$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa File: 577249d9-af53-386f-9c9a-cb916a1f5097.roa (raw, json) Hash identifier: 6iZpIrdFVWyuVDRff0Gsz23WOZ2pUKoApZNOwhekwyM= Subject key identifier: 57:E9:AF:91:09:63:24:53:F5:60:65:1D:B3:E0:64:53:8B:F4:74:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EDF53C34700E7ED7FD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396616 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:f5:3c:34:70:0e:7e:d7:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=6c4518b6-48e2-4d60-9b65-de8eea01a13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:99:9c:12:ab:ef:08:a7:48:62:e6:80:b2: 31:8a:3d:31:1b:e5:88:06:b1:5c:cf:4f:f7:b7:08: b7:c2:03:e6:ac:f8:fb:df:5b:e5:94:89:5b:c6:3f: ca:ad:1e:ad:7e:8e:d2:68:76:03:66:35:c3:b9:27: 18:3e:80:ff:62:76:c2:52:9a:cd:71:ba:47:e8:94: 3f:e1:73:46:e9:6a:8e:ed:20:22:cb:8b:37:0f:2d: e8:8a:b7:c0:e8:58:be:43:1f:85:ca:c0:b1:80:05: 43:e1:36:85:3b:67:f8:4c:82:dd:5b:18:34:58:ec: af:33:27:32:dd:da:fb:c8:3e:18:68:b3:cc:e7:9a: 50:f1:35:1b:1f:27:fe:31:ee:12:b5:6a:04:e0:ca: 94:7d:6e:f6:0a:d3:3e:55:bd:12:35:e0:b6:fc:4e: 83:99:8f:b5:34:d3:c9:5c:a8:2b:32:2c:85:94:d3: 49:e3:31:eb:c3:9b:4d:3b:65:d3:71:00:a0:03:d6: 04:d2:f4:c3:1d:e7:c2:1b:5c:ae:a5:a9:a7:b1:b9: d9:de:d4:35:b7:b8:ba:25:66:c9:92:50:2e:30:61: e4:06:7a:31:58:74:4d:79:dc:0b:66:54:63:b2:cf: 37:c9:e0:f4:e9:8e:6e:25:8f:74:6a:0c:da:85:2c: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:AF:91:09:63:24:53:F5:60:65:1D:B3:E0:64:53:8B:F4:74:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a9:2f:26:19:d0:28:d1:33:40:75:5e:72:cc:6f:9c:5e:e1: ae:b7:39:a6:75:ad:aa:ce:09:e2:ba:c4:bd:75:91:1a:9c:1e: 91:dc:70:44:6c:a7:c5:ea:32:71:9f:c2:49:07:7d:9f:14:5b: 36:7e:3d:df:0f:c2:b7:3d:07:d7:8e:01:30:f7:44:e8:fb:60: 31:fc:5b:86:e5:c2:ca:76:3c:eb:2e:a8:83:8f:37:da:df:da: 79:dc:fa:d5:2d:a0:0b:4e:7b:3a:08:af:01:1a:6b:01:02:bb: 98:b9:e3:9f:3f:b4:0c:35:96:e6:40:c7:80:be:ef:c7:81:b9: e9:08:75:1c:ce:23:84:92:2d:46:13:0a:b3:a2:77:a3:86:91: e9:86:6c:08:7d:04:97:10:ad:71:c3:7c:c6:7f:2d:be:df:44: b1:76:ed:e4:ef:37:c1:69:c9:53:b1:b6:38:a8:8f:11:fe:6e: d7:8e:02:a6:e3:68:65:cc:6f:66:1d:30:01:24:e8:c6:c8:a8: 9c:c7:65:f4:9a:12:75:43:68:02:f1:35:29:61:29:ec:25:76: 8e:f2:6d:0b:70:c9:af:36:92:ed:a4:17:9d:7e:36:50:7d:b5: d5:83:6d:e6:2c:25:af:61:9f:77:c8:3e:9c:99:c1:46:9a:30: d9:08:ad:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu31PDRwDn7X/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk NmM0NTE4YjYtNDhlMi00ZDYwLTliNjUtZGU4ZWVhMDFhMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/yZnBKr7winSGLmgLIxij0xG+WIBrFcz0/3 twi3wgPmrPj731vllIlbxj/KrR6tfo7SaHYDZjXDuScYPoD/YnbCUprNcbpH6JQ/ 4XNG6WqO7SAiy4s3Dy3oirfA6Fi+Qx+FysCxgAVD4TaFO2f4TILdWxg0WOyvMycy 3dr7yD4YaLPM55pQ8TUbHyf+Me4StWoE4MqUfW72CtM+Vb0SNeC2/E6DmY+1NNPJ XKgrMiyFlNNJ4zHrw5tNO2XTcQCgA9YE0vTDHefCG1yupamnsbnZ3tQ1t7i6JWbJ klAuMGHkBnoxWHRNedwLZlRjss83yeD06Y5uJY90agzahSzE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfpr5EJYyRT9WBlHbPgZFOL9HTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc3MjQ5ZDktYWY1My0z ODZmLTljOWEtY2I5MTZhMWY1MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKpLyYZ0CjRM0B1XnLMb5xe4a63OaZ1rarOCeK6xL11kRqcHpHccERs p8XqMnGfwkkHfZ8UWzZ+Pd8Pwrc9B9eOATD3ROj7YDH8W4blwsp2POsuqIOPN9rf 2nnc+tUtoAtOezoIrwEaawECu5i5458/tAw1luZAx4C+78eBuekIdRzOI4SSLUYT CrOid6OGkemGbAh9BJcQrXHDfMZ/Lb7fRLF27eTvN8FpyVOxtjiojxH+bteOAqbj aGXMb2YdMAEk6MbIqJzHZfSaEnVDaALxNSlhKewldo7ybQtwya82ku2kF51+NlB9 tdWDbeYsJa9hn3fIPpyZwUaaMNkIrbY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:39 2025 by rpki-client