$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa File: 0b838612-a7c4-34ed-8d9a-26249548b1f1.roa (raw, json) Hash identifier: 8vrUlPmBcRWN4t38cLABm2udT9tRKuehFHxX897uc20= Subject key identifier: 53:51:64:07:F7:D8:CE:8F:38:16:DA:50:2A:DC:0A:56:FD:04:11:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EA86FF66E2A66851FA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396543 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:86:ff:66:e2:a6:68:51:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=34b20182-c4e0-40a8-a933-719f3175e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:0d:ca:e2:8e:62:78:3f:70:71:30:99:f1: df:1b:9b:dc:01:7e:8b:06:b7:e4:d8:04:c9:a1:40: e7:68:97:d7:c7:8c:0a:a6:5e:ba:6b:bc:02:a2:39: ad:8c:df:72:59:c9:60:2e:a3:f1:86:68:75:10:62: 67:e4:ac:9d:e7:50:72:ca:f5:50:4e:58:e8:48:87: f1:91:95:6e:e6:87:7b:25:37:ef:13:c6:e0:ec:e3: 27:ca:ff:7c:71:df:d6:53:d4:22:c6:9b:f7:92:fb: 76:30:99:9f:f5:ae:29:77:98:ae:2a:bf:c5:58:1f: 3f:65:f0:63:8e:4a:d7:29:62:05:fd:97:c0:48:3e: 5a:59:e8:24:56:13:df:29:66:00:a4:04:07:61:86: 4d:4e:7b:88:fa:49:ac:02:13:3e:74:2c:1f:ee:97: 43:bf:b3:23:e7:47:6f:41:04:0d:e4:0d:ab:b9:d7: 3e:cd:86:d2:f1:57:2e:e3:ba:46:e8:92:0e:29:47: 64:fb:63:0c:44:2c:81:5c:1f:84:54:c7:f7:e1:2b: 97:9f:a2:bf:b0:57:3d:87:0c:b2:d0:17:a1:73:52: 2e:04:17:c9:94:12:20:4e:44:e2:d2:78:ec:c5:ae: 12:0b:45:d6:72:64:ff:8b:a1:ad:48:ab:37:90:b5: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:64:07:F7:D8:CE:8F:38:16:DA:50:2A:DC:0A:56:FD:04:11:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:dd:da:75:ce:a7:7f:b8:9c:26:75:b3:3f:7c:7c:b2:1e:5d: 69:15:44:a2:6f:dd:f5:6d:41:cf:07:f5:f9:58:a0:fe:1d:f3: e4:40:7d:3c:f0:f8:7c:7a:97:e8:89:20:11:7b:fd:63:56:e2: d3:f4:1c:f9:2b:1f:2d:9b:25:76:d2:aa:df:4e:73:3a:24:5c: fd:29:ed:15:63:59:a7:5b:9d:c1:c8:41:bf:39:ba:fb:b4:94: d0:86:f4:33:64:d5:60:9b:83:a9:56:bf:fe:0e:e0:d0:a1:6c: 20:49:5e:9b:50:e0:bb:fa:64:f2:7c:93:46:ea:ce:54:03:b5: aa:02:3d:69:b4:fc:33:25:91:f0:16:06:39:98:8d:37:df:02: 26:85:33:6f:51:54:d0:66:94:ed:9d:33:b4:40:05:ca:87:7d: e6:31:62:99:f7:0d:a8:30:19:35:57:22:a1:8d:31:c6:d0:de: 16:8d:c6:e6:fd:2a:fb:0b:74:e7:ca:e5:37:da:6f:58:63:6e: 6e:0d:81:12:8b:9e:3c:28:6b:0c:bd:1d:8f:c3:ed:58:d1:7d: 9d:73:5c:d2:6c:ae:87:20:8f:b3:7f:c8:b8:4b:0f:16:35:c3: 18:99:c9:b4:b7:57:29:af:d0:0e:b8:28:7b:f4:b1:8c:74:aa: e2:a5:e4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuqG/2bipmhR+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MzRiMjAxODItYzRlMC00MGE4LWE5MzMtNzE5ZjMxNzVlOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJwNyuKOYng/cHEwmfHfG5vcAX6LBrfk2ATJ oUDnaJfXx4wKpl66a7wCojmtjN9yWclgLqPxhmh1EGJn5Kyd51ByyvVQTljoSIfx kZVu5od7JTfvE8bg7OMnyv98cd/WU9Qixpv3kvt2MJmf9a4pd5iuKr/FWB8/ZfBj jkrXKWIF/ZfASD5aWegkVhPfKWYApAQHYYZNTnuI+kmsAhM+dCwf7pdDv7Mj50dv QQQN5A2rudc+zYbS8Vcu47pG6JIOKUdk+2MMRCyBXB+EVMf34SuXn6K/sFc9hwyy 0Behc1IuBBfJlBIgTkTi0njsxa4SC0XWcmT/i6GtSKs3kLULIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNRZAf32M6POBbaUCrcClb9BBFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI4Mzg2MTItYTdjNC0z NGVkLThkOWEtMjYyNDk1NDhiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbd2nXOp3+4nCZ1sz98fLIeXWkVRKJv3fVtQc8H9flYoP4d8+RAfTzw +Hx6l+iJIBF7/WNW4tP0HPkrHy2bJXbSqt9OczokXP0p7RVjWadbncHIQb85uvu0 lNCG9DNk1WCbg6lWv/4O4NChbCBJXptQ4Lv6ZPJ8k0bqzlQDtaoCPWm0/DMlkfAW BjmYjTffAiaFM29RVNBmlO2dM7RABcqHfeYxYpn3DagwGTVXIqGNMcbQ3haNxub9 KvsLdOfK5Tfab1hjbm4NgRKLnjwoawy9HY/D7VjRfZ1zXNJsrocgj7N/yLhLDxY1 wxiZybS3Vymv0A64KHv0sYx0quKl5Jg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:08 2025 by rpki-client