$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa File: 1b6e2b9b-c826-3954-9ca5-830cd33019da.roa (raw, json) Hash identifier: DU7nFYv9gVlj6PgcOG5/8AhmPhgDJkmvqn4SzH44RAQ= Subject key identifier: AD:D3:CC:09:DE:1A:03:9B:7A:45:71:0C:4F:D0:23:21:99:DE:A7:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EB4318942302F392AF90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396583 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:eb:43:18:94:23:02:f3:92:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=8b2d07cb-5d19-42c5-9ff3-254722b68074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:78:63:3c:f0:55:1c:53:d4:52:02:64:d0: 9d:d3:82:e1:05:8e:d5:0a:63:38:cb:ca:c0:ff:a0: 2a:c5:7b:b7:03:d8:b6:2e:2e:e5:6e:d9:24:b7:f4: 5c:4d:76:12:11:0b:a8:25:e6:14:00:94:63:54:ac: 07:6e:e0:a2:f5:54:7e:af:42:32:3c:4a:35:52:7e: 8d:db:a4:fb:0e:a3:81:b7:f3:e1:30:fc:d0:40:62: e7:8d:b5:d6:84:e1:59:db:93:72:75:e3:ca:bf:25: 36:c2:86:7b:56:1d:b5:d6:fc:0f:c0:69:f4:4e:e2: 66:02:24:b2:3c:8e:fb:ce:8c:b7:3f:81:18:7c:29: df:d2:99:f5:a1:d9:c1:f0:0f:1f:17:ae:86:0a:03: 23:a9:22:74:77:b2:77:05:1f:93:96:ef:d3:93:03: 2a:01:6d:3c:3f:16:30:b3:e5:cf:9d:50:6c:88:2f: db:e3:3f:9a:8a:8c:e2:94:db:c1:c3:09:2d:15:d3: 9e:37:47:d0:22:04:a6:20:36:56:43:64:83:28:17: ef:74:c3:2d:12:3c:7d:6b:1a:dd:a9:27:7d:31:02: 26:85:13:23:6f:a4:bc:0a:3d:15:2f:a5:21:dd:83: f7:c7:c3:25:24:bb:13:10:0c:fc:ec:3c:d6:8b:d4: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:CC:09:DE:1A:03:9B:7A:45:71:0C:4F:D0:23:21:99:DE:A7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ff:57:a8:f6:a9:0d:f6:0e:58:fc:b6:a7:86:65:e6:15:8a: 42:aa:ee:5c:b7:1b:fa:5c:60:7a:25:1d:f3:63:86:a4:cc:50: a8:b6:15:c3:c2:61:bc:52:16:99:02:7b:b9:0b:4d:c6:c7:18: 2e:be:25:a2:05:8b:08:0e:e9:e3:a5:b0:0c:18:8a:3f:f4:54: 81:99:c4:65:28:0d:63:18:f1:5b:a0:d0:49:74:f1:44:6d:d5: 52:f6:3e:3d:66:99:be:33:b8:0a:e0:89:d9:49:63:aa:a1:2f: 35:b0:83:d2:58:62:cd:23:d5:59:df:30:23:ba:5c:0d:fd:80: 29:74:40:34:81:46:50:e0:d2:e8:09:fe:18:48:02:cc:20:3a: de:ec:48:8d:5c:24:15:85:bc:11:f1:33:7c:41:c1:99:89:15: 35:57:44:09:bd:5f:07:c9:0c:08:77:ef:2f:45:87:e6:70:ce: 18:28:a2:00:69:8a:76:c3:16:03:10:bd:b8:70:75:a0:e4:63: 69:4f:b3:56:ba:29:51:88:5a:9c:81:e7:8f:b2:bc:38:38:05: 01:08:83:3e:fb:75:6f:bf:aa:c8:38:4a:8d:37:27:8c:5d:1d: 7e:92:60:77:c4:3a:c4:b0:d3:41:42:bd:6b:1c:38:32:ea:b4: a0:75:7c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYutDGJQjAvOSr5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk OGIyZDA3Y2ItNWQxOS00MmM1LTlmZjMtMjU0NzIyYjY4MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNV4YzzwVRxT1FICZNCd04LhBY7VCmM4y8rA /6AqxXu3A9i2Li7lbtkkt/RcTXYSEQuoJeYUAJRjVKwHbuCi9VR+r0IyPEo1Un6N 26T7DqOBt/PhMPzQQGLnjbXWhOFZ25NydePKvyU2woZ7Vh211vwPwGn0TuJmAiSy PI77zoy3P4EYfCnf0pn1odnB8A8fF66GCgMjqSJ0d7J3BR+Tlu/TkwMqAW08PxYw s+XPnVBsiC/b4z+aiozilNvBwwktFdOeN0fQIgSmIDZWQ2SDKBfvdMMtEjx9axrd qSd9MQImhRMjb6S8Cj0VL6Uh3YP3x8MlJLsTEAz87DzWi9Q/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3TzAneGgObekVxDE/QIyGZ3qd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI2ZTJiOWItYzgyNi0z OTU0LTljYTUtODMwY2QzMzAxOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX/V6j2qQ32Dlj8tqeGZeYVikKq7ly3G/pcYHolHfNjhqTMUKi2FcPC YbxSFpkCe7kLTcbHGC6+JaIFiwgO6eOlsAwYij/0VIGZxGUoDWMY8Vug0El08URt 1VL2Pj1mmb4zuArgidlJY6qhLzWwg9JYYs0j1VnfMCO6XA39gCl0QDSBRlDg0ugJ /hhIAswgOt7sSI1cJBWFvBHxM3xBwZmJFTVXRAm9XwfJDAh37y9Fh+ZwzhgoogBp inbDFgMQvbhwdaDkY2lPs1a6KVGIWpyB54+yvDg4BQEIgz77dW+/qsg4So03J4xd HX6SYHfEOsSw00FCvWscODLqtKB1fBw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:11 2025 by rpki-client