$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa File: 4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa (raw, json) Hash identifier: /6CZkuiGnl0gYACMixkJeh/z0q5k7VK+rA4wcIcmly4= Subject key identifier: F5:A3:CA:8B:4B:29:43:4B:00:A4:EA:F6:44:38:2C:9F:60:9D:57:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EF12E51B2B35CF05F7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396575 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:12:e5:1b:2b:35:cf:05:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=6356a239-8b90-4e31-9fbd-5cd0468aa3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:01:48:b4:c7:62:70:0d:b9:5e:6e:02:96: ad:4c:29:6a:96:e2:7f:1e:6d:92:1e:f0:0b:3b:ea: 6c:5b:46:84:8e:04:8a:ec:2b:65:47:26:31:09:9e: cc:95:26:c0:6e:16:90:a5:ff:ca:58:20:d5:aa:66: 84:4c:04:c7:9e:da:00:f8:12:70:d5:d3:f4:9e:46: 9d:44:68:a7:b8:ad:77:3c:f5:a0:ae:ad:e9:67:8d: 01:62:79:5d:49:7e:3f:2b:f2:b1:25:7a:36:c9:48: 34:a0:4f:7f:1d:17:8b:c5:19:55:81:83:95:65:3e: b6:cf:a5:4f:4c:a3:3d:79:3a:96:c6:ce:6a:f7:7b: 27:54:da:45:88:97:90:1f:ec:28:ed:d2:dd:c9:91: 6d:c9:04:98:ea:d1:7b:0e:5e:06:c9:72:22:b1:0a: d7:53:91:72:70:cc:0b:54:e0:33:d0:bd:83:9d:58: 42:48:88:a1:f1:07:1c:fb:52:a8:7d:27:88:0b:f5: 74:42:9f:7e:af:1b:8f:7c:9b:da:3d:e3:c0:2a:f6: 60:69:f4:41:2d:e9:38:76:ef:c6:cb:60:8b:e5:78: 46:f8:14:9d:91:d2:ed:8d:cd:d4:2c:6c:3f:83:25: d6:24:b6:74:12:25:32:8a:35:f3:76:aa:31:0e:e7: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:CA:8B:4B:29:43:4B:00:A4:EA:F6:44:38:2C:9F:60:9D:57:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:91:ed:90:11:fd:62:d0:63:a0:af:a3:31:e2:6a:d9:e1:fa: 93:60:0f:68:6d:67:c0:3d:82:32:39:58:ec:79:cb:0c:1b:61: 63:9d:cb:6d:7f:84:b0:3c:4d:31:1e:a3:49:86:24:02:c5:b9: a6:f3:70:47:25:bf:80:b8:56:d3:2f:ed:cd:9a:fb:9e:e2:75: 6a:8a:82:e0:ef:7f:90:0d:d1:91:e6:a1:c8:31:4a:35:2b:25: 80:61:7f:91:f2:eb:64:c9:49:53:70:fa:5f:bb:60:74:e6:ea: af:d2:46:ed:5c:cd:79:cf:0d:42:a8:58:01:df:10:e7:ed:8f: 2f:b1:05:0d:85:66:f9:02:d1:86:7c:95:8d:d9:e9:32:84:49: 87:9a:95:12:23:a3:ee:23:c3:09:1a:c1:ca:ee:48:2a:8f:5b: 1d:23:09:79:18:67:35:f1:b3:0a:bb:a7:48:d0:ea:3e:4b:00: c1:22:a5:b4:a6:5f:97:b4:cb:2c:6e:a2:6d:6a:77:83:03:65: f4:2c:f6:f4:f4:9f:81:2d:64:17:b5:cc:fd:d4:e6:bc:ad:cc: 4f:eb:db:1b:1e:a7:8c:d1:06:9b:6e:c5:ee:61:95:62:c9:c8: 2a:64:c1:a5:40:17:60:99:de:2f:00:3b:0a:21:c0:52:e0:61: 19:42:4e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu8S5RsrNc8F98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk NjM1NmEyMzktOGI5MC00ZTMxLTlmYmQtNWNkMDQ2OGFhM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDgBSLTHYnANuV5uApatTClqluJ/Hm2SHvAL O+psW0aEjgSK7CtlRyYxCZ7MlSbAbhaQpf/KWCDVqmaETATHntoA+BJw1dP0nkad RGinuK13PPWgrq3pZ40BYnldSX4/K/KxJXo2yUg0oE9/HReLxRlVgYOVZT62z6VP TKM9eTqWxs5q93snVNpFiJeQH+wo7dLdyZFtyQSY6tF7Dl4GyXIisQrXU5FycMwL VOAz0L2DnVhCSIih8Qcc+1KofSeIC/V0Qp9+rxuPfJvaPePAKvZgafRBLek4du/G y2CL5XhG+BSdkdLtjc3ULGw/gyXWJLZ0EiUyijXzdqoxDucKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWjyotLKUNLAKTq9kQ4LJ9gnVf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmZjBiZTgtMTVlMy0z MWIzLThkZmMtZGI1ZTU4NzA3ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKR7ZAR/WLQY6CvozHiatnh+pNgD2htZ8A9gjI5WOx5ywwbYWOdy21/ hLA8TTEeo0mGJALFuabzcEclv4C4VtMv7c2a+57idWqKguDvf5AN0ZHmocgxSjUr JYBhf5Hy62TJSVNw+l+7YHTm6q/SRu1czXnPDUKoWAHfEOftjy+xBQ2FZvkC0YZ8 lY3Z6TKESYealRIjo+4jwwkawcruSCqPWx0jCXkYZzXxswq7p0jQ6j5LAMEipbSm X5e0yyxuom1qd4MDZfQs9vT0n4EtZBe1zP3U5rytzE/r2xsep4zRBptuxe5hlWLJ yCpkwaVAF2CZ3i8AOwohwFLgYRlCTuI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:00 2025 by rpki-client