$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa File: 3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa (raw, json) Hash identifier: 4goksqm1TF5/+aQgzzT256KEMieYM1SIPBREaQ0LUw8= Subject key identifier: F6:AC:09:79:89:01:1E:84:7E:4B:92:8B:AD:38:BC:6D:35:12:52:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ED8E3272DE1D23C04B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396552 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:8e:32:72:de:1d:23:c0:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=131048a1-e435-4cd0-8a17-c21803701475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:2d:65:ad:20:c0:e7:6d:c4:9f:e2:f4:62: 09:e6:39:e8:1e:34:0e:64:c0:a7:05:58:a5:14:ed: 15:85:8b:41:d6:cc:8d:cc:36:54:09:b1:73:f3:ba: aa:65:ab:d1:1c:3d:63:f7:c5:39:98:a6:1e:69:0c: f4:9b:da:c1:23:c3:b1:ba:30:da:25:59:69:48:ea: ec:e2:28:67:b6:72:c3:91:62:c4:37:50:35:26:60: fe:57:1d:34:ce:7f:00:4c:29:c9:8f:d1:54:fe:91: 45:76:56:18:be:7d:51:98:15:4d:fb:84:16:c5:59: 63:b8:e6:d4:59:f9:92:14:b8:98:a7:71:93:47:6d: c9:66:ed:70:a1:28:5d:a8:11:71:c8:53:2a:be:3e: 46:ee:08:c0:a0:4a:75:d1:4b:ff:22:29:19:87:c1: 40:39:18:70:47:b7:0b:11:83:35:8f:17:39:4a:d5: fb:70:5a:cf:98:fc:de:03:1c:5f:15:c4:40:57:c5: 6c:d7:15:b3:2a:69:a8:0c:42:36:d2:6d:9a:ec:66: 6f:5a:8e:52:d6:7b:66:5e:76:2d:b3:80:e5:f5:46: cb:37:cf:c6:01:53:13:75:03:da:af:b3:33:2e:4d: ad:81:41:f2:a2:a1:17:25:28:93:ab:c7:c9:cc:97: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AC:09:79:89:01:1E:84:7E:4B:92:8B:AD:38:BC:6D:35:12:52:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5d:b3:fc:3e:02:d5:c9:b0:96:e6:80:68:4f:90:2a:b8:32: fa:64:fd:47:78:a2:7e:0f:8b:90:f7:a8:a5:e7:a2:70:6c:e4: b6:51:c7:93:2b:30:9c:79:db:65:39:a4:67:02:7c:0d:59:46: b9:5d:ab:36:10:e7:06:b4:f5:5c:d8:83:f5:a3:1e:16:ed:01: 8f:8b:7c:7c:c2:0d:43:05:a6:8b:e7:d3:ff:a8:d4:e9:02:e9: 8a:58:6d:42:60:0d:b3:04:c0:b7:90:b4:d0:88:9d:cf:ea:a8: 61:e8:7a:f6:ae:1f:a2:5d:8a:99:9c:b3:f0:b7:f9:22:21:ab: a0:34:b6:2a:82:bd:02:98:bf:93:7c:15:6f:4a:06:c5:77:f9: c4:c1:ed:fc:9d:01:bb:dd:c4:26:56:f4:58:5a:c6:33:5f:8a: 35:6c:b5:20:00:1c:0a:60:5c:08:dc:a4:11:9a:f2:d9:3e:41: 0b:f9:80:fc:38:36:ab:89:7a:f4:7a:32:ca:7d:6d:49:d7:07: 0c:01:23:39:a0:d1:84:2e:3d:87:db:72:1e:f1:52:8c:6a:80: 48:27:c8:77:15:a2:33:ae:b1:60:46:26:7e:84:a5:fe:a3:95: dc:89:4e:cf:d1:ce:3e:cd:0d:78:ca:a3:68:79:59:02:63:40: 20:22:f7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu2OMnLeHSPAS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MTMxMDQ4YTEtZTQzNS00Y2QwLThhMTctYzIxODAzNzAxNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MtZa0gwOdtxJ/i9GIJ5jnoHjQOZMCnBVil FO0VhYtB1syNzDZUCbFz87qqZavRHD1j98U5mKYeaQz0m9rBI8OxujDaJVlpSOrs 4ihntnLDkWLEN1A1JmD+Vx00zn8ATCnJj9FU/pFFdlYYvn1RmBVN+4QWxVljuObU WfmSFLiYp3GTR23JZu1woShdqBFxyFMqvj5G7gjAoEp10Uv/IikZh8FAORhwR7cL EYM1jxc5StX7cFrPmPzeAxxfFcRAV8Vs1xWzKmmoDEI20m2a7GZvWo5S1ntmXnYt s4Dl9UbLN8/GAVMTdQPar7MzLk2tgUHyoqEXJSiTq8fJzJfYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPasCXmJAR6EfkuSi604vG01ElIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I4YTdkNzUtOWNhMS0z ZDI3LWIyYTktOWFmODg3OTk2ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhds/w+AtXJsJbmgGhPkCq4Mvpk/Ud4on4Pi5D3qKXnonBs5LZRx5Mr MJx522U5pGcCfA1ZRrldqzYQ5wa09VzYg/WjHhbtAY+LfHzCDUMFpovn0/+o1OkC 6YpYbUJgDbMEwLeQtNCInc/qqGHoevauH6Jdipmcs/C3+SIhq6A0tiqCvQKYv5N8 FW9KBsV3+cTB7fydAbvdxCZW9FhaxjNfijVstSAAHApgXAjcpBGa8tk+QQv5gPw4 NquJevR6Msp9bUnXBwwBIzmg0YQuPYfbch7xUoxqgEgnyHcVojOusWBGJn6Epf6j ldyJTs/Rzj7NDXjKo2h5WQJjQCAi91M= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:36 2025 by rpki-client