$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa File: eaa59a4e-100d-3652-9f53-d567b63eb683.roa (raw, json) Hash identifier: Ok8LVYIv3OL/3CXdLoa7sL7EY7JEvIMw1bs95IoiMR4= Subject key identifier: 45:28:A3:F3:F7:48:F6:B7:8A:3A:EC:A4:97:BE:64:6A:B8:94:38:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E5C67AF9F30044D9CE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 397208 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e5:c6:7a:f9:f3:00:44:d9:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=72ff9054-0e5a-451c-96cb-9b73ceffff2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:de:56:df:34:06:d2:7c:8b:f0:33:4e:b7: d6:1b:dd:69:4b:eb:d8:51:8b:78:f2:73:4b:e8:37: d9:42:56:93:23:3c:4a:2b:7d:be:98:65:1b:60:89: 21:03:b1:d0:44:9c:ab:04:f0:e3:c2:39:70:f1:f1: 71:66:dc:15:4f:35:72:62:a1:ab:ac:54:03:28:23: 92:5c:17:e2:e3:e9:1a:16:ff:13:8c:43:76:33:16: 1f:74:13:fb:3c:5f:4f:a8:f4:09:ff:71:f1:47:5a: bb:15:b4:ca:31:e2:e4:e0:78:62:77:13:cc:37:f4: c0:c1:67:e3:65:99:83:76:20:0d:b2:98:5c:3c:f9: 39:b1:0c:6d:fb:50:16:62:8f:c6:38:40:3b:33:ab: 57:7a:d1:cc:a4:7c:3e:52:40:87:ae:e7:b2:bd:df: 6b:f7:09:27:5f:31:f9:95:53:0a:28:45:bd:5e:8f: 8e:1f:6a:77:4e:d2:11:cb:43:db:02:50:82:ef:40: 01:e5:f8:20:ed:4a:0a:b5:40:15:53:4a:14:41:e6: e9:2e:f3:72:08:1f:02:a7:03:a0:ee:c1:29:fa:a8: c5:9b:b6:1a:64:66:4f:18:4e:da:19:cc:b3:e8:10: 8d:8c:51:46:bb:d3:cf:8b:e0:e6:71:c1:2b:69:b3: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:A3:F3:F7:48:F6:B7:8A:3A:EC:A4:97:BE:64:6A:B8:94:38:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5c:c5:56:5b:02:24:5b:fc:88:9b:45:b3:aa:be:59:f6:59: f5:7b:c9:7d:6c:67:4f:d0:e6:0c:8b:4c:4f:17:67:99:17:7f: b6:6c:56:68:fd:0f:8b:b4:18:0b:d0:c0:92:cf:08:df:89:07: 76:66:26:0a:9a:81:8a:be:09:1b:00:07:e1:33:f1:25:45:a4: ab:07:0c:59:89:86:64:fb:1e:41:a3:5f:3c:18:15:7d:71:e6: dc:a4:d1:24:f3:6e:41:a1:1d:c0:e8:ac:66:55:6e:06:3a:ae: bf:49:b7:c3:11:a7:59:1a:89:06:be:c6:b5:81:0d:cd:13:45: da:a3:38:69:bc:23:de:a7:32:96:d9:2c:ba:57:14:e3:d9:27: 9c:16:9b:16:d1:e3:5c:79:0c:46:de:d4:6b:ea:50:25:56:91: f1:7a:7f:a7:c4:6a:a4:45:32:ea:a3:bd:58:1d:3b:d2:9c:00: 4c:c8:43:c4:36:01:f8:da:ae:ba:44:d3:35:26:89:11:44:3b: 56:69:c8:d7:35:6f:9a:2d:16:e0:53:31:ef:b4:bf:af:c7:90: 59:09:96:2a:c2:b1:20:45:53:93:4f:6b:b9:c9:cc:57:37:0f: b0:44:4b:f3:9c:35:a0:93:0a:db:02:0c:eb:98:ef:3f:d3:52: 10:f4:c3:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOXGevnzAETZzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NzJmZjkwNTQtMGU1YS00NTFjLTk2Y2ItOWI3M2NlZmZmZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9DeVt80BtJ8i/AzTrfWG91pS+vYUYt48nNL 6DfZQlaTIzxKK32+mGUbYIkhA7HQRJyrBPDjwjlw8fFxZtwVTzVyYqGrrFQDKCOS XBfi4+kaFv8TjEN2MxYfdBP7PF9PqPQJ/3HxR1q7FbTKMeLk4HhidxPMN/TAwWfj ZZmDdiANsphcPPk5sQxt+1AWYo/GOEA7M6tXetHMpHw+UkCHrueyvd9r9wknXzH5 lVMKKEW9Xo+OH2p3TtIRy0PbAlCC70AB5fgg7UoKtUAVU0oUQebpLvNyCB8CpwOg 7sEp+qjFm7YaZGZPGE7aGcyz6BCNjFFGu9PPi+DmccErabNm+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEUoo/P3SPa3ijrspJe+ZGq4lDggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhNTlhNGUtMTAwZC0z NjUyLTlmNTMtZDU2N2I2M2ViNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2XMVWWwIkW/yIm0Wzqr5Z9ln1e8l9bGdP0OYMi0xPF2eZF3+2bFZo /Q+LtBgL0MCSzwjfiQd2ZiYKmoGKvgkbAAfhM/ElRaSrBwxZiYZk+x5Bo188GBV9 cebcpNEk825BoR3A6KxmVW4GOq6/SbfDEadZGokGvsa1gQ3NE0XaozhpvCPepzKW 2Sy6VxTj2SecFpsW0eNceQxG3tRr6lAlVpHxen+nxGqkRTLqo71YHTvSnABMyEPE NgH42q66RNM1JokRRDtWacjXNW+aLRbgUzHvtL+vx5BZCZYqwrEgRVOTT2u5ycxX Nw+wREvznDWgkwrbAgzrmO8/01IQ9MMi -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:45 2025 by rpki-client