$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66aa61c6-1920-3363-be6e-9391933ab610.roa File: 66aa61c6-1920-3363-be6e-9391933ab610.roa (raw, json) Hash identifier: w40JKi034mC5mTg6GiKwvBXWbMQYo5zAtKFdtsWD/vk= Subject key identifier: 27:E4:68:BB:5A:B0:FD:93:21:8D:A5:99:08:D0:D9:82:79:E3:AD:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E9AF3BB6EC9092A21AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66aa61c6-1920-3363-be6e-9391933ab610.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 36617 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:af:3b:b6:ec:90:92:a2:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=27ae2e38-9287-48ed-978c-aef6be1266da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:84:ea:4b:af:cb:90:82:53:95:e0:8e:a9: f9:7b:21:82:89:c9:8e:8f:79:e4:94:fb:35:2b:bd: 21:20:ab:cc:e7:6e:a6:ee:c8:f9:4f:c8:2f:cc:67: c2:3e:7f:10:85:a4:1c:88:73:0d:fc:78:33:4b:02: 34:62:6e:99:d2:e1:82:e0:9d:d5:66:85:0e:eb:80: 6b:82:77:b0:3a:36:a0:a0:0d:ff:41:0a:a1:72:c1: fd:54:4b:1a:fd:29:63:e9:0f:06:8e:63:27:0d:f0: e3:9a:0b:be:a8:f1:c2:22:58:a1:67:cf:e2:de:75: 32:fd:51:16:17:a7:e2:9e:4b:24:c8:be:b3:88:4e: fc:0a:0b:c0:2f:c7:de:d0:67:e0:ca:60:7c:f3:5d: d9:89:14:d7:d1:03:b3:39:a4:0d:b7:6e:2c:bc:a5: 7d:e7:98:c8:e2:98:37:5a:12:0c:63:e9:34:bd:1d: 4b:ed:66:4c:24:2d:e3:33:0a:61:31:6e:f6:d1:54: 4a:5f:4a:bb:e3:a6:31:87:f9:e4:50:a3:50:ef:06: 5d:2b:c1:ec:dd:16:6e:cf:23:ca:46:74:4f:04:a5: b2:6d:32:f6:83:88:df:5e:4a:41:04:ee:34:a5:b6: 79:c8:75:af:80:dd:24:e8:b6:cd:fd:b0:28:81:16: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:68:BB:5A:B0:FD:93:21:8D:A5:99:08:D0:D9:82:79:E3:AD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66aa61c6-1920-3363-be6e-9391933ab610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:37:bd:ba:eb:50:d6:82:24:b3:16:8e:83:99:20:2c:d4:59: eb:96:91:4b:12:40:cd:ab:47:55:8e:8f:3d:3d:f9:7d:f2:37: ae:d7:a1:48:bc:34:50:66:6b:17:e8:a5:4c:db:4e:e5:ec:56: 04:7f:92:cb:ba:19:ae:73:ef:2b:2a:16:e8:26:d1:90:d6:b4: 05:83:11:a3:68:4e:8f:c1:0d:5e:88:e3:a5:df:fd:5a:82:e7: c2:75:9a:24:18:d9:27:12:dd:17:a7:f9:2b:35:48:12:d4:a3: aa:75:15:c2:f3:1d:c8:9c:4b:b9:e2:9d:68:ab:35:06:47:e7: fb:5f:09:90:84:6c:d6:6c:f6:b7:e1:1a:63:4c:83:fc:8b:5c: 13:eb:67:17:7e:0f:fe:ae:49:a1:79:94:02:8c:f2:76:21:29: 38:98:be:9b:a4:10:c1:56:73:7f:5b:df:d6:55:f3:88:4c:ee: ea:78:ea:c4:b6:f7:73:7f:15:36:84:7b:2b:37:06:98:d9:5b: 4b:1c:11:c1:15:5e:88:f3:ad:a3:9b:3c:dc:e3:b9:77:af:86: 93:85:dd:de:18:1b:4a:16:af:c4:67:7f:e2:8d:ed:46:05:cc: e0:56:f4:95:2c:12:d2:5c:b9:98:b5:b0:34:2f:50:23:73:ca: 0e:72:25:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYumvO7bskJKiGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MjdhZTJlMzgtOTI4Ny00OGVkLTk3OGMtYWVmNmJlMTI2NmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz2E6kuvy5CCU5Xgjqn5eyGCicmOj3nklPs1 K70hIKvM526m7sj5T8gvzGfCPn8QhaQciHMN/HgzSwI0Ym6Z0uGC4J3VZoUO64Br gnewOjagoA3/QQqhcsH9VEsa/Slj6Q8GjmMnDfDjmgu+qPHCIlihZ8/i3nUy/VEW F6finkskyL6ziE78CgvAL8fe0GfgymB8813ZiRTX0QOzOaQNt24svKV955jI4pg3 WhIMY+k0vR1L7WZMJC3jMwphMW720VRKX0q746Yxh/nkUKNQ7wZdK8Hs3RZuzyPK RnRPBKWybTL2g4jfXkpBBO40pbZ5yHWvgN0k6LbN/bAogRbtjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfkaLtasP2TIY2lmQjQ2YJ54602MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZhYTYxYzYtMTkyMC0z MzYzLWJlNmUtOTM5MTkzM2FiNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg3vbrrUNaCJLMWjoOZICzUWeuWkUsSQM2rR1WOjz09+X3yN67XoUi8 NFBmaxfopUzbTuXsVgR/ksu6Ga5z7ysqFugm0ZDWtAWDEaNoTo/BDV6I46Xf/VqC 58J1miQY2ScS3Ren+Ss1SBLUo6p1FcLzHcicS7ninWirNQZH5/tfCZCEbNZs9rfh GmNMg/yLXBPrZxd+D/6uSaF5lAKM8nYhKTiYvpukEMFWc39b39ZV84hM7up46sS2 93N/FTaEeys3BpjZW0scEcEVXojzraObPNzjuXevhpOF3d4YG0oWr8Rnf+KN7UYF zOBW9JUsEtJcuZi1sDQvUCNzyg5yJfo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:19 2025 by rpki-client