$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa File: f2baeceb-30e7-3132-8913-0bc27a70dc75.roa (raw, json) Hash identifier: p39lnkBUd4shefbuOMTIXo4LWaZb5PFnpn9y0vyTbas= Subject key identifier: 4D:FA:14:70:8A:2C:42:84:9B:8A:D5:1F:C0:D8:66:7A:AA:46:29:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E6DD9C5904B4469026AC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396581 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e6:dd:9c:59:04:b4:46:90:26:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=bcb59954-6542-48a6-9f37-11dc0a7a994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:30:78:bf:ff:9f:a8:4e:64:dc:29:0d:b8: d7:d2:78:05:85:99:23:a2:10:bd:f6:74:24:68:26: b0:de:ba:83:99:7c:48:cf:dd:99:a3:7f:69:3a:3a: 12:f3:98:7f:f3:5f:e1:30:b0:d6:1a:7d:da:c0:21: 84:03:fd:ba:e3:cc:7f:33:34:27:34:83:37:65:67: 75:88:55:58:3e:54:12:4c:98:2a:4d:3d:32:e6:78: 8a:d1:34:bf:e9:de:85:dd:90:b6:71:c8:75:59:a6: 9c:7a:a1:ef:17:44:2e:37:55:6e:3a:c1:6c:d9:76: 86:4d:c0:f7:d4:9e:3b:31:81:15:90:72:3d:37:ce: f0:db:88:f0:ce:66:e0:02:d0:bf:5d:ad:6e:d9:a7: c5:6a:d3:16:0c:ed:87:74:a8:48:2b:f1:74:61:a1: f1:c5:f6:eb:2b:8c:76:c5:60:46:9b:2d:85:33:f1: 94:6c:0a:c4:cb:3a:87:b6:c6:ed:87:58:f4:fe:f0: 76:9c:4e:6d:01:da:5b:2b:a6:c3:1f:97:3e:72:55: 74:7c:87:5f:ae:4c:cd:ad:aa:7c:ca:8f:46:c2:05: 79:05:36:9a:d5:31:23:b7:9b:69:9f:20:cf:ed:86: 70:6c:d1:88:42:66:83:b0:8f:72:2e:73:8d:0a:1b: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:14:70:8A:2C:42:84:9B:8A:D5:1F:C0:D8:66:7A:AA:46:29:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2baeceb-30e7-3132-8913-0bc27a70dc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:29:a0:0f:f5:fb:b7:51:ea:5f:e2:f2:c3:a3:9b:a4:47:36: ef:ae:29:14:6a:6e:3a:f7:4e:0e:13:2f:ef:43:e0:c0:c7:81: cc:fa:4a:63:a9:b1:a3:d0:23:8b:38:2b:76:a4:69:a4:05:39: c9:b0:84:6b:fa:1b:c3:ad:6a:b3:9f:4b:89:b0:7f:25:30:66: c7:6e:0a:db:24:7e:10:e4:f3:02:ad:bf:82:2f:b8:b7:4c:b9: e8:be:72:06:7d:71:69:00:84:75:a4:dd:80:dc:ce:31:33:3e: f7:a9:b5:6d:bb:64:1c:94:2b:81:2e:40:af:e9:52:f9:37:06: a6:3d:eb:ea:bd:70:bf:c8:28:8a:a4:28:a1:77:7e:f0:29:be: 1d:d2:68:e4:ae:a1:2c:43:c4:4a:2f:7e:15:dd:90:9a:8e:fc: 88:dd:b2:93:46:d6:9b:9f:95:7e:5f:38:76:18:85:4f:59:2a: 27:59:08:86:d8:11:88:cd:5e:ab:44:6e:18:3a:1f:d1:16:76: 00:6f:54:82:b4:64:7f:ab:31:cd:de:30:3f:81:65:61:cf:a5: 95:69:2e:9c:40:0c:b9:5d:70:6c:40:d0:e0:a5:a4:c6:a9:f2: c4:8d:39:d4:a4:e8:bc:d4:a6:6c:90:ad:73:ae:32:aa:cd:46: c8:62:50:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcObdnFkEtEaQJqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YmNiNTk5NTQtNjU0Mi00OGE2LTlmMzctMTFkYzBhN2E5OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY8weL//n6hOZNwpDbjX0ngFhZkjohC99nQk aCaw3rqDmXxIz92Zo39pOjoS85h/81/hMLDWGn3awCGEA/2648x/MzQnNIM3ZWd1 iFVYPlQSTJgqTT0y5niK0TS/6d6F3ZC2cch1WaaceqHvF0QuN1VuOsFs2XaGTcD3 1J47MYEVkHI9N87w24jwzmbgAtC/Xa1u2afFatMWDO2HdKhIK/F0YaHxxfbrK4x2 xWBGmy2FM/GUbArEyzqHtsbth1j0/vB2nE5tAdpbK6bDH5c+clV0fIdfrkzNrap8 yo9GwgV5BTaa1TEjt5tpnyDP7YZwbNGIQmaDsI9yLnONChtl9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE36FHCKLEKEm4rVH8DYZnqqRimjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJiYWVjZWItMzBlNy0z MTMyLTg5MTMtMGJjMjdhNzBkYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTKaAP9fu3Uepf4vLDo5ukRzbvrikUam46904OEy/vQ+DAx4HM+kpj qbGj0COLOCt2pGmkBTnJsIRr+hvDrWqzn0uJsH8lMGbHbgrbJH4Q5PMCrb+CL7i3 TLnovnIGfXFpAIR1pN2A3M4xMz73qbVtu2QclCuBLkCv6VL5NwamPevqvXC/yCiK pCihd37wKb4d0mjkrqEsQ8RKL34V3ZCajvyI3bKTRtabn5V+Xzh2GIVPWSonWQiG 2BGIzV6rRG4YOh/RFnYAb1SCtGR/qzHN3jA/gWVhz6WVaS6cQAy5XXBsQNDgpaTG qfLEjTnUpOi81KZskK1zrjKqzUbIYlBL -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:07 2025 by rpki-client