$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa File: d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa (raw, json) Hash identifier: GaHHc+oCBRct7AdhmzH9qbN3CgrcFr+zUX1FyyENwFU= Subject key identifier: 2A:F1:0A:09:03:B3:6F:C8:71:F1:69:50:BE:17:DE:9D:48:28:19:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E113859E038A209635C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397197 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e1:13:85:9e:03:8a:20:96:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=379232e8-37a6-423d-8f45-7c4881641605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:54:0a:53:e5:44:fb:80:14:32:49:b9:a9: 50:bf:57:f5:81:d5:95:c5:64:42:c6:97:8b:d8:a8: 9b:bf:7c:f4:a7:54:82:e9:bb:2e:27:88:93:78:37: 5e:a9:a7:d2:2e:d3:6a:15:a7:d5:c2:3f:66:81:21: be:0a:6c:da:79:04:04:39:46:f5:2a:6b:65:60:64: 49:05:21:58:1c:75:df:f9:c2:42:dd:4d:e9:f2:19: 1d:11:36:2b:4b:b3:de:6b:e7:f0:ab:8a:ac:69:5d: 9a:26:4f:64:95:48:20:eb:a2:79:50:be:51:49:99: f6:1e:2e:18:c4:17:c9:a8:5e:40:5c:56:0b:4b:5e: 04:90:e9:a8:64:e2:33:47:ef:75:4d:56:4b:da:2f: 82:1a:16:ed:1e:0b:8c:fc:bf:3e:de:5e:cc:36:0a: a4:c3:b4:c3:a6:f9:4d:dc:c3:10:9a:14:10:6d:8d: 17:e3:be:91:c2:54:34:cf:eb:8a:a9:09:e0:d0:9b: b0:82:4e:47:50:61:97:4f:14:d8:41:1f:64:f9:67: 21:e6:44:38:cd:e2:1b:d7:96:cf:b3:fc:0b:2c:b6: b2:9f:f2:4f:9d:c4:0f:69:0e:e0:f3:7e:43:53:e9: cf:6c:00:ae:b7:ef:c5:bb:7b:14:cc:36:0a:d1:c4: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:0A:09:03:B3:6F:C8:71:F1:69:50:BE:17:DE:9D:48:28:19:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:98:b7:5c:26:3e:f5:6b:f2:b5:67:1b:bd:d5:11:83:24:f6: 07:76:93:8b:44:9c:70:14:9b:be:a9:f0:6c:3b:d8:75:0b:7d: 00:08:5d:68:ed:02:fd:0f:27:16:9b:10:2a:64:20:df:2a:cf: bc:fd:25:72:26:4a:80:64:79:f2:e5:99:60:39:e3:e4:1c:3f: 6b:f0:eb:1d:23:be:c0:d0:37:05:ac:4e:c2:9f:8e:e2:44:be: 12:f1:c1:4a:c8:f2:d8:be:f5:b0:65:5e:93:5e:8a:67:aa:3d: ba:64:af:a5:86:05:b4:b9:55:28:74:27:08:12:e4:53:0a:04: 04:41:55:58:6f:55:92:3b:32:c2:78:5b:1f:c0:88:82:d2:46: 70:2d:b6:40:3f:71:a6:bc:7a:bc:24:d8:6f:30:32:29:6b:6f: 7f:38:93:3e:ac:b7:32:15:0a:38:82:d2:cf:2c:fd:2d:c8:fd: fa:ca:10:6b:21:fe:7d:ea:15:17:ab:a6:64:3b:d1:f8:88:08: d9:83:9d:dd:24:7d:4b:7d:12:ce:ac:3a:c9:99:2a:d7:3c:e0: f0:40:5d:86:0f:9c:14:b9:8a:15:4c:e6:ef:2a:ce:1f:45:ec: 50:5b:88:14:cf:28:c6:8b:a8:d4:70:6b:13:2d:84:9e:de:87: ea:c2:68:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOEThZ4DiiCWNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk Mzc5MjMyZTgtMzdhNi00MjNkLThmNDUtN2M0ODgxNjQxNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkslUClPlRPuAFDJJualQv1f1gdWVxWRCxpeL 2Kibv3z0p1SC6bsuJ4iTeDdeqafSLtNqFafVwj9mgSG+CmzaeQQEOUb1KmtlYGRJ BSFYHHXf+cJC3U3p8hkdETYrS7Pea+fwq4qsaV2aJk9klUgg66J5UL5RSZn2Hi4Y xBfJqF5AXFYLS14EkOmoZOIzR+91TVZL2i+CGhbtHguM/L8+3l7MNgqkw7TDpvlN 3MMQmhQQbY0X476RwlQ0z+uKqQng0Juwgk5HUGGXTxTYQR9k+Wch5kQ4zeIb15bP s/wLLLayn/JPncQPaQ7g835DU+nPbACut+/Fu3sUzDYK0cRfSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCrxCgkDs2/IcfFpUL4X3p1IKBkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBhNmY2OWItYzc5ZS0z YWE2LWEyOWYtZTE2NTU3YmU4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXmLdcJj71a/K1Zxu91RGDJPYHdpOLRJxwFJu+qfBsO9h1C30ACF1o 7QL9DycWmxAqZCDfKs+8/SVyJkqAZHny5ZlgOePkHD9r8OsdI77A0DcFrE7Cn47i RL4S8cFKyPLYvvWwZV6TXopnqj26ZK+lhgW0uVUodCcIEuRTCgQEQVVYb1WSOzLC eFsfwIiC0kZwLbZAP3GmvHq8JNhvMDIpa29/OJM+rLcyFQo4gtLPLP0tyP36yhBr If596hUXq6ZkO9H4iAjZg53dJH1LfRLOrDrJmSrXPODwQF2GD5wUuYoVTObvKs4f RexQW4gUzyjGi6jUcGsTLYSe3ofqwmjN -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:47 2025 by rpki-client