$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa File: 8763fe43-355b-3a57-b1a0-786be7d28ab4.roa (raw, json) Hash identifier: 9o4ybpRi74qV+jOTd5UJ+0PY97hQv34JEzNFQUfq4Ds= Subject key identifier: 92:34:3F:42:77:F4:5A:B1:86:20:06:F3:0F:AC:49:D8:B9:46:37:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E152F8413FA08E093C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396555 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:52:f8:41:3f:a0:8e:09:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=63b41844-f339-420b-a630-a61ab5fdb241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:38:6f:76:45:46:26:d3:a9:25:63:5a:32: c2:2f:ca:4b:52:28:87:f0:e4:59:d3:19:66:ee:07: 69:f7:c0:e8:f4:f3:b8:b9:37:cf:a9:15:86:06:21: 97:00:29:d5:20:b9:63:ce:3a:1d:c8:83:61:53:76: ab:a8:28:8e:3f:a8:c0:38:0b:0f:2b:43:db:7b:a1: de:21:0c:3c:42:27:db:db:e0:c8:17:a7:2c:c5:35: fa:82:18:86:a3:91:4b:d9:ed:62:33:2c:61:7e:5c: 60:b0:30:af:da:14:70:39:a8:36:84:e5:72:50:56: 2d:c7:51:fb:43:51:40:db:66:ab:f3:8c:bd:3a:77: 06:e5:cd:51:ff:dd:3a:06:eb:e3:db:fe:36:9f:9a: 2a:51:82:26:7f:30:75:9b:40:52:73:3d:36:23:8e: 36:8d:9d:f4:39:fa:10:68:fc:c0:c1:1f:e0:e3:78: 80:7f:8b:5e:8f:43:ae:0f:df:16:76:09:00:81:12: d8:36:cc:39:31:c4:74:bb:3c:a5:85:5f:ed:5a:2f: 37:95:32:8e:9a:57:46:56:56:d7:75:4c:b3:df:34: fd:a3:57:af:ed:db:ce:23:e9:ed:f0:df:14:8f:7b: e1:23:af:b5:a2:3d:66:68:9b:49:90:1f:84:2c:19: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:34:3F:42:77:F4:5A:B1:86:20:06:F3:0F:AC:49:D8:B9:46:37:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8763fe43-355b-3a57-b1a0-786be7d28ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a4:81:46:79:1c:bd:00:f7:eb:69:4b:38:f2:c6:21:97:9c: 8e:ce:af:ce:62:80:78:53:5c:36:49:4a:e7:5c:c5:d1:1a:ad: da:58:83:9a:b0:5b:81:ac:71:19:fb:61:c0:ee:e4:c2:5e:e8: 4f:62:90:a8:e3:32:9f:8a:09:95:d2:e5:20:77:db:26:5b:7e: 37:d0:6c:57:e9:86:b4:42:d6:b1:3f:3d:db:55:76:c7:f1:4c: 8a:49:d7:e5:7e:a2:14:64:1b:4c:4f:25:9e:24:a8:26:38:b6: 6d:60:b4:43:ba:b3:4d:24:42:6a:4e:81:b3:6b:78:15:4b:69: b2:4b:db:ae:44:0a:44:2c:8d:01:56:8f:60:a2:86:84:51:e7: b8:43:62:cc:96:53:21:2d:09:c7:97:cc:bf:1f:8f:98:57:67: 40:83:ec:5a:cf:a2:0d:7c:08:f4:60:3c:1f:07:28:0f:f5:f6: 0f:fb:4a:5b:2a:91:78:28:ee:ec:33:e6:94:eb:14:97:e4:08: b0:06:4e:63:b6:1d:ff:40:e9:b1:da:c8:fa:6e:ff:d3:d8:de: 5d:5b:17:4c:02:e0:e9:66:16:94:ea:92:b1:d0:8f:d7:2f:48: f3:cb:6c:5e:65:8f:44:12:d9:16:3d:83:62:57:73:81:0f:3a: de:2a:43:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOFS+EE/oI4JPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NjNiNDE4NDQtZjMzOS00MjBiLWE2MzAtYTYxYWI1ZmRiMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkM4b3ZFRibTqSVjWjLCL8pLUiiH8ORZ0xlm 7gdp98Do9PO4uTfPqRWGBiGXACnVILljzjodyINhU3arqCiOP6jAOAsPK0Pbe6He IQw8Qifb2+DIF6csxTX6ghiGo5FL2e1iMyxhflxgsDCv2hRwOag2hOVyUFYtx1H7 Q1FA22ar84y9OncG5c1R/906Buvj2/42n5oqUYImfzB1m0BScz02I442jZ30OfoQ aPzAwR/g43iAf4tej0OuD98WdgkAgRLYNsw5McR0uzylhV/tWi83lTKOmldGVlbX dUyz3zT9o1ev7dvOI+nt8N8Uj3vhI6+1oj1maJtJkB+ELBnF/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJI0P0J39FqxhiAG8w+sSdi5RjfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc2M2ZlNDMtMzU1Yi0z YTU3LWIxYTAtNzg2YmU3ZDI4YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCpIFGeRy9APfraUs48sYhl5yOzq/OYoB4U1w2SUrnXMXRGq3aWIOa sFuBrHEZ+2HA7uTCXuhPYpCo4zKfigmV0uUgd9smW3430GxX6Ya0QtaxPz3bVXbH 8UyKSdflfqIUZBtMTyWeJKgmOLZtYLRDurNNJEJqToGza3gVS2myS9uuRApELI0B Vo9gooaEUee4Q2LMllMhLQnHl8y/H4+YV2dAg+xaz6INfAj0YDwfBygP9fYP+0pb KpF4KO7sM+aU6xSX5AiwBk5jth3/QOmx2sj6bv/T2N5dWxdMAuDpZhaU6pKx0I/X L0jzy2xeZY9EEtkWPYNiV3OBDzreKkMN -----END CERTIFICATE-----Generated at Wed Jul 23 11:48:22 2025 by rpki-client