$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa File: 34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa (raw, json) Hash identifier: b1zvvsRkJLbSReKgfbtlFTJpn8iZMzuTJhOp/S3qrLg= Subject key identifier: 6E:24:4C:87:66:53:92:76:FB:D1:20:05:A8:C6:67:C7:44:29:2A:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E9BDDE9FD840A09BC7B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 22547 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:bd:de:9f:d8:40:a0:9b:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=ed708db1-8fcd-4ac0-80fd-9bc442cad877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:f1:10:27:91:6a:46:d4:4c:3f:15:ec:4a: ff:b0:6e:50:0c:76:10:42:11:4a:d8:37:7f:b4:14: 66:fe:f8:13:ee:be:6d:9f:e8:5e:59:bb:8c:32:33: 9a:fc:89:6e:4f:df:8b:7a:f6:d4:91:d3:90:32:4a: e2:66:61:24:ec:54:58:5b:59:9f:c2:9f:49:1f:5e: 7e:3b:2b:d2:ef:f6:5f:a5:01:bf:04:e2:4b:93:b6: 98:8e:d9:0c:c7:11:20:4a:3a:b7:a2:cd:3e:70:00: e1:5c:4e:33:26:79:48:29:52:5e:8c:57:fb:84:95: 07:26:91:31:01:6d:dc:43:6b:76:05:72:7e:f7:9b: 00:57:f5:fc:02:a0:5d:71:a0:f6:ac:01:9c:5d:b3: 0f:77:c8:aa:ed:56:12:b9:22:87:4c:15:ca:7d:a7: 20:ae:86:59:20:80:4e:d5:04:9e:b1:23:ac:42:2e: 0d:79:63:24:f6:25:32:f2:60:cc:2c:6b:92:b5:ee: 6c:10:12:74:af:9e:a0:fd:4f:3a:19:34:67:24:dd: f1:3f:56:91:a4:ee:0b:2f:6e:39:60:48:69:09:18: 3d:f9:f8:f4:5a:11:89:e5:56:00:3c:71:70:54:ca: 34:d9:2a:9c:81:5a:a6:7c:70:55:05:65:9e:ba:46: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:4C:87:66:53:92:76:FB:D1:20:05:A8:C6:67:C7:44:29:2A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:15:b9:37:e1:f9:97:8d:f9:0b:30:2d:cb:32:7e:52:01:90: a7:37:0d:73:a5:40:da:b3:32:ce:9d:b3:c0:59:5e:45:8a:c1: cc:3a:a0:ae:58:27:00:6c:0e:76:76:1f:4b:30:8a:6d:42:dd: 51:df:40:01:b7:23:7f:6f:1f:70:c7:e1:bb:15:60:a3:b6:d2: 3b:45:a0:4e:2f:11:6e:d3:8c:ed:22:f0:7b:02:8c:4a:e8:1d: 86:98:e3:d5:19:e8:ad:01:11:04:2e:8b:99:33:47:3d:7e:ac: 90:7a:63:18:dd:74:7a:61:d3:e1:d3:42:ea:86:72:70:3e:48: bb:6e:e3:b1:10:98:f8:b6:95:87:3a:6f:ba:c0:90:7b:79:99: 59:70:05:b9:9f:93:46:e1:c0:3b:f5:6c:87:09:fa:5f:dd:8d: 01:35:c3:0c:79:8d:6c:24:9d:0a:84:23:f1:23:00:0a:55:52: c9:b8:04:30:fc:13:3d:0b:f4:20:51:29:8a:97:81:6f:c2:72: 67:c3:fe:38:59:dd:d8:da:5d:b3:4c:2f:8a:08:34:26:53:f7: 77:14:89:0d:df:18:02:51:7b:49:36:d9:cf:bc:f3:42:4f:b9: 7c:00:35:0e:6a:5c:9f:9b:a3:4d:23:c9:b5:c1:1e:51:2f:30: 3a:da:ea:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYum93p/YQKCbx7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk ZWQ3MDhkYjEtOGZjZC00YWMwLTgwZmQtOWJjNDQyY2FkODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PxECeRakbUTD8V7Er/sG5QDHYQQhFK2Dd/ tBRm/vgT7r5tn+heWbuMMjOa/IluT9+LevbUkdOQMkriZmEk7FRYW1mfwp9JH15+ OyvS7/ZfpQG/BOJLk7aYjtkMxxEgSjq3os0+cADhXE4zJnlIKVJejFf7hJUHJpEx AW3cQ2t2BXJ+95sAV/X8AqBdcaD2rAGcXbMPd8iq7VYSuSKHTBXKfacgroZZIIBO 1QSesSOsQi4NeWMk9iUy8mDMLGuSte5sEBJ0r56g/U86GTRnJN3xP1aRpO4LL245 YEhpCRg9+fj0WhGJ5VYAPHFwVMo02SqcgVqmfHBVBWWeukZNpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4kTIdmU5J2+9EgBajGZ8dEKSrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzRiMzNiMmItMWQ0Yy0z MzBkLTlkOTAtOGNiZTAyMWU5ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwVuTfh+ZeN+QswLcsyflIBkKc3DXOlQNqzMs6ds8BZXkWKwcw6oK5Y JwBsDnZ2H0swim1C3VHfQAG3I39vH3DH4bsVYKO20jtFoE4vEW7TjO0i8HsCjEro HYaY49UZ6K0BEQQui5kzRz1+rJB6YxjddHph0+HTQuqGcnA+SLtu47EQmPi2lYc6 b7rAkHt5mVlwBbmfk0bhwDv1bIcJ+l/djQE1wwx5jWwknQqEI/EjAApVUsm4BDD8 Ez0L9CBRKYqXgW/CcmfD/jhZ3djaXbNML4oINCZT93cUiQ3fGAJRe0k22c+880JP uXwANQ5qXJ+bo00jybXBHlEvMDra6nE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:03 2025 by rpki-client