$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa File: bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa (raw, json) Hash identifier: b7DazNjP9TEolDsM79XJf8M/u5zTFtFyL3Rd/DQrIx4= Subject key identifier: D9:B4:45:76:21:1A:B5:71:88:1E:32:52:50:5C:73:DD:E0:68:22:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E6D017DA643C1261F580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396584 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e6:d0:17:da:64:3c:12:61:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=702488b6-b81f-4dc5-873b-80432aa67cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:c5:0f:f6:ca:15:46:ee:75:31:71:27:90: 6e:75:12:e4:33:66:87:07:c2:26:3e:16:be:52:f2: 14:c9:52:f6:ec:7f:04:01:79:3f:0c:af:e9:85:87: f9:27:8c:16:3f:46:49:a8:51:9e:f3:69:fe:af:f7: c2:d1:3a:b8:4b:21:81:62:76:ac:cd:0e:dd:56:93: eb:46:e7:b5:a5:35:bb:e1:3d:44:23:a2:88:21:ce: d9:aa:9b:f3:b0:14:4f:d7:30:d4:99:fa:00:b2:a7: dc:ca:b6:0d:3b:76:3f:f6:fc:93:96:08:ee:67:bc: 7e:85:c9:98:d9:b7:5e:80:c9:74:58:49:4d:7b:04: e4:78:b4:e9:60:02:99:7e:c0:79:65:07:b7:be:05: fc:67:21:87:70:9a:7b:5a:2a:e7:d5:88:72:ad:af: 29:bc:28:48:6d:91:a4:6d:f3:87:40:b4:b9:c3:fe: 67:a4:2b:a8:d7:ba:64:8d:b9:93:a5:a7:65:c5:4b: 38:d7:69:e6:db:15:e1:fb:33:1c:db:d6:89:9b:0e: 6c:62:af:60:5a:92:49:11:0d:a3:51:27:10:ef:e7: 25:e3:76:43:b3:22:dd:7d:01:54:fc:1a:6e:10:9e: 94:8b:4d:48:3c:82:ed:39:eb:f0:3b:d4:3d:00:c7: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:45:76:21:1A:B5:71:88:1E:32:52:50:5C:73:DD:E0:68:22:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c6:91:17:3e:c4:eb:ef:b2:e8:fc:ac:20:c7:7a:31:1d:38: e7:eb:9b:6a:68:21:2c:56:be:da:bb:3c:8f:e3:90:2f:7f:1b: 3c:3d:07:7d:bd:28:a9:0f:cb:bf:63:fc:dd:c4:59:fb:be:81: fd:7a:e9:c5:23:e3:5a:16:16:07:16:c7:6c:86:d8:ad:6c:27: 4f:2e:2f:f9:14:9c:e9:55:f6:2b:0c:87:89:f4:09:76:3f:e2: 81:2e:24:75:28:b4:9c:ab:83:63:68:28:de:ce:7b:4c:88:f6: 47:24:d8:79:b8:3b:09:8a:56:fb:0f:49:73:e9:f9:7f:ca:a1: d9:ef:e9:c0:64:9f:7b:7f:44:62:0c:b5:05:55:46:a2:6c:56: cc:bc:80:11:d7:83:06:7e:c9:10:0a:0e:d4:4f:26:35:4c:3b: 08:c4:0a:49:4c:e6:6c:57:76:62:24:ba:4d:1e:5f:41:8f:71: 69:bd:cc:8b:02:d9:94:26:ca:b0:01:9c:4b:d4:37:af:92:04: 1b:74:df:b5:1b:16:11:e0:a8:55:b6:01:fb:ef:0f:02:87:6b: 84:19:5c:a9:98:45:5d:16:b0:41:c9:1a:32:32:92:0c:bc:f8: d0:2f:93:7c:91:8e:cf:b4:bc:af:19:97:e6:4a:77:f8:65:06: 28:9a:a1:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcObQF9pkPBJh9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NzAyNDg4YjYtYjgxZi00ZGM1LTg3M2ItODA0MzJhYTY3Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8bFD/bKFUbudTFxJ5BudRLkM2aHB8ImPha+ UvIUyVL27H8EAXk/DK/phYf5J4wWP0ZJqFGe82n+r/fC0Tq4SyGBYnaszQ7dVpPr Rue1pTW74T1EI6KIIc7ZqpvzsBRP1zDUmfoAsqfcyrYNO3Y/9vyTlgjuZ7x+hcmY 2bdegMl0WElNewTkeLTpYAKZfsB5ZQe3vgX8ZyGHcJp7Wirn1Yhyra8pvChIbZGk bfOHQLS5w/5npCuo17pkjbmTpadlxUs412nm2xXh+zMc29aJmw5sYq9gWpJJEQ2j UScQ7+cl43ZDsyLdfQFU/BpuEJ6Ui01IPILtOevwO9Q9AMdQPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNm0RXYhGrVxiB4yUlBcc93gaCIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmZhNTkxOTEtYjgxYi0z ODJiLWFmZmYtMGNiNWRkOGVjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzxpEXPsTr77Lo/Kwgx3oxHTjn65tqaCEsVr7auzyP45Avfxs8PQd9 vSipD8u/Y/zdxFn7voH9eunFI+NaFhYHFsdshtitbCdPLi/5FJzpVfYrDIeJ9Al2 P+KBLiR1KLScq4NjaCjezntMiPZHJNh5uDsJilb7D0lz6fl/yqHZ7+nAZJ97f0Ri DLUFVUaibFbMvIAR14MGfskQCg7UTyY1TDsIxApJTOZsV3ZiJLpNHl9Bj3FpvcyL AtmUJsqwAZxL1DevkgQbdN+1GxYR4KhVtgH77w8Ch2uEGVypmEVdFrBByRoyMpIM vPjQL5N8kY7PtLyvGZfmSnf4ZQYomqEe -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:27 2025 by rpki-client