$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa File: 0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa (raw, json) Hash identifier: nYwt1Ed5IC9gsgzjYf6WG2QRyQNMLIf38+9hm7HPjAM= Subject key identifier: AA:55:5D:47:1C:6A:FE:1E:B9:B9:39:9F:B3:23:66:C5:88:D1:77:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E915D3EE4432C7277300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa Signing time: Thu 17 Jul 2025 12:33:13 +0000 ROA not before: Thu 17 Jul 2025 12:33:13 +0000 ROA not after: Wed 15 Oct 2025 12:33:13 +0000 asID: 396604 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:15:d3:ee:44:32:c7:27:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:13 2025 GMT Not After : Oct 15 12:33:13 2025 GMT Subject: CN=fddcf485-ae28-46c8-8fcd-369e6fb45bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:c6:d2:ec:7b:ba:15:f9:94:e6:6c:a0:db: c4:27:9e:35:96:de:c7:d5:70:18:0d:ec:9c:c0:77: b9:bd:8f:fd:e7:c9:03:48:ed:96:78:6a:12:e5:e7: f3:ff:18:bd:74:0b:a3:54:0f:23:89:f6:e5:e1:c2: b8:7d:49:12:d4:a8:2d:5a:30:40:fe:5b:9f:5f:18: c6:58:26:9e:e8:1b:ec:b1:55:67:c4:b9:97:c2:04: 4d:61:61:27:d7:b0:41:29:d6:a9:67:b3:13:bf:ea: c6:a7:7e:04:c1:3f:af:99:c9:c2:eb:b0:cf:cf:22: 18:25:e6:1f:6d:47:5f:bb:ad:75:61:4a:6c:ff:09: 72:94:c0:8b:f4:93:45:ab:7c:56:38:a6:77:8f:1d: 07:d3:20:9b:de:7c:29:96:3d:4a:49:84:d4:04:9a: 98:a0:ae:6b:e5:6b:62:40:53:6e:75:66:ca:63:5e: 05:8e:e8:8b:00:84:f5:e3:8c:c1:93:f4:d8:01:1c: 81:a7:85:8c:ac:43:a5:b1:d4:88:dc:ed:2c:9f:ee: 70:b9:ff:a2:08:8d:1b:40:33:85:ab:de:93:6c:6a: 63:3d:82:12:af:b7:a6:0d:02:0d:38:74:34:8f:85: 36:b8:4c:76:e2:6c:52:26:66:20:a5:a9:56:23:99: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:55:5D:47:1C:6A:FE:1E:B9:B9:39:9F:B3:23:66:C5:88:D1:77:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ff:93:3f:18:9b:4b:05:87:f4:2e:85:c9:16:68:39:b2:88: 34:f3:00:0e:f6:2e:42:ea:81:05:3a:0a:65:87:d5:c4:f5:d7: 46:b2:9a:a1:81:83:25:b9:ab:6c:5f:7b:8a:f3:4a:9d:2b:61: 75:a6:0a:12:f1:64:fe:ff:d3:6a:94:54:be:5e:59:8a:96:e4: 19:80:07:cf:1e:12:17:04:ee:d0:14:02:39:89:36:50:6c:6b: 6e:36:12:28:56:65:fb:86:c2:a1:ea:38:cb:ba:66:a2:74:b1: 44:a9:53:4d:1c:d0:81:da:29:60:65:dd:40:3f:0c:21:02:d3: f1:0c:88:60:b7:55:fc:a0:28:ac:15:3d:3f:98:74:d7:f0:75: d4:33:1b:73:93:0c:d7:d5:69:02:d2:e6:e4:9c:18:c8:de:d2: 8c:f5:25:f5:f8:7f:46:3e:73:d2:4c:81:9e:b0:8f:81:73:de: da:34:9d:d1:0f:bb:b4:30:44:a1:e9:b6:9c:fe:61:73:02:e6: 67:75:39:bb:a3:d2:50:f1:8e:3f:b7:0f:2a:f7:75:eb:0b:4a: 97:ad:7a:e0:6b:bc:e3:49:c3:7a:55:c5:7b:3b:f1:75:bd:ce: 2e:da:c2:c8:62:4c:31:5a:fe:16:03:fd:8a:2a:17:35:c3:38: 01:d7:d7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYukV0+5EMscncwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxM1oXDTI1MTAxNTEyMzMxM1owLzEtMCsGA1UEAxMk ZmRkY2Y0ODUtYWUyOC00NmM4LThmY2QtMzY5ZTZmYjQ1YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbG0ux7uhX5lOZsoNvEJ541lt7H1XAYDeyc wHe5vY/958kDSO2WeGoS5efz/xi9dAujVA8jifbl4cK4fUkS1KgtWjBA/lufXxjG WCae6BvssVVnxLmXwgRNYWEn17BBKdapZ7MTv+rGp34EwT+vmcnC67DPzyIYJeYf bUdfu611YUps/wlylMCL9JNFq3xWOKZ3jx0H0yCb3nwplj1KSYTUBJqYoK5r5Wti QFNudWbKY14FjuiLAIT144zBk/TYARyBp4WMrEOlsdSI3O0sn+5wuf+iCI0bQDOF q96TbGpjPYISr7emDQINOHQ0j4U2uEx24mxSJmYgpalWI5mh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpVXUccav4eubk5n7MjZsWI0XchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFiOTA2MWQtOTRmNy0z NmVlLWFlOTctZDE3YjJjOGViNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT/kz8Ym0sFh/QuhckWaDmyiDTzAA72LkLqgQU6CmWH1cT110aymqGB gyW5q2xfe4rzSp0rYXWmChLxZP7/02qUVL5eWYqW5BmAB88eEhcE7tAUAjmJNlBs a242EihWZfuGwqHqOMu6ZqJ0sUSpU00c0IHaKWBl3UA/DCEC0/EMiGC3VfygKKwV PT+YdNfwddQzG3OTDNfVaQLS5uScGMje0oz1JfX4f0Y+c9JMgZ6wj4Fz3to0ndEP u7QwRKHptpz+YXMC5md1Obuj0lDxjj+3Dyr3desLSpeteuBrvONJw3pVxXs78XW9 zi7awshiTDFa/hYD/YoqFzXDOAHX10k= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:41 2025 by rpki-client