$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c524f23-1444-3f73-ac21-0b61b38633b1.roa File: 1c524f23-1444-3f73-ac21-0b61b38633b1.roa (raw, json) Hash identifier: hp/HVf6PN8cOloGWKj4946bl/AkfC37Zn1pMfO17kwI= Subject key identifier: 70:03:48:CE:40:04:A9:99:CE:9E:F3:F3:33:D1:0E:CC:B3:7F:DC:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E9930A155C45B5A7AF20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c524f23-1444-3f73-ac21-0b61b38633b1.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396568 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:93:0a:15:5c:45:b5:a7:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=51b38744-b9d7-483f-9c91-ded82c2e7583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:cf:de:24:c8:b9:e8:34:a3:28:40:f4:3a: 1c:cc:dc:c2:aa:8c:7e:b6:32:de:c4:b4:29:ce:0f: 22:41:89:7c:42:86:a7:a9:03:17:8d:35:4d:fc:ce: a3:67:25:5c:12:16:8d:19:30:90:61:e7:60:aa:a7: 99:00:6a:d3:ea:8d:39:be:99:04:7b:2e:49:e1:7a: 57:45:9b:b8:8a:ae:f2:2a:a5:04:28:d7:c0:17:c8: c4:11:b8:01:9f:3c:f2:93:1f:40:a2:ca:3d:6c:a4: ac:54:18:57:7d:1f:a9:19:b7:d7:c5:6b:a7:65:36: 2f:dc:ef:ed:02:d8:08:91:f0:e7:64:fd:d4:01:3d: d6:ca:07:62:d7:ee:a0:1b:7c:40:c5:47:d8:cf:4c: fe:72:ad:96:a2:e2:83:a4:bc:c7:d6:4a:1f:88:be: b7:51:5d:75:ea:cb:32:ad:cf:76:5f:0b:89:12:53: 50:5a:5b:9f:54:ec:0a:1e:e1:28:3a:6e:5b:dc:3d: 3a:ad:7a:1a:05:32:05:bd:a5:e7:8b:2a:d8:e8:c8: b6:84:08:76:a9:36:72:0e:6d:20:60:f9:f1:80:31: 97:cc:cc:50:b9:7f:87:ed:5b:70:15:b2:fe:bd:a5: cf:61:ab:b1:e0:78:b6:47:89:f8:a9:07:95:b4:ab: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:03:48:CE:40:04:A9:99:CE:9E:F3:F3:33:D1:0E:CC:B3:7F:DC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c524f23-1444-3f73-ac21-0b61b38633b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:16:09:d0:20:fd:40:7d:a3:63:1d:fc:18:2a:a4:71:d4:e6: c6:04:eb:a2:87:c6:af:1c:8d:e3:b8:2d:93:f7:f5:27:19:89: 82:1d:c7:88:66:9d:7e:ca:56:fc:65:61:dc:c1:b3:7b:a8:70: ef:26:44:00:50:a9:ac:d4:83:ae:9d:02:a4:3b:65:39:6b:ac: 69:77:72:36:77:f3:10:ea:07:25:dc:c3:9e:66:79:76:6f:6e: eb:24:43:52:60:17:56:69:f8:e2:23:47:67:bd:53:89:44:b7: 0a:c0:8e:b5:cc:b1:bf:c6:40:b0:92:68:7e:d6:3a:0e:c1:16: f3:69:a0:50:ec:fb:4c:fb:1a:ed:79:19:ed:8a:54:96:9e:a7: 28:4d:43:b9:7c:98:17:62:d7:37:16:83:f0:c4:7a:78:5a:08: 6e:07:b1:42:9b:74:2f:38:e9:ea:e0:58:36:61:61:b8:df:98: ee:88:b2:91:6a:88:97:d5:4b:62:e1:d3:7f:f7:cb:42:59:ef: 72:b6:9e:db:33:4c:e8:65:90:d1:f2:52:55:40:78:6e:04:7b: 6d:0c:40:6c:a3:11:cd:ee:37:84:1f:fb:8b:b0:74:5a:2c:0c: f6:70:f2:b8:3a:61:38:6e:0d:35:ed:ae:e1:87:8c:69:a4:66: 09:fa:0f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYumTChVcRbWnryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NTFiMzg3NDQtYjlkNy00ODNmLTljOTEtZGVkODJjMmU3NTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSzP3iTIueg0oyhA9DoczNzCqox+tjLexLQp zg8iQYl8QoanqQMXjTVN/M6jZyVcEhaNGTCQYedgqqeZAGrT6o05vpkEey5J4XpX RZu4iq7yKqUEKNfAF8jEEbgBnzzykx9Aoso9bKSsVBhXfR+pGbfXxWunZTYv3O/t AtgIkfDnZP3UAT3Wygdi1+6gG3xAxUfYz0z+cq2WouKDpLzH1kofiL63UV116ssy rc92XwuJElNQWlufVOwKHuEoOm5b3D06rXoaBTIFvaXniyrY6Mi2hAh2qTZyDm0g YPnxgDGXzMxQuX+H7VtwFbL+vaXPYaux4Hi2R4n4qQeVtKvalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHADSM5ABKmZzp7z8zPRDsyzf9yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWM1MjRmMjMtMTQ0NC0z ZjczLWFjMjEtMGI2MWIzODYzM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0WCdAg/UB9o2Md/BgqpHHU5sYE66KHxq8cjeO4LZP39ScZiYIdx4hm nX7KVvxlYdzBs3uocO8mRABQqazUg66dAqQ7ZTlrrGl3cjZ38xDqByXcw55meXZv buskQ1JgF1Zp+OIjR2e9U4lEtwrAjrXMsb/GQLCSaH7WOg7BFvNpoFDs+0z7Gu15 Ge2KVJaepyhNQ7l8mBdi1zcWg/DEenhaCG4HsUKbdC846ergWDZhYbjfmO6IspFq iJfVS2Lh03/3y0JZ73K2ntszTOhlkNHyUlVAeG4Ee20MQGyjEc3uN4Qf+4uwdFos DPZw8rg6YThuDTXtruGHjGmkZgn6D2Q= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:33 2025 by rpki-client