$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: Q093PKjXTHFoPpQ9g19hj9XwgXcQEcIdXHtG9nxYh0Q= Subject key identifier: E3:F7:C7:BA:73:5D:BA:27:18:43:2B:79:D1:56:2E:E4:31:A5:83:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E4531F133D2F82083B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:53:1f:13:3d:2f:82:08:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1a9f4745-c172-46b7-aa2a-8a8756cf1b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:38:41:dd:96:b1:2d:33:c0:64:4e:9b:ca: 68:28:01:c4:88:81:84:76:1e:65:c8:ce:3b:7f:79: 90:64:17:d2:8e:75:6a:62:59:d2:06:bc:25:a6:8a: 29:3f:73:98:ed:5c:d0:c0:17:63:c6:53:ff:7b:c5: 9a:21:0d:03:d2:ef:c6:5b:23:21:de:b2:9b:4e:a7: 8f:4c:14:55:dd:dd:26:e9:7d:1a:0c:27:64:10:0f: 08:1c:2c:0d:c4:f1:b1:b8:20:a2:3d:50:13:97:4c: 3b:02:ef:11:ca:d4:ee:a6:7c:2a:ca:76:b3:e8:2e: 67:0c:fa:50:c2:3c:cd:dd:3a:8b:c4:ea:70:d3:a9: a4:09:fc:47:a9:b0:44:c8:a1:b8:44:c6:22:7c:c8: b3:02:28:da:19:53:f5:55:66:3b:c3:c4:ef:38:0d: 26:81:86:ec:ff:d2:45:91:16:35:55:3d:a3:d7:f1: 08:4d:49:a5:6a:d1:de:30:a7:b0:8b:7e:00:40:6b: ab:e1:78:a8:b5:04:23:ba:13:68:dd:1d:e1:af:55: 9a:78:77:8d:03:fc:bd:d5:e5:48:80:24:82:f8:96: c9:0d:b3:62:38:e5:fd:97:e8:61:d9:14:8a:46:3c: 44:b5:11:89:e3:de:55:1f:d6:0a:88:71:c3:0e:18: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:C7:BA:73:5D:BA:27:18:43:2B:79:D1:56:2E:E4:31:A5:83:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b8:be:8f:5f:8d:fa:31:bf:fa:3b:7a:69:a7:30:42:e0:55: 75:5e:3c:e3:6f:45:3e:3b:22:13:87:ed:04:b4:c6:77:eb:ea: ce:11:d4:3d:c5:0b:0e:b5:0e:5a:0f:7c:b8:4d:b0:55:c1:cc: b1:d8:4c:38:03:8e:ae:d5:61:b2:af:f9:49:dd:11:06:14:bb: e2:91:91:9b:01:91:24:82:c2:59:5b:3b:21:0e:fb:e6:a8:61: c5:67:77:19:83:65:88:c0:46:0e:d8:cc:5c:56:07:50:a2:54: c6:14:86:eb:25:72:10:8a:8f:7a:bd:3d:5b:ff:34:bf:c5:62: 42:4a:a2:a9:c6:03:7b:02:3b:01:01:be:b5:5c:12:84:49:7a: 39:6e:6c:ae:cb:e9:36:7e:6d:38:cf:1a:0f:70:2e:3d:e4:45: e5:2a:c3:0f:1a:9a:a3:31:ff:09:f8:7e:17:90:92:6a:c5:a9: 3c:2b:20:f2:bb:38:36:9f:23:8c:7f:8e:30:69:61:c2:17:17: a7:9c:8b:e4:8c:a7:0f:d4:85:06:46:9f:d2:7a:4e:ae:a8:04: 57:db:30:33:c7:5a:5f:6c:15:20:c9:53:e8:67:80:28:0a:1a: 3b:cb:23:a1:79:04:c7:80:9b:d7:db:63:53:e6:df:37:9e:cb: a2:c8:90:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcORTHxM9L4IIO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MWE5ZjQ3NDUtYzE3Mi00NmI3LWFhMmEtOGE4NzU2Y2YxYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiE4Qd2WsS0zwGROm8poKAHEiIGEdh5lyM47 f3mQZBfSjnVqYlnSBrwlpoopP3OY7VzQwBdjxlP/e8WaIQ0D0u/GWyMh3rKbTqeP TBRV3d0m6X0aDCdkEA8IHCwNxPGxuCCiPVATl0w7Au8RytTupnwqynaz6C5nDPpQ wjzN3TqLxOpw06mkCfxHqbBEyKG4RMYifMizAijaGVP1VWY7w8TvOA0mgYbs/9JF kRY1VT2j1/EITUmlatHeMKewi34AQGur4XiotQQjuhNo3R3hr1WaeHeNA/y91eVI gCSC+JbJDbNiOOX9l+hh2RSKRjxEtRGJ495VH9YKiHHDDhgEewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOP3x7pzXbonGEMredFWLuQxpYMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvuL6PX436Mb/6O3pppzBC4FV1Xjzjb0U+OyITh+0EtMZ36+rOEdQ9 xQsOtQ5aD3y4TbBVwcyx2Ew4A46u1WGyr/lJ3REGFLvikZGbAZEkgsJZWzshDvvm qGHFZ3cZg2WIwEYO2MxcVgdQolTGFIbrJXIQio96vT1b/zS/xWJCSqKpxgN7AjsB Ab61XBKESXo5bmyuy+k2fm04zxoPcC495EXlKsMPGpqjMf8J+H4XkJJqxak8KyDy uzg2nyOMf44waWHCFxennIvkjKcP1IUGRp/Sek6uqARX2zAzx1pfbBUgyVPoZ4Ao Cho7yyOheQTHgJvX22NT5t83nsuiyJAR -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:32 2025 by rpki-client