$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: VwdTrD54Cvd/xl2ZjcSk54RauC4epHtory9OWETwBdg= Subject key identifier: B8:FA:F5:E5:12:C3:DE:3F:F6:05:98:BD:88:BB:CB:C1:C0:7E:2A:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C70E74F7B09067D11B5D4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e7:4f:7b:09:06:7d:11:b5:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=498557a2-49ef-4c18-b74c-8270856d1c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:90:ca:6e:6a:a2:74:ca:51:1a:78:1d:eb: 9a:65:19:6a:4f:32:c1:53:5a:78:d7:aa:65:a6:37: 9c:ea:38:48:5c:f9:33:2d:41:4b:73:b8:c8:11:08: 61:1f:59:a1:4c:9c:10:ad:96:99:96:43:d0:95:cd: b0:b2:b4:75:c9:9f:58:41:dc:bf:45:8b:39:06:35: fa:bc:14:ea:7c:06:3e:d9:46:10:2a:8b:b1:98:30: 24:8e:91:56:24:12:33:42:5a:3c:21:26:85:25:db: d0:f4:a9:8b:b2:9a:63:f5:77:07:7a:b1:ff:02:f6: 77:0e:64:0c:92:a8:bf:78:a0:32:8c:19:d6:a7:8b: c3:7b:42:55:20:38:7d:98:a7:e0:02:4b:b1:bc:e2: 2c:af:d5:70:3a:75:61:96:41:04:b7:9a:e6:a8:2e: 21:e5:51:a9:71:c5:f7:d7:e7:50:ef:9f:86:32:ee: 0b:a7:f4:7a:5d:4c:a5:b1:22:e6:d8:c0:cd:bd:6c: 6b:8d:6c:31:75:83:15:9e:70:25:8a:1c:16:30:01: 0a:72:b0:a2:f2:98:ee:0d:0c:03:3c:dc:a9:76:6a: 4f:62:4c:82:2b:e7:20:a8:13:45:57:22:47:44:00: 9a:cf:09:c1:c9:68:91:0e:48:c5:65:07:6a:56:0e: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FA:F5:E5:12:C3:DE:3F:F6:05:98:BD:88:BB:CB:C1:C0:7E:2A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:54:fe:7b:c5:64:88:91:ec:df:5f:1a:0a:9e:b5:4b:a0:46: 44:25:56:96:5d:6c:c1:53:94:2d:f8:6c:86:4d:da:c2:b4:b7: fa:22:64:f7:b8:0d:5f:94:30:f4:91:1f:e0:ae:38:51:93:be: b0:6e:d0:07:a4:08:25:56:b9:99:8f:84:10:1f:66:83:0c:21: 22:36:36:fe:ec:0f:01:5c:3e:dc:79:3b:6e:c7:cf:d3:b7:96: 39:fc:b9:89:56:66:1b:85:65:ab:3a:08:66:f8:20:5d:29:47: 07:2e:b6:ee:ad:c8:28:d3:fa:10:6b:0d:da:e3:06:44:b1:76: b1:ab:2f:3d:72:fd:fe:d2:3e:1d:40:d5:f3:c8:2d:7d:17:cd: 7d:cd:a2:5b:3b:d1:60:c5:57:48:db:60:54:d9:bc:cd:da:bf: b9:ab:00:b1:e2:7a:f1:13:12:fc:ed:a9:69:d1:90:3b:f3:6b: 32:c0:02:54:ec:2a:1f:d3:44:55:0e:a4:ec:5f:24:6e:92:0d: f9:77:7f:fe:9f:10:04:29:13:e1:2d:c3:1a:a5:a6:11:9d:0a: 32:e8:ea:e8:c5:dc:1f:62:92:4d:60:fa:2f:eb:9e:5d:de:a1: 8e:72:86:b9:21:0a:83:01:5a:cd:fe:fc:64:59:e0:52:13:d4: fb:9e:62:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcOdPewkGfRG11MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NDk4NTU3YTItNDllZi00YzE4LWI3NGMtODI3MDg1NmQxYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvKQym5qonTKURp4HeuaZRlqTzLBU1p416pl pjec6jhIXPkzLUFLc7jIEQhhH1mhTJwQrZaZlkPQlc2wsrR1yZ9YQdy/RYs5BjX6 vBTqfAY+2UYQKouxmDAkjpFWJBIzQlo8ISaFJdvQ9KmLsppj9XcHerH/AvZ3DmQM kqi/eKAyjBnWp4vDe0JVIDh9mKfgAkuxvOIsr9VwOnVhlkEEt5rmqC4h5VGpccX3 1+dQ75+GMu4Lp/R6XUylsSLm2MDNvWxrjWwxdYMVnnAlihwWMAEKcrCi8pjuDQwD PNypdmpPYkyCK+cgqBNFVyJHRACazwnByWiRDkjFZQdqVg6G0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLj69eUSw94/9gWYvYi7y8HAfirRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPVP57xWSIkezfXxoKnrVLoEZEJVaWXWzBU5Qt+GyGTdrCtLf6ImT3 uA1flDD0kR/grjhRk76wbtAHpAglVrmZj4QQH2aDDCEiNjb+7A8BXD7ceTtux8/T t5Y5/LmJVmYbhWWrOghm+CBdKUcHLrburcgo0/oQaw3a4wZEsXaxqy89cv3+0j4d QNXzyC19F819zaJbO9FgxVdI22BU2bzN2r+5qwCx4nrxExL87alp0ZA782sywAJU 7Cof00RVDqTsXyRukg35d3/+nxAEKRPhLcMapaYRnQoy6OroxdwfYpJNYPov655d 3qGOcoa5IQqDAVrN/vxkWeBSE9T7nmLF -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:24 2025 by rpki-client