$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa File: 62a8da01-aa05-39dc-b60f-99811a175a77.roa (raw, json) Hash identifier: vOQvNio6G+DMJygolMu7tvWw83z2wcPZN+miE9VT2E0= Subject key identifier: 7C:48:49:3B:68:96:DE:DF:32:91:27:07:FC:ED:5A:57:CB:95:81:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ECC48B6E454E0DB7A4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 397200 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:c4:8b:6e:45:4e:0d:b7:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=8cfcc697-72e5-44e6-b096-0034580b4769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:b2:d1:59:b6:22:b1:55:64:41:76:d8:7a: 1b:00:d0:65:d4:aa:19:d9:a0:72:b3:7b:ea:7f:6b: c4:71:57:d9:d4:0b:cc:3a:3b:be:fe:df:f7:45:09: a9:f7:17:c7:b1:0b:9b:51:97:c6:37:3b:70:03:67: 7f:90:6f:69:00:81:4e:24:4a:8c:9d:2e:1d:d4:c1: 2e:af:00:c6:35:89:92:25:dc:27:ad:6e:64:c7:8d: 2e:9a:b1:57:76:05:29:1a:4a:3e:8c:35:a0:14:74: 66:83:f7:0f:87:da:b9:41:55:2d:28:41:b6:c7:43: 45:3a:dd:f2:95:fe:e5:85:b7:ce:68:d3:26:5f:cf: 98:dd:62:8c:32:76:20:cd:10:e8:04:2a:c7:9a:c3: 38:64:8e:66:bc:1b:a7:ad:28:87:94:07:55:1b:59: 3e:ca:28:4c:ba:ce:13:17:2d:93:fe:d9:7e:40:aa: 09:88:cd:3e:55:fc:67:6b:d3:0e:a1:05:90:72:09: 7a:19:f8:62:59:27:7a:c8:20:25:05:8d:19:db:66: ea:cc:e2:96:4c:8e:f3:90:24:69:ec:fd:0c:46:7a: ff:4b:e2:e3:ae:bc:a0:9f:fd:9f:65:1a:6c:de:57: bb:0a:be:fe:59:f6:15:25:0a:67:88:ba:24:b4:33: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:49:3B:68:96:DE:DF:32:91:27:07:FC:ED:5A:57:CB:95:81:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:9f:20:0a:61:67:ac:6e:06:19:36:16:d7:cf:ed:61:fc: 2b:99:6a:32:b9:65:cf:55:58:80:f6:6d:e6:54:2d:74:3e:01: 24:fb:80:cf:1f:fb:64:aa:59:25:1a:46:3a:66:e0:d6:83:c6: c1:0a:7e:97:d3:22:fd:14:78:ac:7f:0c:cc:e1:64:24:cc:9d: fb:3f:b7:4b:92:c2:54:d2:d5:30:4b:08:bb:67:a6:52:3f:b3: 15:03:c8:4e:3c:5e:be:23:95:8a:d2:93:83:cf:fc:50:f2:d4: 79:fe:54:72:9a:67:42:2d:5e:4d:7b:98:c9:a5:cc:dd:d5:35: 61:61:8a:07:93:18:99:36:68:2d:d7:2a:eb:97:76:c7:30:b7: 28:93:59:f2:de:91:72:de:92:e9:94:be:b1:e0:bf:e2:a7:f8: ab:77:91:19:d4:29:c3:a6:2d:ef:cf:4a:26:ee:53:5c:bd:20: 28:95:d4:25:66:45:bf:8a:0b:1e:60:93:4d:d7:11:3c:86:f8: 32:3a:b9:36:68:15:62:bc:90:7b:fa:25:7a:66:5c:37:09:8d: 79:3d:65:55:68:20:0e:30:b7:15:ed:8f:93:b9:3b:8e:cd:7d: b2:51:fc:c7:93:e3:f9:c8:68:1e:ce:7a:e2:fb:02:89:5c:17: 9d:4e:d6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuzEi25FTg23pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk OGNmY2M2OTctNzJlNS00NGU2LWIwOTYtMDAzNDU4MGI0NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2+y0Vm2IrFVZEF22HobANBl1KoZ2aBys3vq f2vEcVfZ1AvMOju+/t/3RQmp9xfHsQubUZfGNztwA2d/kG9pAIFOJEqMnS4d1MEu rwDGNYmSJdwnrW5kx40umrFXdgUpGko+jDWgFHRmg/cPh9q5QVUtKEG2x0NFOt3y lf7lhbfOaNMmX8+Y3WKMMnYgzRDoBCrHmsM4ZI5mvBunrSiHlAdVG1k+yihMus4T Fy2T/tl+QKoJiM0+Vfxna9MOoQWQcgl6GfhiWSd6yCAlBY0Z22bqzOKWTI7zkCRp 7P0MRnr/S+Ljrrygn/2fZRps3le7Cr7+WfYVJQpniLoktDMkjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxISTtolt7fMpEnB/ztWlfLlYGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjJhOGRhMDEtYWEwNS0z OWRjLWI2MGYtOTk4MTFhMTc1YTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs4nyAKYWesbgYZNhbXz+1h/CuZajK5Zc9VWID2beZULXQ+AST7gM8f +2SqWSUaRjpm4NaDxsEKfpfTIv0UeKx/DMzhZCTMnfs/t0uSwlTS1TBLCLtnplI/ sxUDyE48Xr4jlYrSk4PP/FDy1Hn+VHKaZ0ItXk17mMmlzN3VNWFhigeTGJk2aC3X KuuXdscwtyiTWfLekXLekumUvrHgv+Kn+Kt3kRnUKcOmLe/PSibuU1y9ICiV1CVm Rb+KCx5gk03XETyG+DI6uTZoFWK8kHv6JXpmXDcJjXk9ZVVoIA4wtxXtj5O5O47N fbJR/MeT4/nIaB7OeuL7AolcF51O1lM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:57 2025 by rpki-client