$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa File: 20f86231-c14f-3af7-a26e-6c0968214399.roa (raw, json) Hash identifier: 5O9bI9ZxZXaPa+ascO47vN/qIr2x7VIJNepUgQBscnk= Subject key identifier: 5E:A3:A6:72:9C:EB:DB:65:E2:97:60:FA:46:FC:78:2A:43:CC:8E:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EA4BE5441511E5F8F9E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 397198 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:4b:e5:44:15:11:e5:f8:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=4b9611eb-010a-4298-8fa5-a55ff59bfc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:64:49:ca:8b:f2:9b:85:60:7f:db:52:8d: 3c:7e:3c:d2:a7:b3:19:a6:3b:fb:eb:06:39:92:2b: 7f:ef:8c:72:e1:f6:6a:ed:26:de:11:70:bb:1d:e9: 7b:52:f6:f8:85:90:a2:1a:0a:a8:69:b2:cf:ba:b5: 5c:d6:c2:33:fb:3e:68:e7:0e:4d:be:e6:15:77:04: 87:93:b0:38:0f:1d:c3:33:85:47:10:e5:ae:69:20: 73:d8:3f:70:24:14:64:6b:60:0c:bf:90:62:87:66: 1f:4f:ee:f1:24:88:d8:61:a3:58:7d:a7:58:91:27: 1e:a1:56:c4:c0:19:b2:01:f5:17:13:85:86:d5:9a: 31:a7:5b:9a:78:10:ca:8b:a1:5e:76:8c:ce:01:32: 00:23:0e:bc:e2:f9:3f:63:eb:bb:66:58:1e:42:cd: a7:80:4c:da:09:f0:11:77:01:9b:58:39:fe:26:3d: 19:0e:9e:ed:b8:e1:9f:05:82:f2:0b:d1:fa:39:a2: 05:89:0d:85:98:57:9d:17:1f:27:7c:3c:f9:ae:60: 1f:c1:96:c3:56:68:21:2e:6e:4e:ee:d0:15:34:78: 3e:5f:66:06:ae:41:5e:85:20:20:f4:aa:03:2b:97: 39:7c:70:2d:2c:86:b0:60:79:7f:35:de:a2:6b:02: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A3:A6:72:9C:EB:DB:65:E2:97:60:FA:46:FC:78:2A:43:CC:8E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cb:99:76:07:f5:8f:68:28:72:e3:64:42:2b:e9:5e:53:fc: f0:da:65:f5:86:d8:4b:c0:c7:9b:d6:f8:f6:51:ad:10:24:65: 37:f0:4b:9d:b7:29:d7:2d:33:e7:32:08:63:ad:00:57:33:9c: 90:3e:0e:38:6c:2c:fa:3d:81:4b:09:17:13:b1:0a:84:37:b1: 49:8b:e8:f5:be:8b:fa:c7:f5:f3:6b:cd:a0:d2:51:36:a3:f0: 12:4c:5e:c5:09:5e:45:ae:cf:3e:8c:b8:72:fd:6b:fd:cb:fb: 18:e7:64:0d:7b:ec:63:ee:85:c8:ac:3c:a7:6a:c4:44:5a:12: f3:9d:24:d1:a9:60:14:94:99:59:a7:97:b6:a9:d5:31:2b:71: aa:75:b4:c0:2b:e6:51:8e:bc:ce:67:82:34:5c:5d:50:ff:bc: 25:4d:32:da:ec:7c:8b:c2:03:9d:61:1b:8d:50:b7:52:69:6c: 92:13:f7:42:55:7d:ec:e8:06:1f:31:b8:16:b3:ea:56:89:ad: f6:23:8d:02:40:a6:06:eb:46:5f:d9:33:9e:29:f5:70:73:4f: d4:b3:bb:24:02:b4:f2:73:c2:88:7d:b7:40:8a:fd:78:58:6e: ba:6f:5a:c1:23:1a:09:fc:46:34:13:6b:53:dd:3d:03:7c:a1: fe:3f:c9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYupL5UQVEeX4+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NGI5NjExZWItMDEwYS00Mjk4LThmYTUtYTU1ZmY1OWJmYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtVkScqL8puFYH/bUo08fjzSp7MZpjv76wY5 kit/74xy4fZq7SbeEXC7Hel7Uvb4hZCiGgqoabLPurVc1sIz+z5o5w5NvuYVdwSH k7A4Dx3DM4VHEOWuaSBz2D9wJBRka2AMv5Bih2YfT+7xJIjYYaNYfadYkSceoVbE wBmyAfUXE4WG1Zoxp1uaeBDKi6FedozOATIAIw684vk/Y+u7ZlgeQs2ngEzaCfAR dwGbWDn+Jj0ZDp7tuOGfBYLyC9H6OaIFiQ2FmFedFx8nfDz5rmAfwZbDVmghLm5O 7tAVNHg+X2YGrkFehSAg9KoDK5c5fHAtLIawYHl/Nd6iawIKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6jpnKc69tl4pdg+kb8eCpDzI6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBmODYyMzEtYzE0Zi0z YWY3LWEyNmUtNmMwOTY4MjE0Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPLmXYH9Y9oKHLjZEIr6V5T/PDaZfWG2EvAx5vW+PZRrRAkZTfwS523 KdctM+cyCGOtAFcznJA+DjhsLPo9gUsJFxOxCoQ3sUmL6PW+i/rH9fNrzaDSUTaj 8BJMXsUJXkWuzz6MuHL9a/3L+xjnZA177GPuhcisPKdqxERaEvOdJNGpYBSUmVmn l7ap1TErcap1tMAr5lGOvM5ngjRcXVD/vCVNMtrsfIvCA51hG41Qt1JpbJIT90JV fezoBh8xuBaz6laJrfYjjQJApgbrRl/ZM54p9XBzT9SzuyQCtPJzwoh9t0CK/XhY brpvWsEjGgn8RjQTa1PdPQN8of4/yXk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:01 2025 by rpki-client