$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa File: a725409d-9980-3cc5-89e4-a1049996251a.roa (raw, json) Hash identifier: 2cp2hXaHkdjF3fMElkDKUu8E+Lk48uNMaTF4xNwJeZc= Subject key identifier: 3A:06:B2:D1:58:91:0F:13:2B:18:66:85:9C:98:71:1A:23:AE:84:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E1AFA7903F950427FD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397200 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:af:a7:90:3f:95:04:27:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=50610a02-676f-4a70-96a9-248999755a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:94:4c:34:94:78:0d:1a:34:83:24:f7:39: 80:dd:60:73:a0:96:02:65:e3:d4:60:8d:f3:eb:2c: 06:7a:91:38:19:61:ab:25:94:b8:61:e9:3a:bf:a0: 39:2b:0e:f6:21:14:ac:4b:cd:32:35:6b:f4:f7:94: ed:6d:fa:fd:a4:b6:ec:ed:9c:7a:67:62:9b:71:ed: 21:67:fe:0e:09:45:60:96:0c:00:99:46:47:52:a5: 8e:3d:00:24:8f:33:00:06:f5:3b:31:5c:bf:bb:d2: 36:6b:26:6b:2b:cf:26:42:9e:6f:8b:92:de:79:79: c4:c5:f8:85:81:56:cc:a1:da:5f:57:05:ae:45:c3: ea:b5:bd:f2:de:79:0b:d5:15:a4:fa:84:b7:5f:f3: ae:64:33:10:ed:90:51:b6:f3:69:66:5d:0d:94:4b: a3:cc:c3:11:1a:8b:77:9d:24:53:b9:e2:71:39:f4: c3:80:17:80:b3:0f:66:c8:76:6a:e4:af:4d:54:1a: 44:fe:1e:07:12:8e:cf:b4:b3:ca:ca:43:90:96:3c: 06:23:2d:51:89:7f:08:67:67:88:25:0d:a4:d2:ce: 9f:80:6d:da:56:c3:29:c2:5a:60:1d:c0:de:83:c2: 44:96:b1:e2:1d:65:4a:57:6c:0b:89:f7:58:c0:f6: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:B2:D1:58:91:0F:13:2B:18:66:85:9C:98:71:1A:23:AE:84:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c7:cf:69:3e:03:9d:ee:8c:bd:3a:e3:be:b5:92:5f:1a:9d: 28:b4:d6:f6:db:be:8e:ab:6c:f6:55:b9:5d:54:c1:79:ef:cc: b0:56:ce:7a:30:75:56:ba:34:1c:33:20:90:a6:81:e4:90:17: f8:17:84:76:0d:b0:e6:b3:fc:66:6c:bd:4b:41:09:8a:c4:5e: 45:e8:94:30:a8:d0:65:4e:95:69:84:f6:b4:fb:b1:17:3b:44: 5b:1e:24:1f:9d:eb:44:60:16:29:c9:16:e8:72:94:3a:ff:5c: 85:71:c6:fa:33:31:bb:92:c5:a2:05:43:10:03:0e:2d:f0:4d: ae:f5:d4:ab:bf:ee:48:2b:2a:60:5e:90:f3:e9:55:9e:45:b9: 59:13:fd:ca:79:51:88:28:2e:f6:b8:02:a2:b5:38:fd:ed:04: 12:75:48:77:63:0d:65:6f:aa:74:b6:7b:1d:1e:34:70:1c:be: 21:3a:e7:bd:1f:be:7d:59:89:13:04:f8:2f:3d:b7:f5:0d:da: 1e:21:93:3e:ad:f7:31:f6:65:ea:0e:d8:3e:8d:66:a0:88:42: 58:59:56:28:34:e4:83:04:ca:dd:b4:0a:35:3b:39:f5:54:18: 18:cc:60:24:fd:07:77:83:85:68:6e:e1:48:e6:87:85:3c:8e: 29:3f:f1:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOGvp5A/lQQn/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTA2MTBhMDItNjc2Zi00YTcwLTk2YTktMjQ4OTk5NzU1YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5OUTDSUeA0aNIMk9zmA3WBzoJYCZePUYI3z 6ywGepE4GWGrJZS4Yek6v6A5Kw72IRSsS80yNWv095Ttbfr9pLbs7Zx6Z2Kbce0h Z/4OCUVglgwAmUZHUqWOPQAkjzMABvU7MVy/u9I2ayZrK88mQp5vi5LeeXnExfiF gVbModpfVwWuRcPqtb3y3nkL1RWk+oS3X/OuZDMQ7ZBRtvNpZl0NlEujzMMRGot3 nSRTueJxOfTDgBeAsw9myHZq5K9NVBpE/h4HEo7PtLPKykOQljwGIy1RiX8IZ2eI JQ2k0s6fgG3aVsMpwlpgHcDeg8JElrHiHWVKV2wLifdYwPZxKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDoGstFYkQ8TKxhmhZyYcRojroRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcyNTQwOWQtOTk4MC0z Y2M1LTg5ZTQtYTEwNDk5OTYyNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkx89pPgOd7oy9OuO+tZJfGp0otNb2276Oq2z2VbldVMF578ywVs56 MHVWujQcMyCQpoHkkBf4F4R2DbDms/xmbL1LQQmKxF5F6JQwqNBlTpVphPa0+7EX O0RbHiQfnetEYBYpyRbocpQ6/1yFccb6MzG7ksWiBUMQAw4t8E2u9dSrv+5IKypg XpDz6VWeRblZE/3KeVGIKC72uAKitTj97QQSdUh3Yw1lb6p0tnsdHjRwHL4hOue9 H759WYkTBPgvPbf1DdoeIZM+rfcx9mXqDtg+jWagiEJYWVYoNOSDBMrdtAo1Ozn1 VBgYzGAk/Qd3g4VobuFI5oeFPI4pP/Hf -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:22 2025 by rpki-client