$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: NfDO9S5J9Avrf7bZ11d4RBrB5xIec29x9WcAhMp/qDU= Subject key identifier: A7:70:6A:D1:0B:7C:A2:38:6F:11:14:34:C2:EE:91:2D:9C:AF:9D:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E2D68C9F8FA961B25E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e2:d6:8c:9f:8f:a9:61:b2:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=8ed8764e-464d-403d-b11e-6e045979c96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:d2:e8:47:89:17:27:38:5d:6f:4b:ff:6b: 1c:07:22:3b:02:60:75:07:9c:2b:d7:8f:db:c3:98: 2c:54:12:4c:33:ef:75:01:00:c4:7a:5e:76:8f:cc: f2:76:49:8c:22:ca:4b:ab:6f:13:2c:da:2e:79:30: e5:f3:c2:8a:e5:ca:b1:c8:06:bb:23:fb:fd:6d:1d: 2c:0a:1c:b8:bd:34:d7:a9:86:10:1a:fc:51:b8:5f: 42:a9:68:e2:3f:f4:c2:0b:ac:d5:6b:95:2f:34:6c: f9:e7:ea:ad:f2:ce:9a:17:46:64:2b:cc:4a:60:f4: a5:5b:d4:f2:51:11:ad:fb:8f:33:10:a4:c6:68:30: ae:1a:02:48:a5:39:74:e0:e6:1a:73:cf:e5:6f:15: bf:9f:e6:33:39:07:c7:d3:83:ba:74:49:1d:6f:4c: bb:22:cc:6d:02:c9:a0:1f:b4:ef:1f:ec:9c:a8:a0: b3:07:4e:51:b9:8a:4d:4d:1e:66:89:de:c1:38:f8: ce:04:d3:36:20:31:ea:70:42:9f:a9:b3:63:fc:aa: 55:66:ea:82:c0:51:9f:bb:18:98:5a:65:d6:93:38: 4a:b7:32:a5:3b:6c:d1:cc:13:70:ef:6f:68:d5:b1: c0:b9:65:f2:10:f0:51:04:6a:28:d2:c4:67:3c:06: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:70:6A:D1:0B:7C:A2:38:6F:11:14:34:C2:EE:91:2D:9C:AF:9D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:10:b2:2e:38:d1:c4:1a:c7:c1:19:0a:54:87:ca:72:6e:a6: 0e:c9:01:fe:32:d3:42:62:ba:d1:c8:fe:53:ac:81:b8:60:08: 87:55:3d:95:eb:1b:fb:c6:4f:7c:20:6b:1c:3c:ab:99:8a:30: 22:84:bb:c0:c4:67:43:81:e3:f1:bd:fb:18:5a:0c:b6:94:26: 42:aa:cd:eb:ce:61:be:7f:ef:26:00:6a:41:9a:14:da:a2:2f: 62:0c:8a:7d:32:74:15:da:62:a8:2b:e4:c4:81:1f:d3:98:c7: 27:63:87:68:47:1e:c5:ea:1d:25:13:a3:4e:c1:dc:1c:f7:ae: e9:a7:be:e9:78:5a:6b:fb:e1:22:02:68:b2:3d:3c:4b:c0:d0: b9:a2:59:b0:92:82:8c:4e:5d:9f:d3:19:b3:c9:6b:d9:8d:c9: 18:6f:ee:df:65:d0:67:11:ce:92:1f:92:86:d1:df:e9:b2:05: 5b:98:7e:f3:df:7e:e5:4c:20:51:21:b8:b6:e8:36:82:0c:29: 48:ab:f7:43:9e:71:6d:46:30:c1:1b:20:81:ec:6a:5f:83:09: a3:a5:7f:a4:e4:86:a6:d3:f4:53:20:ff:6f:32:99:8f:9b:57: 9f:64:d4:39:45:42:b3:dc:3d:43:6f:7c:c0:6b:05:8e:8b:89: e6:aa:27:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOLWjJ+PqWGyXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OGVkODc2NGUtNDY0ZC00MDNkLWIxMWUtNmUwNDU5NzljOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r7S6EeJFyc4XW9L/2scByI7AmB1B5wr14/b w5gsVBJMM+91AQDEel52j8zydkmMIspLq28TLNoueTDl88KK5cqxyAa7I/v9bR0s Chy4vTTXqYYQGvxRuF9CqWjiP/TCC6zVa5UvNGz55+qt8s6aF0ZkK8xKYPSlW9Ty URGt+48zEKTGaDCuGgJIpTl04OYac8/lbxW/n+YzOQfH04O6dEkdb0y7IsxtAsmg H7TvH+ycqKCzB05RuYpNTR5mid7BOPjOBNM2IDHqcEKfqbNj/KpVZuqCwFGfuxiY WmXWkzhKtzKlO2zRzBNw729o1bHAuWXyEPBRBGoo0sRnPAb8awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKdwatELfKI4bxEUNMLukS2cr52tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7ELIuONHEGsfBGQpUh8pybqYOyQH+MtNCYrrRyP5TrIG4YAiHVT2V 6xv7xk98IGscPKuZijAihLvAxGdDgePxvfsYWgy2lCZCqs3rzmG+f+8mAGpBmhTa oi9iDIp9MnQV2mKoK+TEgR/TmMcnY4doRx7F6h0lE6NOwdwc967pp77peFpr++Ei AmiyPTxLwNC5olmwkoKMTl2f0xmzyWvZjckYb+7fZdBnEc6SH5KG0d/psgVbmH7z 337lTCBRIbi26DaCDClIq/dDnnFtRjDBGyCB7GpfgwmjpX+k5Iam0/RTIP9vMpmP m1efZNQ5RUKz3D1Db3zAawWOi4nmqicO -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:15 2025 by rpki-client