$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa File: 49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa (raw, json) Hash identifier: p/NNTEGHhuJWcXkHSjqiHeuA5s7UiogyBIIXTZl2MLI= Subject key identifier: 6E:3E:51:86:32:63:B1:D5:91:E4:60:8E:B3:47:CD:CF:F5:FC:07:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EA303F93575D1A340D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396596 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:30:3f:93:57:5d:1a:34:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=19fb998b-df2b-45dc-960e-58d458c0da93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:21:cc:42:c8:4d:99:24:45:37:11:fa:65: 3d:2c:b5:e3:7d:84:5b:67:26:66:e2:11:49:ef:0d: cf:e5:e8:f5:43:0f:98:18:4b:3e:c5:6d:e1:11:e0: 3d:88:d3:b1:cd:28:63:cf:eb:30:3a:57:57:d1:c3: a8:4f:24:f6:b9:c1:37:fd:3a:76:76:55:ae:f9:b8: 6d:d4:3a:24:7c:80:a6:24:b5:20:85:f8:f2:bd:de: a6:b7:ce:a9:f4:26:03:a5:5c:02:a3:52:f7:3c:bb: 43:6e:ec:81:ab:85:0d:80:cc:48:e2:b7:c6:b6:10: db:22:85:68:1b:c3:49:5e:d9:42:23:d2:66:75:d2: da:d8:92:75:09:a8:be:a5:f1:48:73:20:d8:09:fb: ee:38:d6:82:26:17:91:d3:78:68:d6:6f:31:01:72: 0f:18:0f:72:e0:ce:ce:cc:a4:35:f5:be:97:e2:8b: f9:a3:a2:1e:8f:8a:71:19:38:f9:8a:ae:fe:d9:47: ee:a4:df:52:d8:03:56:2e:20:5c:f5:6a:f0:b6:74: 18:4c:54:e2:6b:42:fa:54:95:93:52:d5:b2:90:f1: f4:12:88:d1:27:b6:c5:e8:71:e3:06:4f:85:ae:9f: 6c:83:5e:b0:b4:1e:74:8b:9e:3d:ab:b7:a1:91:ae: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3E:51:86:32:63:B1:D5:91:E4:60:8E:B3:47:CD:CF:F5:FC:07:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cf:56:e9:27:bb:7f:f7:79:1a:b2:ed:5e:74:af:0c:bd:76: c7:5a:70:26:c4:d7:ba:5e:7b:b3:52:0c:62:a1:d1:5d:32:de: 96:28:d0:fb:36:3e:b7:b4:67:fe:d6:ff:e5:46:2d:a8:76:80: ab:52:f4:88:3c:c3:84:b6:c4:8e:56:9f:6f:a1:5f:de:54:9b: b7:1a:53:9e:a7:7e:c4:d3:65:a0:53:76:e9:02:c4:af:17:de: 1b:ad:40:f1:1b:e2:24:10:67:de:e0:12:46:13:57:96:67:48: b0:b5:7b:7e:1a:49:f5:c0:50:b7:8f:01:20:58:1c:97:53:df: aa:29:8f:56:55:58:b3:5e:a4:42:1b:ce:97:68:e6:27:82:8b: 54:38:2f:2a:a9:cd:34:54:51:a4:20:dc:f6:35:77:4c:90:db: 4c:21:c6:cf:a8:18:3b:0b:42:19:81:46:45:71:ef:2b:48:7c: ff:3e:1a:60:2b:16:58:24:60:63:dd:1b:2c:e0:74:e7:7b:89: e3:40:c9:f7:9d:21:9f:33:b0:a8:a6:ae:01:f8:5a:cf:22:78: b0:2c:f3:10:63:77:8c:b8:af:9d:c1:32:06:85:a5:ec:bf:a6: b7:ec:72:4e:6f:c0:70:fb:7c:26:16:9d:43:1c:b8:20:14:67: 3f:cc:97:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuowP5NXXRo0DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MTlmYjk5OGItZGYyYi00NWRjLTk2MGUtNThkNDU4YzBkYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukIhzELITZkkRTcR+mU9LLXjfYRbZyZm4hFJ 7w3P5ej1Qw+YGEs+xW3hEeA9iNOxzShjz+swOldX0cOoTyT2ucE3/Tp2dlWu+bht 1DokfICmJLUghfjyvd6mt86p9CYDpVwCo1L3PLtDbuyBq4UNgMxI4rfGthDbIoVo G8NJXtlCI9JmddLa2JJ1Cai+pfFIcyDYCfvuONaCJheR03ho1m8xAXIPGA9y4M7O zKQ19b6X4ov5o6Iej4pxGTj5iq7+2UfupN9S2ANWLiBc9WrwtnQYTFTia0L6VJWT UtWykPH0EojRJ7bF6HHjBk+Frp9sg16wtB50i549q7ehka6crwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4+UYYyY7HVkeRgjrNHzc/1/Ae7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDljZGU1MzktN2Y2NC0z NmNmLWIxYzYtMGU1NjgwMmViM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjPVuknu3/3eRqy7V50rwy9dsdacCbE17pee7NSDGKh0V0y3pYo0Ps2 Pre0Z/7W/+VGLah2gKtS9Ig8w4S2xI5Wn2+hX95Um7caU56nfsTTZaBTdukCxK8X 3hutQPEb4iQQZ97gEkYTV5ZnSLC1e34aSfXAULePASBYHJdT36opj1ZVWLNepEIb zpdo5ieCi1Q4LyqpzTRUUaQg3PY1d0yQ20whxs+oGDsLQhmBRkVx7ytIfP8+GmAr FlgkYGPdGyzgdOd7ieNAyfedIZ8zsKimrgH4Ws8ieLAs8xBjd4y4r53BMgaFpey/ prfsck5vwHD7fCYWnUMcuCAUZz/Ml00= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:53 2025 by rpki-client