$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa File: aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa (raw, json) Hash identifier: voVKq+imYf8hGlvXZgqVbgRBC1vOl2zSW7yedA/bvaY= Subject key identifier: 83:4D:C6:95:DD:04:01:82:8C:1D:10:ED:C3:62:BC:38:F2:9C:EF:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E3D77EFFCE6E996334D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396574 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e3:d7:7e:ff:ce:6e:99:63:34:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=132ddfed-ce5b-495a-9170-394120151324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:60:79:1c:f5:1f:2c:14:87:68:54:69:35: 5a:49:45:f1:b8:81:8b:48:4a:a3:e9:6f:80:a3:b8: 84:e0:f1:7c:4a:78:54:8c:77:7d:57:5f:7c:44:97: 41:64:3a:25:a9:f2:9e:0e:31:7b:23:15:93:ae:86: 1f:e8:97:3d:a8:4a:48:d3:86:c3:bc:f9:31:89:ce: a4:e6:bc:73:3d:79:0b:2e:34:05:f2:0f:75:cd:a8: 1d:14:7a:52:30:4f:e4:25:51:ce:db:ad:6a:cf:5b: 7e:86:a1:a4:2c:9d:99:c3:0c:37:ab:e6:8d:e7:d3: 82:e3:03:f5:68:e6:fb:e7:da:22:5d:d9:9f:48:8a: 2f:1a:0a:69:88:ca:66:e4:26:a3:37:c0:b4:4b:0d: 9f:89:91:fc:9e:5a:ee:9d:df:5e:f5:80:df:b5:dc: d9:56:a9:3f:e4:f9:d1:e3:ed:7b:7c:49:d8:3e:31: ae:38:39:43:94:47:99:10:a7:5c:e7:d0:b2:52:73: ba:04:4d:76:3d:40:fb:37:ad:68:e5:5f:43:11:52: 45:d1:a2:02:cf:af:35:2e:1d:6d:e8:4b:6c:d8:fa: 2a:80:d3:9b:c2:0a:ca:2c:1e:42:85:fa:c0:b0:d1: 7c:cb:a1:7f:f2:1a:7b:9e:c3:24:e7:85:8c:09:b3: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:C6:95:DD:04:01:82:8C:1D:10:ED:C3:62:BC:38:F2:9C:EF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aba2a54b-6e76-3f58-97c4-2e3acaeff9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3c:65:91:fa:29:77:10:6d:48:dc:1f:86:1d:d4:1e:05:e1: 37:33:22:94:42:b1:9b:a9:a7:fb:fa:84:95:ed:6d:7c:13:e7: f4:83:c6:d1:2a:1f:91:6b:c2:d3:9d:6e:79:36:35:a5:35:92: e0:0d:d7:44:92:b8:92:e4:a4:6a:1d:83:ac:2e:07:e7:cf:5c: d7:2d:77:8c:77:41:90:8d:5a:72:ea:59:1f:c7:ed:9d:a1:ee: a8:4e:b9:e2:a7:fe:15:57:01:ba:98:9e:05:79:fd:73:a0:4f: 69:d5:35:c9:01:79:8a:cf:2c:45:74:f5:ba:dc:de:c7:42:35: f5:53:47:46:e2:b9:b7:b7:20:13:bd:ef:1b:d0:45:0d:c0:aa: 34:74:e4:4a:97:78:03:81:56:2a:c0:23:f7:b1:4e:24:9f:77: 60:f3:5a:06:9f:19:5c:6e:24:3b:48:29:75:e7:47:88:3f:6e: 5b:32:51:8a:7b:4f:37:6e:9c:bd:71:5c:05:d6:9b:02:85:37: 52:7a:10:a1:7f:aa:4e:cc:f8:9f:4d:41:71:21:ac:3e:09:1d: cd:ae:d4:ca:e4:a1:1f:3b:92:41:d8:e8:d5:21:f0:4c:7f:4a: 2d:4f:f0:02:2d:26:e2:aa:7e:df:fd:e7:b3:4a:e4:f3:5a:ec: cc:bf:41:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOPXfv/ObpljNNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTMyZGRmZWQtY2U1Yi00OTVhLTkxNzAtMzk0MTIwMTUxMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UNgeRz1HywUh2hUaTVaSUXxuIGLSEqj6W+A o7iE4PF8SnhUjHd9V198RJdBZDolqfKeDjF7IxWTroYf6Jc9qEpI04bDvPkxic6k 5rxzPXkLLjQF8g91zagdFHpSME/kJVHO261qz1t+hqGkLJ2Zwww3q+aN59OC4wP1 aOb759oiXdmfSIovGgppiMpm5CajN8C0Sw2fiZH8nlrund9e9YDftdzZVqk/5PnR 4+17fEnYPjGuODlDlEeZEKdc59CyUnO6BE12PUD7N61o5V9DEVJF0aICz681Lh1t 6Ets2PoqgNObwgrKLB5ChfrAsNF8y6F/8hp7nsMk54WMCbNZ1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFINNxpXdBAGCjB0Q7cNivDjynO+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWJhMmE1NGItNmU3Ni0z ZjU4LTk3YzQtMmUzYWNhZWZmOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXPGWR+il3EG1I3B+GHdQeBeE3MyKUQrGbqaf7+oSV7W18E+f0g8bR Kh+Ra8LTnW55NjWlNZLgDddEkriS5KRqHYOsLgfnz1zXLXeMd0GQjVpy6lkfx+2d oe6oTrnip/4VVwG6mJ4Fef1zoE9p1TXJAXmKzyxFdPW63N7HQjX1U0dG4rm3tyAT ve8b0EUNwKo0dORKl3gDgVYqwCP3sU4kn3dg81oGnxlcbiQ7SCl150eIP25bMlGK e083bpy9cVwF1psChTdSehChf6pOzPifTUFxIaw+CR3NrtTK5KEfO5JB2OjVIfBM f0otT/ACLSbiqn7f/eezSuTzWuzMv0FJ -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:04 2025 by rpki-client