$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/406ecc2c-96a7-3bad-a94c-ab5c902edb17.roa File: 406ecc2c-96a7-3bad-a94c-ab5c902edb17.roa (raw, json) Hash identifier: q/5rtM+riYPycZRPGW1H3RCw/fBe+xvwU94uHSF0h+k= Subject key identifier: FD:7F:98:A5:3C:CF:E3:10:53:68:01:0E:69:AD:26:7F:05:E4:A5:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ECA51E105049F31FBC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/406ecc2c-96a7-3bad-a94c-ab5c902edb17.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396612 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:a5:1e:10:50:49:f3:1f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=c03384da-8165-4bf6-90e2-ce7bed2d8973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:f5:ba:9b:9c:b9:b6:eb:8c:3c:55:bd:fa: a0:48:e2:24:ff:ae:f8:d7:e8:60:72:fd:9d:a8:84: a4:4d:89:6f:d8:5a:43:c0:86:99:ce:f3:fc:d3:21: 75:ee:9c:5a:fa:20:1c:50:78:2a:3d:b3:d1:e4:03: 3b:5f:d3:82:2d:76:f3:1a:db:89:23:8b:22:74:4a: 41:9b:41:27:50:d8:20:8a:96:3e:db:63:5b:20:76: 3d:b3:6e:38:72:0e:70:54:c9:c7:43:ab:24:4d:4c: a7:45:47:fb:bd:00:c3:c7:1a:ce:6f:24:b4:47:af: 77:16:fc:a0:51:11:cb:c2:f3:27:9e:75:cf:35:a2: 43:33:7a:34:ac:a7:07:e4:3b:09:1d:d5:77:e2:31: ec:93:42:dd:dd:05:04:f5:52:a8:3b:54:dd:a1:99: 6b:d2:05:f2:46:72:e8:b6:6c:36:af:d3:19:c5:26: bd:07:0e:4f:69:f4:2f:b5:41:82:25:70:97:6e:d5: c1:35:15:f9:63:e2:7d:d1:e7:a7:3a:76:3e:9e:f6: 69:1f:6a:9a:5e:23:29:ab:10:b9:66:1e:b6:df:06: 6b:bc:a6:c2:75:90:7c:77:75:c9:1a:1b:d5:ae:01: 9c:c2:0d:f8:b3:34:a3:a3:28:0a:fd:5a:73:76:99: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:98:A5:3C:CF:E3:10:53:68:01:0E:69:AD:26:7F:05:E4:A5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/406ecc2c-96a7-3bad-a94c-ab5c902edb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5c:a7:90:9b:2f:f0:ec:29:b7:01:13:68:7d:1f:93:6f:da: c4:9e:89:eb:a7:ca:e1:af:5c:24:40:76:0d:93:8d:14:47:8d: 77:f3:7b:8c:e1:da:b8:f8:2b:50:25:a7:6c:97:27:cf:9b:d8: c6:9e:36:74:b7:82:e9:22:6f:e4:c9:d8:fd:14:7d:84:d7:6d: ad:5f:37:53:c3:72:fe:2b:41:5c:6c:de:00:01:7b:69:87:8c: b1:69:20:7d:13:76:bd:3c:84:22:1f:11:bb:c7:2a:b9:90:fe: e8:1e:ec:95:f0:59:86:e4:fc:70:6f:28:75:ff:35:8e:66:a9: 23:ee:21:e2:3b:4a:54:96:20:d1:eb:04:38:7e:c3:03:2e:f9: 6a:71:d0:fa:89:14:40:16:40:14:26:d9:d7:a8:56:e5:9e:ec: f1:59:4c:c9:78:04:68:28:b1:1d:77:96:e2:e7:8e:7e:9a:ba: f5:35:9b:8e:7c:72:b4:6f:58:91:c5:44:f7:bf:d9:38:6c:91: 9f:3a:71:35:c2:1f:c0:0a:81:c9:b7:a4:5a:60:b2:f1:f9:e3: 5d:d1:29:9a:56:bd:18:50:e8:fc:6d:31:c9:78:9c:8c:cd:04: 67:92:eb:5f:36:ae:5c:93:de:f1:0f:24:d4:c8:68:98:99:44: 15:eb:b4:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuylHhBQSfMfvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk YzAzMzg0ZGEtODE2NS00YmY2LTkwZTItY2U3YmVkMmQ4OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS31upucubbrjDxVvfqgSOIk/6741+hgcv2d qISkTYlv2FpDwIaZzvP80yF17pxa+iAcUHgqPbPR5AM7X9OCLXbzGtuJI4sidEpB m0EnUNggipY+22NbIHY9s244cg5wVMnHQ6skTUynRUf7vQDDxxrObyS0R693Fvyg URHLwvMnnnXPNaJDM3o0rKcH5DsJHdV34jHsk0Ld3QUE9VKoO1TdoZlr0gXyRnLo tmw2r9MZxSa9Bw5PafQvtUGCJXCXbtXBNRX5Y+J90eenOnY+nvZpH2qaXiMpqxC5 Zh623wZrvKbCdZB8d3XJGhvVrgGcwg34szSjoygK/VpzdpmwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1/mKU8z+MQU2gBDmmtJn8F5KWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA2ZWNjMmMtOTZhNy0z YmFkLWE5NGMtYWI1YzkwMmVkYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1cp5CbL/DsKbcBE2h9H5Nv2sSeieunyuGvXCRAdg2TjRRHjXfze4zh 2rj4K1Alp2yXJ8+b2MaeNnS3gukib+TJ2P0UfYTXba1fN1PDcv4rQVxs3gABe2mH jLFpIH0Tdr08hCIfEbvHKrmQ/uge7JXwWYbk/HBvKHX/NY5mqSPuIeI7SlSWINHr BDh+wwMu+Wpx0PqJFEAWQBQm2deoVuWe7PFZTMl4BGgosR13luLnjn6auvU1m458 crRvWJHFRPe/2ThskZ86cTXCH8AKgcm3pFpgsvH5413RKZpWvRhQ6PxtMcl4nIzN BGeS6182rlyT3vEPJNTIaJiZRBXrtIY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:49 2025 by rpki-client