$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa File: 21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa (raw, json) Hash identifier: bueV1zT4WmCY+Z0AwehZ6q7GIbbngHD3s5H+dlOQ1b4= Subject key identifier: 25:62:D1:2C:A9:3B:60:8D:60:52:27:08:E8:E8:F9:6A:F3:82:45:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EDD88150F9336072F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396578 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:d8:81:50:f9:33:60:72:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=48c410cf-e8c4-4d2d-aefa-3fed9ad2eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:72:9f:7c:ac:b7:29:61:b0:16:a0:86:13: 23:4f:8b:a5:8b:58:72:23:d0:05:db:95:93:17:4c: f4:87:f3:c7:05:cd:0e:bf:1f:81:dd:6f:01:5b:9c: 5f:f2:24:b7:3d:ae:8a:41:79:0d:77:45:ff:30:b7: 5f:bb:8e:f4:0d:7d:30:da:82:92:53:b6:40:f5:fe: 4c:60:3f:46:5c:97:c4:ff:d0:de:9a:bb:e0:2c:2b: de:c7:a5:0c:05:69:cd:34:3c:c5:b4:d9:84:68:79: 65:71:4f:e1:15:1b:e1:e7:34:0c:d3:e8:bd:ad:e6: 51:aa:8c:c2:ad:ce:fc:b1:22:3b:59:01:ac:cf:ab: 9e:60:35:67:23:9f:fe:1c:98:5f:4b:51:bf:da:90: 28:17:be:69:bc:d1:07:69:f8:92:b4:e6:4b:8f:4b: 8c:91:9a:1f:38:1f:62:77:eb:fe:f5:44:22:ff:24: 4a:01:47:5a:3d:b6:d8:76:47:43:43:f1:24:2d:76: 87:db:22:ca:d5:1d:69:16:20:f7:96:68:b5:df:5d: 4f:c0:f7:bd:f1:be:f4:50:47:97:93:ee:71:7b:27: f2:70:08:e9:67:f1:e1:59:14:90:ba:a1:ea:5f:b5: 4b:fe:3f:27:3a:12:56:b2:85:1d:27:aa:9b:de:cf: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:D1:2C:A9:3B:60:8D:60:52:27:08:E8:E8:F9:6A:F3:82:45:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:95:ca:87:43:b9:a9:3d:51:0b:8e:10:a5:fd:d5:65:e4:5f: 9b:cf:5e:c2:67:84:55:44:a7:d5:d8:94:c6:4e:59:31:7c:ea: b2:2c:df:61:ca:07:7b:2f:a7:59:fb:c6:72:30:c0:81:68:bd: 28:db:a4:4b:8b:62:67:fb:78:2a:66:63:85:5f:78:4c:3c:80: a2:2f:65:36:c9:16:f8:93:b1:38:14:95:7a:18:e6:e8:fb:0f: 58:e4:78:55:54:fd:45:0f:5b:01:b9:5a:de:59:39:c3:1e:65: cd:a6:07:a8:2b:dd:02:6d:e1:81:78:b4:08:f8:ad:a0:1f:8e: 42:24:76:85:4b:ef:db:c2:4e:f0:22:fe:88:75:d5:94:4c:a7: f2:86:24:a3:2c:f7:a3:15:39:74:15:e7:03:e5:72:1c:0c:45: f5:e2:4b:4a:b1:8a:ef:32:50:5b:8a:23:13:c7:8c:b9:ae:dd: af:64:56:49:e6:d0:45:cb:44:1a:53:1a:0c:ba:b9:8d:c7:20: f3:37:a5:2d:18:ed:e0:e9:2c:b3:36:9b:4b:eb:4d:02:16:ae: 1b:22:4a:de:c1:53:e1:97:15:15:a4:0a:6d:5d:df:52:86:fd: 9e:5b:32:d0:de:ea:4c:1c:ce:b9:8c:31:20:ae:6e:40:b8:11: 9f:17:56:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu3YgVD5M2By+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk NDhjNDEwY2YtZThjNC00ZDJkLWFlZmEtM2ZlZDlhZDJlYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY1yn3ystylhsBaghhMjT4uli1hyI9AF25WT F0z0h/PHBc0Ovx+B3W8BW5xf8iS3Pa6KQXkNd0X/MLdfu470DX0w2oKSU7ZA9f5M YD9GXJfE/9DemrvgLCvex6UMBWnNNDzFtNmEaHllcU/hFRvh5zQM0+i9reZRqozC rc78sSI7WQGsz6ueYDVnI5/+HJhfS1G/2pAoF75pvNEHafiStOZLj0uMkZofOB9i d+v+9UQi/yRKAUdaPbbYdkdDQ/EkLXaH2yLK1R1pFiD3lmi1311PwPe98b70UEeX k+5xeyfycAjpZ/HhWRSQuqHqX7VL/j8nOhJWsoUdJ6qb3s8hyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVi0SypO2CNYFInCOjo+WrzgkX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlYWExODUtZmU3YS0z NWU1LTk0ODItNDAxMWVmNWVlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmVyodDuak9UQuOEKX91WXkX5vPXsJnhFVEp9XYlMZOWTF86rIs32HK B3svp1n7xnIwwIFovSjbpEuLYmf7eCpmY4VfeEw8gKIvZTbJFviTsTgUlXoY5uj7 D1jkeFVU/UUPWwG5Wt5ZOcMeZc2mB6gr3QJt4YF4tAj4raAfjkIkdoVL79vCTvAi /oh11ZRMp/KGJKMs96MVOXQV5wPlchwMRfXiS0qxiu8yUFuKIxPHjLmu3a9kVknm 0EXLRBpTGgy6uY3HIPM3pS0Y7eDpLLM2m0vrTQIWrhsiSt7BU+GXFRWkCm1d31KG /Z5bMtDe6kwczrmMMSCubkC4EZ8XVgc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:47 2025 by rpki-client