$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa File: 3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa (raw, json) Hash identifier: 2G7byoh+0VtAZ1xXwV92JCLtzLPpcH1AkLDz1+Oe1sw= Subject key identifier: E0:DF:94:80:80:36:16:C7:A5:B2:1D:57:C5:67:66:D1:AC:B7:04:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EA0458CD89B7E4402A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396567 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:04:58:cd:89:b7:e4:40:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=f670ea14-be7d-4c8c-ae26-40c92b3468e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:b5:73:e8:78:71:b1:7d:d6:56:e0:1c:50: cf:69:b3:b5:1d:d5:89:3e:6b:9f:b2:b8:aa:5e:56: f3:04:84:1b:87:7b:be:6f:69:b7:d3:5f:2d:83:b4: 4e:bc:32:6d:49:05:8c:bf:25:b3:60:97:0c:28:db: ba:ad:bf:eb:53:1f:6d:76:f3:cb:dc:19:47:82:bc: 8a:60:64:fa:72:85:84:f9:79:35:90:96:c4:e8:43: 01:30:6f:f8:83:ff:74:7b:60:9e:5f:98:c6:8e:11: 94:a2:bf:7d:84:e9:e9:98:7e:a3:de:dc:6c:d7:7b: 75:bf:ce:e6:e9:1d:89:ed:53:d2:34:bb:82:b7:61: 4e:bc:88:74:2a:73:b0:82:fe:ac:c1:f2:ff:13:5e: de:b5:bd:94:4b:8d:33:4a:c0:a2:37:52:51:fd:81: a1:ff:36:e4:d8:8c:f3:5b:99:fc:6a:20:9a:ce:c1: f2:cf:36:20:45:14:cd:13:5b:81:a7:1f:c5:86:c9: 25:71:cd:57:b3:e8:64:a3:ce:c4:51:2d:5c:20:29: 52:93:3e:68:27:eb:9f:89:da:7d:12:59:91:fb:eb: 45:f1:51:9e:a3:f2:7b:29:3d:11:47:5d:02:3a:79: 0a:b3:a8:f6:3f:86:9d:e9:6a:de:e3:7d:61:f6:12: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:94:80:80:36:16:C7:A5:B2:1D:57:C5:67:66:D1:AC:B7:04:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:db:ee:c7:de:79:40:76:27:26:70:3f:13:40:e2:94:9b:2e: be:50:20:2e:b1:f4:5f:30:a3:ea:fc:a3:e4:f9:da:54:0a:e4: 95:b4:90:07:46:a4:e4:b7:bd:23:5b:1e:0a:4a:fe:72:29:25: 94:98:0c:c5:fb:e2:9f:77:3d:77:e3:5a:7c:49:a1:e7:d1:3b: 75:a0:ff:05:20:c9:e7:f9:27:b7:e6:f8:10:ec:89:db:01:d8: 8d:94:72:81:b6:9e:4a:a3:99:2e:6c:f2:f4:1f:64:74:6a:62: 69:61:fb:39:f8:94:a1:44:7c:da:78:5f:df:5b:06:06:c4:ab: 95:e3:4a:84:c5:6d:4e:53:c3:12:66:de:87:f1:7d:5d:e5:cb: 95:11:59:01:6b:71:5e:ed:59:96:53:b6:ff:95:73:6f:90:98: 45:d8:02:58:da:3f:b3:fb:c6:6a:25:67:68:a2:cc:37:33:85: 87:d7:da:e7:63:96:78:46:d9:73:3d:54:0b:e8:c8:38:3c:b3: 2c:60:49:91:89:36:72:c7:d2:de:96:4a:5a:cd:c7:b6:8e:cf: 05:27:12:e0:14:21:0a:df:b1:a3:87:37:76:80:21:0f:e3:c9: ed:dc:ee:22:86:8f:a7:95:34:fa:90:39:56:8d:d4:ed:78:ec: e5:1d:75:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuoEWM2Jt+RAKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk ZjY3MGVhMTQtYmU3ZC00YzhjLWFlMjYtNDBjOTJiMzQ2OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRS1c+h4cbF91lbgHFDPabO1HdWJPmufsriq XlbzBIQbh3u+b2m3018tg7ROvDJtSQWMvyWzYJcMKNu6rb/rUx9tdvPL3BlHgryK YGT6coWE+Xk1kJbE6EMBMG/4g/90e2CeX5jGjhGUor99hOnpmH6j3txs13t1v87m 6R2J7VPSNLuCt2FOvIh0KnOwgv6swfL/E17etb2US40zSsCiN1JR/YGh/zbk2Izz W5n8aiCazsHyzzYgRRTNE1uBpx/Fhsklcc1Xs+hko87EUS1cIClSkz5oJ+ufidp9 ElmR++tF8VGeo/J7KT0RR10COnkKs6j2P4ad6Wre431h9hJFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODflICANhbHpbIdV8VnZtGstwSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNTdiYzktZDI3Yi0z ODkxLTg1Y2YtZjcwYTRkOTZiNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrb7sfeeUB2JyZwPxNA4pSbLr5QIC6x9F8wo+r8o+T52lQK5JW0kAdG pOS3vSNbHgpK/nIpJZSYDMX74p93PXfjWnxJoefRO3Wg/wUgyef5J7fm+BDsidsB 2I2UcoG2nkqjmS5s8vQfZHRqYmlh+zn4lKFEfNp4X99bBgbEq5XjSoTFbU5TwxJm 3ofxfV3ly5URWQFrcV7tWZZTtv+Vc2+QmEXYAljaP7P7xmolZ2iizDczhYfX2udj lnhG2XM9VAvoyDg8syxgSZGJNnLH0t6WSlrNx7aOzwUnEuAUIQrfsaOHN3aAIQ/j ye3c7iKGj6eVNPqQOVaN1O147OUddW4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:13 2025 by rpki-client