$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436167ab-4410-3854-a4e8-ee1f636f81ba.roa File: 436167ab-4410-3854-a4e8-ee1f636f81ba.roa (raw, json) Hash identifier: /PlMwMAYAPpNU4v8lUczofjPFwlpNHYjut2FuvyKoLc= Subject key identifier: 1B:45:4B:C2:1C:A7:A7:63:D5:44:72:D0:AA:54:8F:64:E0:F6:5E:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EEC933469AFE75A60F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436167ab-4410-3854-a4e8-ee1f636f81ba.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396564 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:c9:33:46:9a:fe:75:a6:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=d36c9cbf-5fd6-4887-9aa5-f25061175cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:47:23:3e:88:05:3a:47:7a:14:a1:6d:e6: 28:af:64:af:a6:ea:ab:65:4e:c3:fc:d9:50:c9:63: dd:a2:b5:be:bd:4f:72:a6:b5:ee:bd:f8:16:3e:48: 22:e4:e1:06:8c:3b:6b:a0:f3:e9:e0:89:c2:56:1f: f6:b0:d0:3b:0b:06:3a:be:43:95:55:70:b1:cb:f1: 67:8c:03:5e:14:3e:dd:56:8e:29:b5:17:98:e3:d6: 9e:06:11:ac:d4:15:11:14:46:d5:c4:07:98:70:4b: f8:87:d8:bd:5a:ed:28:f2:cf:01:79:24:43:51:4f: 57:c0:3c:d3:18:80:37:a2:0e:42:43:ab:07:d2:51: 24:a2:f3:1e:af:1e:14:52:04:a2:74:f0:af:52:be: 63:7a:17:47:7b:50:fa:3a:ff:70:46:e7:f6:85:2b: e7:0d:c5:11:a7:74:44:74:2d:f1:fb:60:fe:2d:9b: 1f:50:f5:28:21:0b:93:00:52:88:9a:39:5b:6b:04: 57:8e:4b:ce:9b:e7:c6:33:29:c7:04:44:bc:56:f5: 4c:90:60:f0:95:e5:d8:27:a3:89:8c:5b:ac:96:83: 39:b5:61:ac:6a:fd:0a:43:1f:70:30:08:a7:cf:23: a2:06:3f:73:14:37:44:ee:38:d5:1e:7d:45:89:c2: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:45:4B:C2:1C:A7:A7:63:D5:44:72:D0:AA:54:8F:64:E0:F6:5E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436167ab-4410-3854-a4e8-ee1f636f81ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e1:d1:14:42:7f:c6:6d:d1:d6:3f:df:bb:f3:fa:91:88:d4: 69:43:70:92:5c:43:15:e3:4c:e9:8a:13:d1:84:f3:0e:e3:72: e7:ed:d5:1a:04:8b:cd:35:65:ba:b4:41:c1:d5:dd:39:17:2f: 64:7b:5b:1c:f7:a6:50:0d:9f:28:08:26:81:21:70:02:d5:fe: 03:82:15:0c:76:44:3f:f2:cf:09:63:ad:b4:c4:16:c4:86:90: e6:e9:6f:2a:16:d1:a4:7b:68:24:2f:e9:ab:b0:b1:a7:c6:3a: 67:bd:b4:33:3c:58:d4:17:ee:ae:6d:ca:e5:41:4c:11:80:be: 59:24:4b:d6:fd:e5:69:6e:05:7b:c6:7b:af:16:4b:78:4a:9e: d2:1b:4a:c7:61:e4:b8:f6:04:92:d5:16:9a:97:0b:3c:1c:8d: ec:49:a2:c5:24:a1:ab:85:17:e9:7e:c3:91:f9:c1:63:8d:d0: 4e:9c:ce:be:13:6e:13:b6:6f:bd:a0:e4:83:59:e7:16:7d:2d: 66:c7:57:91:b4:d5:a9:7b:50:72:98:c8:5a:61:9a:b9:b9:33: 48:09:35:30:69:c3:f5:6b:fc:0d:d2:8d:6f:36:73:eb:9c:4a: 10:95:b8:53:64:12:f0:55:af:66:e1:ba:6f:30:7f:15:21:b5: 11:70:32:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu7JM0aa/nWmD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk ZDM2YzljYmYtNWZkNi00ODg3LTlhYTUtZjI1MDYxMTc1Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr5HIz6IBTpHehShbeYor2SvpuqrZU7D/NlQ yWPdorW+vU9yprXuvfgWPkgi5OEGjDtroPPp4InCVh/2sNA7CwY6vkOVVXCxy/Fn jANeFD7dVo4ptReY49aeBhGs1BURFEbVxAeYcEv4h9i9Wu0o8s8BeSRDUU9XwDzT GIA3og5CQ6sH0lEkovMerx4UUgSidPCvUr5jehdHe1D6Ov9wRuf2hSvnDcURp3RE dC3x+2D+LZsfUPUoIQuTAFKImjlbawRXjkvOm+fGMynHBES8VvVMkGDwleXYJ6OJ jFusloM5tWGsav0KQx9wMAinzyOiBj9zFDdE7jjVHn1FicLtQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtFS8Icp6dj1URy0KpUj2Tg9l76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDM2MTY3YWItNDQxMC0z ODU0LWE0ZTgtZWUxZjYzNmY4MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPh0RRCf8Zt0dY/37vz+pGI1GlDcJJcQxXjTOmKE9GE8w7jcuft1RoE i801Zbq0QcHV3TkXL2R7Wxz3plANnygIJoEhcALV/gOCFQx2RD/yzwljrbTEFsSG kObpbyoW0aR7aCQv6auwsafGOme9tDM8WNQX7q5tyuVBTBGAvlkkS9b95WluBXvG e68WS3hKntIbSsdh5Lj2BJLVFpqXCzwcjexJosUkoauFF+l+w5H5wWON0E6czr4T bhO2b72g5INZ5xZ9LWbHV5G01al7UHKYyFphmrm5M0gJNTBpw/Vr/A3SjW82c+uc ShCVuFNkEvBVr2bhum8wfxUhtRFwMgc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:37 2025 by rpki-client