:d1:a5:a1:cd:15:26:9c:9d:82:bd:ea: 2d:8d:b9:eb:46:97:69:17:c7:81:62:20:40:d5:e4:b5:f7:d6: b8:61:19:e9:07:c6:27:e5:6b:cd:ce:de:36:bf:a7:f1:93:2d: d5:73:87:81:cd:6d:a3:05:02:d2:5b:38:30:e0:06:61:b5:ea: be:65:d3:94:dd:2b:00:a3:52:70:13:99:21:14:c3:1b:33:43: 2f:54:2b:3e:11:6f:d3:11:2d:96:95:88:7a:6d:ab:d8:70:05: 21:70:de:e4:65:8d:76:84:b0:78:bc:68:66:41:bb:fc:2c:53: 77:f3:0a:b2:ba:c7:1a:54:b9:b1:4b:ff:17:33:cb:b3:e6:4e: 65:6f:e4:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcObtVeGAubKBQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NmRkNTE2NTUtNzViMC00M2NjLWIyYjAtNjBjYTc3YTM2ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUOHSaOQ/lPkkYNaKgVAmGGPpzpOMVGdxfCt PzmeWxy+MiLz2WFRSmvjRenkjwlgQU8G6TMLwqGZvmC/DoyyoswWDrqqB0wxMbvj FNppLJaybzi7UrwXIj5XFhlWmmDGQzu2YbgnS0571F59wd1FTp+x2reZrwOfzkqx +d8NW+X3Zmmv0cuJgarWR2U13+NlBN8AXJaNjFsHWG1ORQ7qHdchkcf82PZrF5E6 fkRq6WMi5vLf5AVWF09y85QD7323F9aEnfNBoG0h4ygTVoUiuJIKJU4z5eHa/Ipv OiHOsyU3KQVdqQgMdL6HOFZk64tr3AqM2Wcb6qRDW3zCnuP8NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9du73fDnQbgxWCgyiKI1Zx5EWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk4NDYyZTItNDJiNC0z NWI1LWE3MTItYTU4MDY3YjVlNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgt6ceZPrjzK7tVfW2evaYUQ6soIH/+9mqTmvxEKYh+kP0OP8mrbQX 0WcqkbbeWoa6l5qqURfGkzgLWmZyQWtoLVjgG6enJjfPBWoQI2slQ/Wfhm4Bn9O9 c17i9RZciuSAwoOiaNtDHL58/quY2HxzSFKP0aWhzRUmnJ2CveotjbnrRpdpF8eB YiBA1eS199a4YRnpB8Yn5WvNzt42v6fxky3Vc4eBzW2jBQLSWzgw4AZhteq+ZdOU 3SsAo1JwE5khFMMbM0MvVCs+EW/TES2WlYh6bavYcAUhcN7kZY12hLB4vGhmQbv8 LFN38wqyuscaVLmxS/8XM8uz5k5lb+Tg -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:20 2025 by rpki-client