$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa File: cb33b16f-17fb-389e-941e-cf209709f3d7.roa (raw, json) Hash identifier: k4WZdTZ1t2/PTXvm35GEx33p13+V5gdCcp/hQ2HaB/Q= Subject key identifier: CA:DA:D0:56:6A:80:9D:0E:F5:21:D8:BE:A7:E9:82:4F:29:44:B7:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E1737A4EE6B9BBA42B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396615 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:73:7a:4e:e6:b9:bb:a4:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9d3cc09c-d364-4f81-8ff5-1f2fe91c0324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:d0:be:c4:02:46:f9:cc:5a:33:7e:01:8d: ba:89:bb:8a:7f:1e:56:e2:f4:97:e2:4c:ac:f4:60: eb:81:39:69:b0:91:fb:4b:d0:1d:da:3f:68:d1:1e: e7:64:0c:6c:24:5b:d5:59:2f:60:7e:80:58:6f:d9: 3e:56:01:4c:44:ac:89:e0:90:95:4c:6b:3a:91:d2: 67:d5:07:4e:cb:6b:11:7f:7a:8d:51:ec:0c:6f:18: 69:d3:e5:d9:07:f5:69:d9:50:14:5f:18:78:f6:bd: 36:48:0b:aa:74:0e:06:9f:69:4f:19:41:6d:7f:ca: a7:ee:81:1d:d6:74:9f:4a:cb:4a:25:3c:65:4a:0c: 13:e6:8b:df:ee:fa:12:3a:20:c6:8f:fd:f5:49:94: c4:cf:c2:92:7a:8c:29:0a:f3:a2:97:4f:a6:be:1e: f3:1b:96:52:e3:e0:a0:60:a7:67:9c:9f:2b:e1:30: a3:4c:38:c1:1e:10:78:e3:3a:0d:07:76:8b:a2:f1: fc:31:88:b6:18:cc:9d:da:7a:0c:48:c5:6c:7d:c6: ba:f2:9d:88:3a:3e:07:75:0c:f6:9c:a2:57:62:5e: f5:3b:fe:33:a5:23:f6:ca:b2:96:fc:c3:7a:fa:e6: 24:17:f6:d7:2c:67:b7:da:ab:3c:21:cd:ef:a1:12: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:D0:56:6A:80:9D:0E:F5:21:D8:BE:A7:E9:82:4F:29:44:B7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb33b16f-17fb-389e-941e-cf209709f3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5f:00:4f:26:fe:4b:e7:53:8a:d4:48:d1:14:1c:65:7c:0c: ae:26:08:6a:4a:47:b7:26:ce:17:78:11:31:98:36:c3:4c:2a: 37:7d:d6:87:78:aa:61:46:9e:96:65:fc:ae:e7:6b:20:1a:a1: 7b:a7:8e:28:ea:06:b9:fd:4c:16:51:db:89:1f:a5:48:b3:56: 6d:8c:69:c4:69:d3:24:5e:4c:3f:d3:c6:cc:73:ca:39:09:2e: 4e:33:37:1f:1a:f6:65:07:2e:1b:5e:8e:fd:b6:02:3d:78:57: f9:e8:c3:56:5c:98:9b:ef:ec:f6:e8:83:06:d6:42:e0:74:5b: e9:93:95:71:5f:52:39:bd:9d:cd:15:18:d2:8f:08:4d:f6:48: 60:b0:d6:76:96:99:99:c7:1d:a1:28:23:c5:b8:4e:97:a7:4f: c3:cd:a8:71:03:10:3c:5e:47:8d:e8:29:3e:ce:35:fc:a3:e6: 0a:e6:d4:21:24:2b:c2:d0:25:7d:e6:d3:7c:e9:d1:6f:59:f0: 52:58:2d:25:e8:9d:7b:94:31:47:ca:ad:d4:df:a6:dd:ae:4d: 5c:56:dc:0f:71:3d:dc:f3:43:2a:b7:32:3c:12:d7:1b:db:4b: 5c:0c:d7:d3:7a:f4:fd:d9:cc:8b:f7:b0:a0:14:76:9d:fd:24: de:ee:42:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOFzek7mubukK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWQzY2MwOWMtZDM2NC00ZjgxLThmZjUtMWYyZmU5MWMwMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TjQvsQCRvnMWjN+AY26ibuKfx5W4vSX4kys 9GDrgTlpsJH7S9Ad2j9o0R7nZAxsJFvVWS9gfoBYb9k+VgFMRKyJ4JCVTGs6kdJn 1QdOy2sRf3qNUewMbxhp0+XZB/Vp2VAUXxh49r02SAuqdA4Gn2lPGUFtf8qn7oEd 1nSfSstKJTxlSgwT5ovf7voSOiDGj/31SZTEz8KSeowpCvOil0+mvh7zG5ZS4+Cg YKdnnJ8r4TCjTDjBHhB44zoNB3aLovH8MYi2GMyd2noMSMVsfca68p2IOj4HdQz2 nKJXYl71O/4zpSP2yrKW/MN6+uYkF/bXLGe32qs8Ic3voRJy0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMra0FZqgJ0O9SHYvqfpgk8pRLcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2IzM2IxNmYtMTdmYi0z ODllLTk0MWUtY2YyMDk3MDlmM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5XwBPJv5L51OK1EjRFBxlfAyuJghqSke3Js4XeBExmDbDTCo3fdaH eKphRp6WZfyu52sgGqF7p44o6ga5/UwWUduJH6VIs1ZtjGnEadMkXkw/08bMc8o5 CS5OMzcfGvZlBy4bXo79tgI9eFf56MNWXJib7+z26IMG1kLgdFvpk5VxX1I5vZ3N FRjSjwhN9khgsNZ2lpmZxx2hKCPFuE6Xp0/DzahxAxA8XkeN6Ck+zjX8o+YK5tQh JCvC0CV95tN86dFvWfBSWC0l6J17lDFHyq3U36bdrk1cVtwPcT3c80MqtzI8Etcb 20tcDNfTevT92cyL97CgFHad/STe7kIp -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:54 2025 by rpki-client