$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f324734c-d909-3d7c-a2da-22dc3fcb22c0.roa File: f324734c-d909-3d7c-a2da-22dc3fcb22c0.roa (raw, json) Hash identifier: xKzSpZwJ9lUpGvheBgf1KV3wzvwYJgmV14eUTTQVhFE= Subject key identifier: 66:81:FE:6B:6B:02:52:53:DB:5C:E3:E2:30:55:EC:3A:D0:93:07:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E43550A583DF3B041A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f324734c-d909-3d7c-a2da-22dc3fcb22c0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 396553 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e4:35:50:a5:83:df:3b:04:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=6b676307-275a-4b10-bb25-4341742e347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:01:04:43:bd:06:e7:cf:4f:d1:de:e8:89: 96:9f:9d:e9:dc:f7:4e:1a:09:ee:01:de:ce:f6:6b: de:3e:6f:4a:6a:c2:fd:db:4c:f2:a3:52:f0:48:23: 18:e7:73:6f:a6:5f:cc:98:57:62:96:8a:b5:50:41: 37:f8:16:df:3e:4c:e4:8d:45:d6:a2:95:56:54:16: 24:a6:5c:fe:19:e4:50:4d:9b:d8:c7:5b:91:05:a8: 58:62:17:ae:4c:5c:70:e9:ee:7c:2a:c4:6d:46:9b: 67:f8:04:3a:f6:dc:14:26:18:4c:3e:7f:9c:fb:69: 1d:22:8e:6f:35:89:44:fe:db:50:e3:54:87:7f:f4: 5f:e6:41:3e:cf:ee:18:e9:43:04:cd:4b:67:76:c2: aa:b0:0f:da:80:9b:d3:40:c3:a9:c3:2d:53:4d:3c: f7:48:58:53:2e:15:54:02:df:66:b5:8e:e4:46:9c: 3f:6f:52:68:7d:05:60:88:ac:e5:d6:d5:3c:8b:96: 3c:e6:2f:14:04:ce:a3:67:90:39:21:46:80:ee:63: c6:81:c1:ea:82:5b:a6:1b:8e:cd:5d:df:92:05:5c: f7:ec:94:45:8b:e2:c3:37:40:1c:b7:40:aa:b3:b1: 63:d5:b1:2c:12:24:d9:75:10:4d:8f:fe:32:54:d4: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:FE:6B:6B:02:52:53:DB:5C:E3:E2:30:55:EC:3A:D0:93:07:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f324734c-d909-3d7c-a2da-22dc3fcb22c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e4:65:16:5c:1a:de:a0:21:29:91:12:d9:73:0b:5c:b2:fe: 6d:46:5e:32:d0:75:63:a4:4c:84:7d:ae:17:e3:34:2c:f3:1a: e8:db:56:10:b4:b2:bf:55:a4:ca:37:f2:77:3e:7d:f2:9c:22: e9:e1:98:e1:d0:31:fc:34:51:9c:af:99:0a:59:d6:2c:cc:14: 8a:68:3a:c5:66:cb:d0:d9:93:a3:f4:0a:73:ac:a7:b7:90:d6: 9a:38:fc:e0:98:eb:fc:e8:48:1f:c2:1a:79:1d:43:57:8b:ce: 7b:39:d5:91:88:46:e4:40:d5:45:0d:75:d7:f3:79:26:6c:89: ae:c4:30:53:b2:3a:21:0b:32:fd:8a:cf:10:5a:ac:02:9b:b9: 18:9f:6a:1f:3b:df:f9:a9:15:fa:e1:1e:b9:8f:15:34:2b:76: 2a:14:b6:8b:e9:4d:99:a2:ce:97:48:e5:d0:09:64:50:59:a3: 28:98:0b:8e:da:a6:39:24:76:4e:d7:51:c3:1c:20:17:63:f0: 8a:8c:3b:fd:4f:60:b3:0b:c8:2c:55:b2:e8:87:3b:7e:e4:ac: 72:22:6e:2a:7e:e7:1b:8c:e6:6b:a2:61:f8:34:e6:fc:02:52: 10:0c:f0:9f:65:38:82:ca:eb:3e:94:5c:c6:6a:b9:cc:28:bf: 7a:9c:13:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOQ1UKWD3zsEGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NmI2NzYzMDctMjc1YS00YjEwLWJiMjUtNDM0MTc0MmUzNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vEBBEO9BufPT9He6ImWn53p3PdOGgnuAd7O 9mvePm9KasL920zyo1LwSCMY53Nvpl/MmFdiloq1UEE3+BbfPkzkjUXWopVWVBYk plz+GeRQTZvYx1uRBahYYheuTFxw6e58KsRtRptn+AQ69twUJhhMPn+c+2kdIo5v NYlE/ttQ41SHf/Rf5kE+z+4Y6UMEzUtndsKqsA/agJvTQMOpwy1TTTz3SFhTLhVU At9mtY7kRpw/b1JofQVgiKzl1tU8i5Y85i8UBM6jZ5A5IUaA7mPGgcHqglumG47N Xd+SBVz37JRFi+LDN0Act0Cqs7Fj1bEsEiTZdRBNj/4yVNTtEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGaB/mtrAlJT21zj4jBV7DrQkwevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMyNDczNGMtZDkwOS0z ZDdjLWEyZGEtMjJkYzNmY2IyMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBt5GUWXBreoCEpkRLZcwtcsv5tRl4y0HVjpEyEfa4X4zQs8xro21YQ tLK/VaTKN/J3Pn3ynCLp4Zjh0DH8NFGcr5kKWdYszBSKaDrFZsvQ2ZOj9ApzrKe3 kNaaOPzgmOv86Egfwhp5HUNXi857OdWRiEbkQNVFDXXX83kmbImuxDBTsjohCzL9 is8QWqwCm7kYn2ofO9/5qRX64R65jxU0K3YqFLaL6U2Zos6XSOXQCWRQWaMomAuO 2qY5JHZO11HDHCAXY/CKjDv9T2CzC8gsVbLohzt+5KxyIm4qfucbjOZromH4NOb8 AlIQDPCfZTiCyus+lFzGarnMKL96nBOX -----END CERTIFICATE-----Generated at Wed Jul 23 11:34:46 2025 by rpki-client