$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa File: 3452058a-98d8-35f5-9181-437d017e7520.roa (raw, json) Hash identifier: hDk+qkNcVXGjTDh9zTLU9EqqdODgxtK8Tmt/yOANtqo= Subject key identifier: 04:F4:A1:9E:05:5D:9F:90:E9:19:15:47:07:DD:2A:AA:CD:C5:0B:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EF60F52584DBC81F0080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396613 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:60:f5:25:84:db:c8:1f:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=211b2032-af0b-4380-a84b-21072e523e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:68:80:7e:86:48:8e:78:29:14:80:e0:e8: ea:2b:06:45:44:e9:92:57:36:a2:08:71:0c:41:b4: 82:80:85:25:b4:88:a2:bf:eb:ca:d9:0f:66:3a:11: ca:66:47:ef:f5:8d:dc:87:4c:82:f9:06:5c:95:d2: 43:b4:d2:44:00:2e:9e:2e:49:72:c2:7b:f5:8c:06: db:ad:42:38:fd:ce:95:b1:8f:5f:4b:51:d2:3c:3e: 17:6c:d0:ba:6b:eb:90:25:a9:a8:76:c5:cf:b1:0f: 75:b3:5e:4a:c2:01:c0:a5:79:67:8f:56:99:c1:b3: 52:06:3b:6d:b9:31:b9:95:e2:ce:3b:e1:02:26:46: fa:c3:7c:10:c5:c1:4a:ae:c9:23:2a:75:79:47:f0: 2e:39:0a:10:9f:68:f7:40:43:5a:4d:5d:ba:f3:7e: 6c:77:2c:f2:cb:77:5d:26:e0:de:ae:1f:6f:dd:ed: b3:37:be:c9:6f:7a:89:9f:cb:91:c3:71:ad:be:d3: e9:c7:41:97:92:cd:d0:c4:52:ec:3b:33:68:02:18: 37:ed:18:95:f1:04:98:a6:62:1f:46:73:bd:88:f2: 55:fa:31:46:e9:b3:86:39:41:82:50:0a:a6:c2:dd: ae:ba:ef:a8:ce:ca:11:83:75:db:8b:af:1e:70:28: eb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:A1:9E:05:5D:9F:90:E9:19:15:47:07:DD:2A:AA:CD:C5:0B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:92:fb:45:70:cb:7f:17:e5:e9:69:e0:16:c5:42:a9:f8:1a: af:f1:35:e3:ec:18:5c:24:38:b6:04:89:3a:6b:b6:f4:f6:96: e4:3e:99:38:9a:99:f0:de:05:55:fa:f8:9d:c3:c1:88:67:bb: e4:90:70:ff:7c:a2:b7:d0:43:8d:c7:59:81:c0:01:22:3f:a0: e3:e6:c4:53:97:94:bd:7c:bc:50:99:c7:46:e1:a3:d6:de:c6: 64:e0:03:10:9f:2e:ed:4f:1b:f2:59:5c:68:da:32:e0:80:09: 05:e9:e7:be:a6:c8:1f:42:18:81:a7:02:8c:9c:33:f2:1e:36: d6:55:fc:45:05:9c:0a:13:b1:f7:31:9d:b5:28:89:a6:76:69: cd:a3:a1:df:8f:38:c1:bc:35:60:6f:0a:e1:d3:26:26:95:b4: 8c:cc:34:99:3b:88:21:44:04:fe:56:56:d3:1c:a4:2f:f1:ff: c0:5e:8d:ae:d1:48:15:fb:8e:b4:00:88:52:e7:7e:0f:43:34: 82:ed:31:bc:30:75:0f:90:1e:15:37:04:85:44:fb:81:99:b1: d9:66:78:92:f6:2b:3c:41:e5:1a:25:a8:10:29:5a:83:8e:12: 5e:9e:4b:f6:58:f3:ed:c1:ec:41:43:5d:83:ac:dd:bf:c2:2e: 9c:9f:8d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu9g9SWE28gfAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MjExYjIwMzItYWYwYi00MzgwLWE4NGItMjEwNzJlNTIzZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9ogH6GSI54KRSA4OjqKwZFROmSVzaiCHEM QbSCgIUltIiiv+vK2Q9mOhHKZkfv9Y3ch0yC+QZcldJDtNJEAC6eLklywnv1jAbb rUI4/c6VsY9fS1HSPD4XbNC6a+uQJamodsXPsQ91s15KwgHApXlnj1aZwbNSBjtt uTG5leLOO+ECJkb6w3wQxcFKrskjKnV5R/AuOQoQn2j3QENaTV26835sdyzyy3dd JuDerh9v3e2zN77Jb3qJn8uRw3GtvtPpx0GXks3QxFLsOzNoAhg37RiV8QSYpmIf RnO9iPJV+jFG6bOGOUGCUAqmwt2uuu+ozsoRg3Xbi68ecCjrNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT0oZ4FXZ+Q6RkVRwfdKqrNxQu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1MjA1OGEtOThkOC0z NWY1LTkxODEtNDM3ZDAxN2U3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuS+0Vwy38X5elp4BbFQqn4Gq/xNePsGFwkOLYEiTprtvT2luQ+mTia mfDeBVX6+J3DwYhnu+SQcP98orfQQ43HWYHAASI/oOPmxFOXlL18vFCZx0bho9be xmTgAxCfLu1PG/JZXGjaMuCACQXp576myB9CGIGnAoycM/IeNtZV/EUFnAoTsfcx nbUoiaZ2ac2jod+POMG8NWBvCuHTJiaVtIzMNJk7iCFEBP5WVtMcpC/x/8Beja7R SBX7jrQAiFLnfg9DNILtMbwwdQ+QHhU3BIVE+4GZsdlmeJL2KzxB5RolqBApWoOO El6eS/ZY8+3B7EFDXYOs3b/CLpyfjZU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:54 2025 by rpki-client