$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa File: 6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa (raw, json) Hash identifier: 3DvhP4yzmIZ6/95CbNVzm1Vav2MBT0VTtBnM8VkowPI= Subject key identifier: 85:2D:BB:6D:E8:70:16:DD:62:04:9B:A7:33:C9:78:04:31:0D:8E:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EDC949A39E2165482E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396595 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:c9:49:a3:9e:21:65:48:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=14e8c933-e58a-4d45-9ff6-0e5a685f3d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:20:4b:29:62:3b:e9:f8:97:f8:47:ba:ff: 18:03:b5:c6:3f:fd:45:08:ec:cc:7c:81:b5:88:35: 4c:1d:4a:cd:a6:bf:ef:30:e0:60:e8:0a:81:28:ff: 88:0e:7f:f9:cf:c2:1b:e2:d4:87:00:6b:71:37:1c: 16:85:86:c9:b2:9c:48:93:12:e9:10:cd:b7:08:43: 8a:dc:59:f9:34:c7:03:4e:84:ae:ab:0f:1d:f0:c3: f9:3c:c3:c8:46:d6:6d:f9:a8:c3:c2:43:bd:ad:2f: 43:15:9b:11:e5:f5:75:cc:fc:14:f1:10:16:ac:87: 3a:be:67:67:cf:bf:ff:89:2e:c0:e2:c7:6a:d4:9c: 42:2c:e7:28:9e:70:18:aa:75:37:55:8d:00:54:33: c6:b3:8f:42:6d:32:1b:d4:ae:75:43:72:10:10:45: 3d:6e:9e:89:ca:14:b2:ca:4d:a8:f5:bc:29:30:d6: 9b:57:39:9e:1e:e7:03:26:c8:9a:a8:7b:ed:cd:78: 29:9e:90:c8:9b:de:68:4b:c2:19:5a:84:3f:6a:3a: c5:bd:d5:8c:a8:aa:c4:71:6a:21:25:75:b1:91:a5: 71:1f:e7:e0:51:ed:72:6a:1b:3b:95:33:2b:31:e8: 88:7f:d0:a4:90:c9:5a:c4:38:81:51:90:c7:e3:20: 66:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:BB:6D:E8:70:16:DD:62:04:9B:A7:33:C9:78:04:31:0D:8E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:86:35:63:be:54:bf:79:09:62:ed:f9:05:6a:a6:93:4a:fe: 12:05:3d:21:62:65:0c:dc:b6:43:00:8f:00:99:a7:8a:c2:9d: 2e:65:dd:0f:84:4a:9b:57:fb:8e:b1:e1:33:0e:49:92:0f:3e: 4b:e3:34:c6:7a:a0:71:e9:e8:e7:74:ab:96:fe:80:4d:1b:08: c2:5b:23:bb:b1:cd:ff:e3:16:31:87:72:b2:3d:9d:98:6c:d7: 02:f4:c7:25:a9:5a:f6:d6:0e:2d:a5:60:9d:35:85:b2:17:94: 95:7f:53:bb:36:3a:41:f0:5d:47:d6:2e:ff:f0:c6:f3:85:f7: b0:b3:6e:61:6e:72:f0:8e:95:37:1c:5b:0f:69:2c:ee:97:f5: ea:a1:11:77:a0:0b:95:e6:25:93:b7:73:5e:40:15:88:b3:b0: 66:8c:0d:c1:4f:f2:17:ad:41:d3:85:62:fd:e2:1f:a0:89:cf: 15:7b:cd:40:6b:f3:88:9c:1c:29:29:d0:8a:64:cc:ca:9c:1f: 85:d3:1d:b0:3d:96:82:87:58:2f:b4:30:07:b1:dc:e2:8e:10: 91:8d:77:1a:73:0b:ab:8d:f7:d5:4e:8d:82:65:7d:85:f1:74: cf:97:8e:00:06:a8:53:43:7e:8b:ff:41:5a:46:ce:e8:4a:18: 0e:5d:85:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu3JSaOeIWVILgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MTRlOGM5MzMtZTU4YS00ZDQ1LTlmZjYtMGU1YTY4NWYzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY8gSyliO+n4l/hHuv8YA7XGP/1FCOzMfIG1 iDVMHUrNpr/vMOBg6AqBKP+IDn/5z8Ib4tSHAGtxNxwWhYbJspxIkxLpEM23CEOK 3Fn5NMcDToSuqw8d8MP5PMPIRtZt+ajDwkO9rS9DFZsR5fV1zPwU8RAWrIc6vmdn z7//iS7A4sdq1JxCLOconnAYqnU3VY0AVDPGs49CbTIb1K51Q3IQEEU9bp6JyhSy yk2o9bwpMNabVzmeHucDJsiaqHvtzXgpnpDIm95oS8IZWoQ/ajrFvdWMqKrEcWoh JXWxkaVxH+fgUe1yahs7lTMrMeiIf9CkkMlaxDiBUZDH4yBmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUtu23ocBbdYgSbpzPJeAQxDY6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI2NGZmNjgtMzZhOC0z MGNjLWIxNmQtNjFkYTBmZjU1YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGGNWO+VL95CWLt+QVqppNK/hIFPSFiZQzctkMAjwCZp4rCnS5l3Q+E SptX+46x4TMOSZIPPkvjNMZ6oHHp6Od0q5b+gE0bCMJbI7uxzf/jFjGHcrI9nZhs 1wL0xyWpWvbWDi2lYJ01hbIXlJV/U7s2OkHwXUfWLv/wxvOF97CzbmFucvCOlTcc Ww9pLO6X9eqhEXegC5XmJZO3c15AFYizsGaMDcFP8hetQdOFYv3iH6CJzxV7zUBr 84icHCkp0IpkzMqcH4XTHbA9loKHWC+0MAex3OKOEJGNdxpzC6uN99VOjYJlfYXx dM+XjgAGqFNDfov/QVpGzuhKGA5dhfg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:28 2025 by rpki-client