$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa File: 3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa (raw, json) Hash identifier: Y2KyAKrL1JM5HjEkCLfgY5aGGqbpSfrdbS0OsV18VRA= Subject key identifier: 6C:A5:BC:E0:A2:CE:DC:33:76:98:DC:27:83:A2:1F:54:BF:8E:12:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EC8974F97550F91DB9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396572 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:89:74:f9:75:50:f9:1d:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=588ec5b9-ec10-42ef-a28f-068cee76240a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:27:0a:a6:df:4d:6a:6d:3f:5b:6e:47:31: 84:a8:55:80:59:5e:6c:08:c9:53:6d:36:e3:1b:7f: 52:94:eb:40:aa:7e:a6:f4:d2:70:dc:2c:63:1a:7b: f7:89:5d:90:5f:7f:d0:05:20:83:86:08:df:93:54: ad:1e:fa:28:b5:95:36:c0:e6:1d:da:53:eb:80:64: b4:36:55:c6:66:a2:14:05:59:4f:56:bc:b7:d2:05: de:47:03:16:a6:db:45:ba:43:1c:43:09:ba:69:95: 20:74:54:2b:1b:5f:62:0c:af:96:9b:50:6a:9f:6e: cb:67:a2:42:30:17:a3:9f:d2:0a:8e:93:ab:4d:f8: 02:ac:60:19:05:33:c7:93:6d:95:eb:58:12:d6:4b: 6c:a6:28:d8:d8:03:8c:8b:5f:af:06:fb:66:03:a5: 06:89:1f:1c:ca:7a:b2:54:76:61:43:64:80:97:86: b4:95:5d:f1:ba:a5:9c:b7:1a:3d:a9:ec:e7:e6:57: 33:62:c0:29:25:d5:c6:5c:0c:66:58:e5:20:c5:d7: 54:3c:34:33:e3:4a:c9:84:9c:0d:1a:c5:12:5c:04: 20:0a:70:25:04:f5:66:ea:b6:48:42:85:81:30:60: 3f:f0:50:9a:2c:9a:35:84:f4:f4:3a:13:7f:24:4a: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A5:BC:E0:A2:CE:DC:33:76:98:DC:27:83:A2:1F:54:BF:8E:12:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:de:6e:d6:49:15:af:d4:c9:e3:72:2a:7b:1a:a1:cb:82:f0: 5a:2e:ff:6d:93:ae:0a:1a:58:38:17:ae:1f:82:71:8d:6d:bc: f4:06:77:3d:56:3b:7a:23:d1:3f:3a:98:32:73:1d:b3:ad:0a: eb:62:dd:99:c0:81:db:21:56:68:18:ed:00:a4:fe:70:c2:72: fc:36:b2:0b:ef:c0:09:59:ed:e8:00:c2:58:e2:09:64:de:56: 70:22:b2:a5:a9:64:15:bd:00:22:cd:c0:e7:0a:65:e5:4d:04: aa:51:32:42:d7:8c:e3:5a:ca:62:12:fb:e5:7f:65:2b:e0:03: b5:b3:8a:54:57:41:f1:ab:92:0d:ee:22:28:dd:4b:4f:f5:0e: 9d:7d:67:33:68:98:b9:62:fa:47:97:33:7f:b3:b0:38:ea:aa: cf:bd:9c:08:68:c6:e7:26:a7:84:a9:65:9f:b3:14:35:a7:cd: a6:16:c1:0b:4f:fb:68:21:16:e8:b6:4f:53:9d:a2:66:7c:5c: 59:15:cf:24:6d:b0:9a:f7:36:1b:4e:69:93:8f:ba:17:b3:8f: 1d:d8:19:f0:b9:17:11:64:c7:94:11:4b:a7:49:15:14:96:b3: cb:78:64:d0:ca:5c:90:2e:9c:26:d4:eb:c2:0a:43:cd:76:a5: 02:2d:a0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuyJdPl1UPkducAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk NTg4ZWM1YjktZWMxMC00MmVmLWEyOGYtMDY4Y2VlNzYyNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaMnCqbfTWptP1tuRzGEqFWAWV5sCMlTbTbj G39SlOtAqn6m9NJw3CxjGnv3iV2QX3/QBSCDhgjfk1StHvootZU2wOYd2lPrgGS0 NlXGZqIUBVlPVry30gXeRwMWpttFukMcQwm6aZUgdFQrG19iDK+Wm1Bqn27LZ6JC MBejn9IKjpOrTfgCrGAZBTPHk22V61gS1ktspijY2AOMi1+vBvtmA6UGiR8cynqy VHZhQ2SAl4a0lV3xuqWctxo9qezn5lczYsApJdXGXAxmWOUgxddUPDQz40rJhJwN GsUSXAQgCnAlBPVm6rZIQoWBMGA/8FCaLJo1hPT0OhN/JEplOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGylvOCiztwzdpjcJ4OiH1S/jhKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2QwMTRkZjUtOGI1Zi0z NGMzLWE0YjYtNGZiZTViMjg3MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATebtZJFa/UyeNyKnsaocuC8Fou/22TrgoaWDgXrh+CcY1tvPQGdz1W O3oj0T86mDJzHbOtCuti3ZnAgdshVmgY7QCk/nDCcvw2sgvvwAlZ7egAwljiCWTe VnAisqWpZBW9ACLNwOcKZeVNBKpRMkLXjONaymIS++V/ZSvgA7WzilRXQfGrkg3u IijdS0/1Dp19ZzNomLli+keXM3+zsDjqqs+9nAhoxucmp4SpZZ+zFDWnzaYWwQtP +2ghFui2T1OdomZ8XFkVzyRtsJr3NhtOaZOPuhezjx3YGfC5FxFkx5QRS6dJFRSW s8t4ZNDKXJAunCbU68IKQ812pQItoIw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:22 2025 by rpki-client