$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa File: eda64886-9941-3fb3-b88a-e697a40b6a40.roa (raw, json) Hash identifier: htRjkPAwsFWm/vYSINvK5uB3e3RiYg/hhO7bXtHL7vg= Subject key identifier: 6E:B0:BD:2C:0D:21:9B:CA:67:06:ED:D6:FF:D4:D8:45:56:63:17:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E4FE67DAE81BC447E740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396566 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:fe:67:da:e8:1b:c4:47:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=21c45e59-30d6-496c-a04b-4968c04fa58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:e0:01:f7:ac:b6:d4:6d:73:8f:4e:66:c0: 85:d4:6b:64:3e:e4:5c:8a:c1:f2:ee:f8:a4:6b:40: 85:e2:78:c1:0c:9d:e8:7f:41:20:19:c8:a9:d0:8c: 22:0d:e7:91:cb:63:67:1a:2a:a8:ff:fe:cf:c7:00: fe:e2:2e:5b:1c:a5:88:dd:eb:bc:3c:f3:05:e1:84: 5a:b7:2f:a0:ba:bc:bd:3a:70:06:55:6d:86:8f:5d: 7c:90:e8:ae:cf:7d:4e:c8:06:f1:83:3f:c6:51:9b: b9:75:4c:8a:72:07:13:75:59:28:57:58:10:f5:ee: 06:68:23:04:19:6b:65:73:da:24:f7:36:0d:69:bd: 84:5f:49:79:28:1c:92:ea:7b:79:c1:e3:11:65:16: cb:c4:d5:98:91:fd:3d:41:00:a7:3e:f2:55:31:53: e3:79:aa:b0:bc:4d:a0:78:44:82:79:bc:b8:7d:59: 9c:12:17:29:9d:48:44:d5:c7:5f:5f:f7:5b:a2:47: b9:eb:eb:25:d6:28:bd:ba:4e:66:74:91:6c:14:cc: 80:1f:12:5a:c3:0c:e6:c6:8e:dd:68:40:47:83:49: 39:0b:6e:f0:ce:da:ab:e1:47:95:2c:25:ff:84:f8: 0b:59:3c:95:47:c5:28:4a:95:f6:7b:e6:78:12:1e: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:BD:2C:0D:21:9B:CA:67:06:ED:D6:FF:D4:D8:45:56:63:17:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda64886-9941-3fb3-b88a-e697a40b6a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e7:3c:aa:fb:9c:f8:cf:b2:5a:9c:a8:2a:e8:ed:26:42:63: 07:8d:1d:d9:de:4a:98:9d:fe:25:77:46:59:09:2f:ec:f1:0f: 11:91:52:25:31:f0:47:93:d2:2b:34:96:d5:e2:2d:5d:29:eb: 84:b1:92:a5:dc:ad:0b:15:af:7a:ef:e7:65:df:0c:35:fa:79: 7c:b4:52:02:7a:5f:dc:66:30:a3:98:37:b4:eb:7b:61:8f:10: 71:97:3a:11:76:65:df:dc:6e:69:b3:fa:42:96:d2:06:8f:19: e1:a8:3b:8f:43:af:f5:7f:05:84:f9:95:78:ce:b0:36:4d:ad: 33:85:18:db:0b:e8:44:4c:ff:b2:3c:e0:82:0b:b4:ef:88:7e: 56:c0:8c:d1:cb:52:3f:a7:1f:6b:db:6b:a3:30:f5:38:c9:e6: 44:ae:26:cb:f1:8f:80:39:f3:fc:35:fb:e3:bb:45:81:cd:e0: a1:0d:a1:36:32:20:e7:95:9b:8c:e8:0c:10:db:8b:61:6a:73: 41:ae:74:17:f1:a3:df:b9:78:9b:6d:92:f7:a2:a0:66:f7:de: 0c:fa:c5:7b:75:59:74:62:9e:e4:1e:b0:36:3e:51:c3:b6:56: 23:16:b1:98:7c:6c:bf:ce:25:e7:54:c6:44:27:74:14:f0:a9: b2:6c:5b:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOT+Z9roG8RH50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MjFjNDVlNTktMzBkNi00OTZjLWEwNGItNDk2OGMwNGZhNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/jgAfesttRtc49OZsCF1GtkPuRcisHy7vik a0CF4njBDJ3of0EgGcip0IwiDeeRy2NnGiqo//7PxwD+4i5bHKWI3eu8PPMF4YRa ty+gury9OnAGVW2Gj118kOiuz31OyAbxgz/GUZu5dUyKcgcTdVkoV1gQ9e4GaCME GWtlc9ok9zYNab2EX0l5KByS6nt5weMRZRbLxNWYkf09QQCnPvJVMVPjeaqwvE2g eESCeby4fVmcEhcpnUhE1cdfX/dboke56+sl1ii9uk5mdJFsFMyAHxJawwzmxo7d aEBHg0k5C27wztqr4UeVLCX/hPgLWTyVR8UoSpX2e+Z4Eh5OxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG6wvSwNIZvKZwbt1v/U2EVWYxc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRhNjQ4ODYtOTk0MS0z ZmIzLWI4OGEtZTY5N2E0MGI2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM5zyq+5z4z7JanKgq6O0mQmMHjR3Z3kqYnf4ld0ZZCS/s8Q8RkVIl MfBHk9IrNJbV4i1dKeuEsZKl3K0LFa967+dl3ww1+nl8tFICel/cZjCjmDe063th jxBxlzoRdmXf3G5ps/pCltIGjxnhqDuPQ6/1fwWE+ZV4zrA2Ta0zhRjbC+hETP+y POCCC7TviH5WwIzRy1I/px9r22ujMPU4yeZEribL8Y+AOfP8Nfvju0WBzeChDaE2 MiDnlZuM6AwQ24thanNBrnQX8aPfuXibbZL3oqBm994M+sV7dVl0Yp7kHrA2PlHD tlYjFrGYfGy/ziXnVMZEJ3QU8KmybFtS -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:19 2025 by rpki-client