$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa File: d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa (raw, json) Hash identifier: VQgTgxz4+hcj2grgO05Wcwp0xhJqVqzyqia0rQAmlAQ= Subject key identifier: 89:67:DA:15:D9:0F:9D:3B:76:72:DA:DB:23:81:E1:7A:BF:1A:03:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E09991A1797561289380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396608 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e0:99:91:a1:79:75:61:28:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=fc0998ab-c5bf-4015-a4a0-5eda5aee22fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:e2:2b:0e:8c:6e:3b:04:b8:4f:9d:cf:35: 59:14:19:66:01:62:60:c9:2b:83:82:b4:d9:d7:c8: cc:d9:b3:d0:01:7d:31:96:46:25:36:20:d4:54:d1: f1:97:93:76:a7:1b:7d:95:09:58:bd:1b:5d:60:a8: 3f:fd:ea:4d:e7:77:70:d5:64:4e:a8:94:47:60:85: 80:63:7a:c4:3b:41:51:77:2a:8a:32:86:3b:72:fe: a3:0d:c3:0d:1d:91:07:be:80:b5:1b:48:5c:64:23: 87:e0:84:f4:cc:c5:10:5e:5e:8e:a4:56:38:70:81: c8:41:bf:31:e0:23:e4:5f:b6:f8:21:90:59:4e:99: f7:fc:f9:01:3c:e5:26:2f:ca:67:2e:aa:de:ea:38: 2d:0e:db:29:65:10:10:3f:d7:d8:15:12:b3:22:f0: d2:be:c2:da:43:75:44:92:57:42:8e:0f:9a:9b:2a: ef:f3:fa:84:e1:88:3e:72:8d:1a:51:f3:0a:f3:fa: 34:3d:51:b7:8a:ce:d2:b0:88:b2:54:13:52:0e:11: 66:b0:28:cf:0b:d4:61:3f:1a:ea:a4:13:17:73:3f: 77:1b:04:b7:33:7a:66:aa:df:91:97:92:e0:47:ce: 56:98:05:fb:3d:8d:9c:e1:f2:38:5b:d0:d0:39:75: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:67:DA:15:D9:0F:9D:3B:76:72:DA:DB:23:81:E1:7A:BF:1A:03:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:25:d3:30:36:cb:b0:d7:d6:6f:dd:a0:44:2c:9d:29:88:53: c9:c9:da:59:da:af:92:9f:0f:db:df:7e:36:42:34:5e:e4:08: 92:52:63:3a:9e:34:88:34:bd:79:06:20:cf:84:5d:38:08:ed: 03:6e:2a:9e:53:3f:56:e7:f9:45:bc:f4:77:26:3c:b5:c0:6e: 4a:68:0a:1e:2d:a1:d2:c6:d5:19:14:f6:80:9a:f3:94:cf:65: ed:bd:c2:43:a6:0b:01:93:e1:82:8d:34:aa:a2:40:ff:66:d0: 0b:2c:cf:66:e9:4b:0e:34:f7:23:06:c6:36:52:48:00:3e:b4: bd:a2:42:02:11:80:76:20:45:da:8d:dc:73:52:ce:23:3b:4e: 71:94:92:3a:ab:05:d4:80:22:27:17:ba:d9:ee:87:aa:00:aa: 00:8a:77:37:50:9b:ef:0e:42:cf:39:a7:14:d1:d1:f8:79:c8: 39:a9:88:92:c4:85:85:29:2a:64:85:dc:a5:7a:dc:6a:42:44: b6:80:3a:ef:f2:aa:2f:f1:e2:e5:19:f1:1e:f8:34:cb:58:00: 69:32:72:60:86:12:6b:e0:d3:e3:ca:2b:13:fa:fd:54:17:2c: 5e:84:78:1d:1e:47:7c:da:20:8c:83:8b:80:98:db:c5:17:83: f4:f3:cc:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOCZkaF5dWEok4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZmMwOTk4YWItYzViZi00MDE1LWE0YTAtNWVkYTVhZWUyMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxHiKw6MbjsEuE+dzzVZFBlmAWJgySuDgrTZ 18jM2bPQAX0xlkYlNiDUVNHxl5N2pxt9lQlYvRtdYKg//epN53dw1WROqJRHYIWA Y3rEO0FRdyqKMoY7cv6jDcMNHZEHvoC1G0hcZCOH4IT0zMUQXl6OpFY4cIHIQb8x 4CPkX7b4IZBZTpn3/PkBPOUmL8pnLqre6jgtDtspZRAQP9fYFRKzIvDSvsLaQ3VE kldCjg+amyrv8/qE4Yg+co0aUfMK8/o0PVG3is7SsIiyVBNSDhFmsCjPC9RhPxrq pBMXcz93GwS3M3pmqt+Rl5LgR85WmAX7PY2c4fI4W9DQOXUuZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIln2hXZD507dnLa2yOB4Xq/GgPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI3MjVlYmEtMmVlZi0z N2UwLTg5MWUtZWJiN2UwNTQ4YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdJdMwNsuw19Zv3aBELJ0piFPJydpZ2q+Snw/b3342QjRe5AiSUmM6 njSINL15BiDPhF04CO0DbiqeUz9W5/lFvPR3Jjy1wG5KaAoeLaHSxtUZFPaAmvOU z2XtvcJDpgsBk+GCjTSqokD/ZtALLM9m6UsONPcjBsY2UkgAPrS9okICEYB2IEXa jdxzUs4jO05xlJI6qwXUgCInF7rZ7oeqAKoAinc3UJvvDkLPOacU0dH4ecg5qYiS xIWFKSpkhdyletxqQkS2gDrv8qov8eLlGfEe+DTLWABpMnJghhJr4NPjyisT+v1U FyxehHgdHkd82iCMg4uAmNvFF4P088xG -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:53 2025 by rpki-client