$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27617590-2bb0-3263-8711-3ecf4e5460ea.roa File: 27617590-2bb0-3263-8711-3ecf4e5460ea.roa (raw, json) Hash identifier: FDipOZl2CSRETu7yMTPvHdfwa5kAbWGEjW3yPwjhyvA= Subject key identifier: 05:17:87:54:55:DA:7B:87:86:60:D4:9A:6B:6C:4A:FE:92:C8:A7:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ED0CA0B74A152F0CD210 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27617590-2bb0-3263-8711-3ecf4e5460ea.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396549 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:0c:a0:b7:4a:15:2f:0c:d2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=7141fe20-b814-4d4b-a158-8f744da1fa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:98:c3:51:00:24:55:be:94:82:5b:c2:7e: 7e:e8:c1:97:1c:61:b0:66:15:f5:cf:eb:8f:52:32: 4b:99:ed:f9:91:06:7c:ad:76:59:25:ac:8f:05:19: ce:a5:91:ed:68:60:d1:79:2a:68:9e:ac:40:b7:c5: 9c:06:74:d0:78:24:55:3d:2c:f3:90:af:e2:08:c4: e2:2e:38:b6:34:be:90:08:da:8e:97:3b:d7:54:35: a6:f8:e4:41:55:34:d9:49:a5:fb:ca:c2:6d:40:64: 38:41:29:8c:0b:d1:76:32:cc:b3:31:af:86:f2:e3: 6a:37:6f:36:cb:1f:66:60:2c:bb:f5:f4:f9:0d:cc: ef:41:e4:2d:54:94:80:04:d2:2d:b0:21:d0:97:c9: 21:cc:64:17:27:31:d4:42:f5:7a:ab:a7:71:2a:aa: 62:6c:ee:32:f4:84:84:e4:82:fa:06:54:1d:be:f2: 03:11:2e:b2:83:33:f1:9a:43:40:76:fe:2e:d1:7f: 09:b9:f6:e9:06:f5:38:92:f3:6b:9e:a3:13:48:24: f6:5a:62:f3:c7:32:d1:4e:74:bf:d7:62:4a:bd:1d: 08:5c:64:4f:23:8e:1b:b7:6a:98:5c:9c:d9:59:9d: e5:db:cf:18:74:1a:6a:23:d5:c1:50:ff:74:67:70: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:17:87:54:55:DA:7B:87:86:60:D4:9A:6B:6C:4A:FE:92:C8:A7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27617590-2bb0-3263-8711-3ecf4e5460ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:98:69:6d:59:5f:26:b0:f0:0a:af:69:94:6b:3c:68:03:e8: 01:bf:25:f2:da:e0:49:3a:74:09:ab:13:92:e4:ef:ca:27:05: 6b:23:e8:71:a7:3f:21:a8:a2:67:c0:80:01:54:a0:78:d7:cd: c2:b0:cc:1f:90:85:4b:61:ab:61:0f:72:2e:12:8c:31:08:ce: 13:62:e7:44:67:21:03:79:84:0a:fa:d9:1e:27:39:e8:0c:13: 0d:57:3b:5e:f9:63:c2:64:56:65:5b:61:a0:04:92:7c:6c:73: 40:e8:5f:34:13:04:70:59:48:a9:0e:1b:93:4c:2b:c0:18:20: 38:d9:e6:33:c2:0f:3f:5b:c6:8f:0b:e2:b5:e0:ff:00:70:2b: 41:d1:93:68:6c:6a:bd:79:a7:c9:ce:8f:f9:ed:3a:f1:df:7d: fb:46:2b:d9:6a:6c:84:cf:85:b1:61:aa:a6:44:a0:b1:eb:9f: 19:4a:a2:38:58:cf:72:16:cf:65:9c:72:62:d6:0d:f6:c1:9d: c8:f8:82:9f:83:40:11:bf:3c:1d:1a:e3:fd:dc:e6:62:e5:ca: 6c:f2:76:30:e9:c2:b0:cf:a0:81:1d:4a:ad:ae:16:26:2b:ca: 0e:5d:b0:9f:70:0f:69:96:ac:c5:3d:19:8a:12:ce:50:ed:f1: ab:9f:4d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu0MoLdKFS8M0hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk NzE0MWZlMjAtYjgxNC00ZDRiLWExNTgtOGY3NDRkYTFmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCCYw1EAJFW+lIJbwn5+6MGXHGGwZhX1z+uP UjJLme35kQZ8rXZZJayPBRnOpZHtaGDReSponqxAt8WcBnTQeCRVPSzzkK/iCMTi Lji2NL6QCNqOlzvXVDWm+ORBVTTZSaX7ysJtQGQ4QSmMC9F2MsyzMa+G8uNqN282 yx9mYCy79fT5DczvQeQtVJSABNItsCHQl8khzGQXJzHUQvV6q6dxKqpibO4y9ISE 5IL6BlQdvvIDES6ygzPxmkNAdv4u0X8JufbpBvU4kvNrnqMTSCT2WmLzxzLRTnS/ 12JKvR0IXGRPI44bt2qYXJzZWZ3l288YdBpqI9XBUP90Z3DGmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUXh1RV2nuHhmDUmmtsSv6SyKdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjc2MTc1OTAtMmJiMC0z MjYzLTg3MTEtM2VjZjRlNTQ2MGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCYaW1ZXyaw8AqvaZRrPGgD6AG/JfLa4Ek6dAmrE5Lk78onBWsj6HGn PyGoomfAgAFUoHjXzcKwzB+QhUthq2EPci4SjDEIzhNi50RnIQN5hAr62R4nOegM Ew1XO175Y8JkVmVbYaAEknxsc0DoXzQTBHBZSKkOG5NMK8AYIDjZ5jPCDz9bxo8L 4rXg/wBwK0HRk2hsar15p8nOj/ntOvHffftGK9lqbITPhbFhqqZEoLHrnxlKojhY z3IWz2WccmLWDfbBncj4gp+DQBG/PB0a4/3c5mLlymzydjDpwrDPoIEdSq2uFiYr yg5dsJ9wD2mWrMU9GYoSzlDt8aufTWg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:16 2025 by rpki-client