$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa File: 31ef6804-c222-38b5-9deb-838a0569e02a.roa (raw, json) Hash identifier: m6uNsrTzJxTh/0ahQDZKRaerPo3TLW2Q7W2hspJH30A= Subject key identifier: C1:B9:51:7D:C3:50:5E:E1:D8:64:5D:EB:03:78:5C:B7:34:75:E0:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E9F64AB1CF40E3F31C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396599 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:f6:4a:b1:cf:40:e3:f3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=4f011bb4-35d4-451b-af56-ab50cd1313e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:6b:23:e2:bd:17:75:7f:71:19:ba:70:19: 43:1e:a8:40:0b:74:24:3d:54:75:63:aa:1a:64:78: cd:22:19:b7:17:09:1b:9f:9c:3e:35:48:46:3f:10: ec:a9:f3:16:c6:c7:5f:f7:ae:de:5e:c1:af:c9:36: 26:c1:ca:a5:c1:a9:a4:0c:91:01:2f:25:cb:e3:3b: ff:4d:f9:44:f1:da:e4:08:ab:c2:c4:07:e5:e6:58: 1f:bf:27:2b:cd:16:96:f0:ef:00:58:36:f2:c9:a0: c9:93:60:eb:cd:85:ae:12:c4:ba:76:91:c6:10:a7: 08:30:44:6d:19:39:81:98:7e:83:22:9d:18:96:1f: 0a:8a:53:7d:1d:3e:31:35:16:e2:c2:de:09:bc:3b: 57:20:35:18:e9:47:8d:d7:a7:01:c7:bd:21:20:ff: e4:aa:98:af:12:5a:4d:54:1c:5f:df:67:96:8d:61: 9b:53:e7:f3:e8:2e:4b:b8:96:6a:04:14:19:59:e5: 53:eb:ef:53:08:6f:f2:b6:a3:26:d4:49:c1:72:ad: 86:d5:c2:79:60:f9:43:11:dc:7c:db:38:55:0c:d8: 29:85:f9:b1:99:21:14:c9:fc:36:28:0b:45:f4:27: 24:1c:6d:60:14:55:9e:4a:21:40:a5:1c:ad:30:73: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:51:7D:C3:50:5E:E1:D8:64:5D:EB:03:78:5C:B7:34:75:E0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:78:93:e1:a4:1e:77:dc:b7:7a:5d:a3:f1:58:68:f9:a5:c3: cc:d4:b8:30:20:b0:59:d5:fc:bf:9e:df:24:c1:23:da:40:98: 8b:69:08:f9:8f:71:f5:e5:bb:93:a2:58:62:e2:fd:47:f7:af: 4b:a8:2b:13:46:11:7f:de:9c:58:d1:fe:64:9b:06:58:49:1d: 35:bf:70:5e:9f:08:f5:f5:bb:c4:5a:d3:85:5b:b4:7b:78:05: 6c:8a:c7:3f:ea:f9:2a:70:e3:56:0d:46:a6:9f:ef:ec:f7:15: 35:cb:d0:d7:dd:6f:61:57:aa:1c:e0:4c:ed:19:a3:39:27:fe: b5:0f:45:97:0b:19:2b:c3:83:4b:b7:eb:85:1c:f3:2e:fc:c5: 79:2b:50:5b:d4:58:cf:a2:1a:83:de:da:bb:aa:b0:dd:d0:af: 55:c3:e2:13:69:7c:c6:a7:53:1a:ab:62:b3:55:7f:0a:f5:cc: 59:78:90:37:eb:bd:05:65:ca:67:93:0e:c6:c0:29:df:69:a1: 8e:f8:85:aa:07:50:7f:b1:9b:d8:26:50:ad:88:a7:33:da:7d: 87:32:60:d3:64:15:7d:23:82:c4:58:94:3b:49:61:c5:da:bc: 68:2b:bf:df:a9:72:72:24:d4:34:d0:f2:7c:8b:f5:0c:9b:c3: 62:d8:61:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYun2SrHPQOPzHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NGYwMTFiYjQtMzVkNC00NTFiLWFmNTYtYWI1MGNkMTMxM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OZrI+K9F3V/cRm6cBlDHqhAC3QkPVR1Y6oa ZHjNIhm3Fwkbn5w+NUhGPxDsqfMWxsdf967eXsGvyTYmwcqlwamkDJEBLyXL4zv/ TflE8drkCKvCxAfl5lgfvycrzRaW8O8AWDbyyaDJk2DrzYWuEsS6dpHGEKcIMERt GTmBmH6DIp0Ylh8KilN9HT4xNRbiwt4JvDtXIDUY6UeN16cBx70hIP/kqpivElpN VBxf32eWjWGbU+fz6C5LuJZqBBQZWeVT6+9TCG/ytqMm1EnBcq2G1cJ5YPlDEdx8 2zhVDNgphfmxmSEUyfw2KAtF9CckHG1gFFWeSiFApRytMHPBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG5UX3DUF7h2GRd6wN4XLc0deAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFlZjY4MDQtYzIyMi0z OGI1LTlkZWItODM4YTA1NjllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ4k+GkHnfct3pdo/FYaPmlw8zUuDAgsFnV/L+e3yTBI9pAmItpCPmP cfXlu5OiWGLi/Uf3r0uoKxNGEX/enFjR/mSbBlhJHTW/cF6fCPX1u8Ra04VbtHt4 BWyKxz/q+Spw41YNRqaf7+z3FTXL0Nfdb2FXqhzgTO0Zozkn/rUPRZcLGSvDg0u3 64Uc8y78xXkrUFvUWM+iGoPe2ruqsN3Qr1XD4hNpfManUxqrYrNVfwr1zFl4kDfr vQVlymeTDsbAKd9poY74haoHUH+xm9gmUK2IpzPafYcyYNNkFX0jgsRYlDtJYcXa vGgrv9+pcnIk1DTQ8nyL9Qybw2LYYRY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:13 2025 by rpki-client