$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: 6DB4dYkN1hagbIP5t7nXF1A2CbV3Vv2i/VbGG+M1VUY= Subject key identifier: 09:55:8C:41:61:F0:04:95:A4:92:2C:58:38:E4:07:7E:8B:3A:52:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E664BC656F72BD6845C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e6:64:bc:65:6f:72:bd:68:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=5fa3c5cc-ee35-41a4-afca-2cfdedd7b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:92:64:4b:b3:fb:92:ac:7b:6c:36:71:d8:9b: d1:f4:ca:37:cf:e0:62:42:9d:59:c2:73:e5:87:95: e5:d3:30:63:7d:07:c0:74:cc:95:c8:6a:3d:04:48: 65:ed:c5:a1:4f:a2:cb:bc:fc:7b:4a:ee:c9:f2:b5: d1:0d:13:cc:f3:80:94:29:f2:be:79:7e:32:a0:f2: 1d:d6:8e:18:01:28:9e:23:8a:f1:a4:57:91:cc:8b: 66:e6:f9:56:eb:15:85:dd:4d:bc:c6:7d:4e:2e:96: 29:f7:47:de:75:b5:71:41:13:39:48:aa:18:0d:e6: 6a:60:2c:c6:fb:0c:21:7d:6f:f6:56:93:27:31:f7: 3e:dc:df:83:e0:ad:53:d6:cf:d7:d8:f2:17:33:ec: ae:25:6e:83:fc:3c:d7:92:16:ac:88:41:ff:21:7c: 4c:4d:14:8d:51:3b:95:67:01:54:6b:7e:1d:c8:20: d8:c0:c7:49:e5:20:19:6b:4f:74:a7:8c:80:c5:2a: f5:e2:f3:2b:ab:25:7f:31:af:91:bf:a1:94:40:0b: b3:ff:20:ae:43:90:70:08:c4:d2:46:46:19:62:c5: c9:c5:a9:6c:76:17:65:3c:26:97:b2:6e:70:60:4d: 27:01:58:d3:ef:cf:6c:00:fc:0d:7e:5d:4c:20:2d: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:8C:41:61:F0:04:95:A4:92:2C:58:38:E4:07:7E:8B:3A:52:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8e:b7:1f:93:71:8f:90:95:c3:62:f7:d3:24:66:f4:5b:ba: ea:90:12:50:60:a6:98:fc:10:d7:4c:aa:81:40:7d:4d:94:91: cd:75:f3:1e:3e:1f:6f:c3:14:17:4d:6c:6a:72:67:d0:86:61: b4:f4:de:93:47:2d:7c:75:46:b6:c2:19:8e:3f:30:6f:95:f3: 52:03:08:8d:0f:2f:02:57:19:64:3d:7a:6a:81:f7:e0:e8:c6: b4:06:23:40:c3:43:7d:9c:71:b3:3c:e7:71:79:16:90:a0:92: 2e:48:18:df:03:da:9d:9b:c6:0e:c5:cf:62:4d:37:8c:3c:d5: f7:43:8e:aa:33:88:16:75:cf:74:13:82:11:ed:8e:c5:15:30: c4:d2:dc:3c:d2:5b:4f:1e:cf:de:3c:52:af:a7:ca:cf:5c:24: 80:30:f1:76:52:cd:c8:d0:b0:c2:5a:45:92:a7:e2:44:2b:d2: 13:60:1f:bc:da:1a:09:0a:90:9e:d0:e7:d3:2e:26:e6:74:80: 6e:6c:64:8a:7f:9b:fe:59:5a:82:df:6f:cb:7c:89:c9:ba:a7: 8d:ec:21:64:6c:35:0d:aa:8b:62:ae:62:dc:1a:7a:2f:0e:29: 77:33:20:ce:12:fa:a4:52:24:60:9c:8c:3f:7b:77:1c:e4:9b: 88:99:93:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOZkvGVvcr1oRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NWZhM2M1Y2MtZWUzNS00MWE0LWFmY2EtMmNmZGVkZDdiODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95JkS7P7kqx7bDZx2JvR9Mo3z+BiQp1ZwnPl h5Xl0zBjfQfAdMyVyGo9BEhl7cWhT6LLvPx7Su7J8rXRDRPM84CUKfK+eX4yoPId 1o4YASieI4rxpFeRzItm5vlW6xWF3U28xn1OLpYp90fedbVxQRM5SKoYDeZqYCzG +wwhfW/2VpMnMfc+3N+D4K1T1s/X2PIXM+yuJW6D/DzXkhasiEH/IXxMTRSNUTuV ZwFUa34dyCDYwMdJ5SAZa090p4yAxSr14vMrqyV/Ma+Rv6GUQAuz/yCuQ5BwCMTS RkYZYsXJxalsdhdlPCaXsm5wYE0nAVjT789sAPwNfl1MIC3dFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAlVjEFh8ASVpJIsWDjkB36LOlKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbjrcfk3GPkJXDYvfTJGb0W7rqkBJQYKaY/BDXTKqBQH1NlJHNdfMe Ph9vwxQXTWxqcmfQhmG09N6TRy18dUa2whmOPzBvlfNSAwiNDy8CVxlkPXpqgffg 6Ma0BiNAw0N9nHGzPOdxeRaQoJIuSBjfA9qdm8YOxc9iTTeMPNX3Q46qM4gWdc90 E4IR7Y7FFTDE0tw80ltPHs/ePFKvp8rPXCSAMPF2Us3I0LDCWkWSp+JEK9ITYB+8 2hoJCpCe0OfTLibmdIBubGSKf5v+WVqC32/LfInJuqeN7CFkbDUNqotirmLcGnov Dil3MyDOEvqkUiRgnIw/e3cc5JuImZMN -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:30 2025 by rpki-client