$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa File: 68a20c58-9a80-3699-b583-558702d23887.roa (raw, json) Hash identifier: NRsvk5uVTWw3r19CPkvo77FzOM2kZnvDdaaMEbpVU6I= Subject key identifier: CE:53:7A:1C:2D:0A:69:C3:3C:0C:80:D1:5A:CD:70:EF:9E:EF:FC:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EE10E137D27BC4702A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 20431 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:10:e1:37:d2:7b:c4:70:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=8aee128d-4bc3-4005-82fc-7707da053989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:d0:70:d5:d1:1b:73:ac:ea:83:06:36:f1: ae:5f:fb:81:14:56:a1:73:d3:8c:99:a5:1a:ac:e5: 66:c7:66:18:01:e8:48:70:63:2f:3c:64:a1:c8:3a: 48:24:ee:7d:ad:3c:10:a0:3c:23:e0:96:bd:99:41: 51:5b:db:6f:cc:1a:47:39:e3:49:1c:02:b4:32:ec: a6:fa:ec:33:91:b1:15:2b:86:b8:e2:70:a7:29:20: fd:49:c8:ad:6f:93:53:f9:bc:0f:21:88:3e:68:dd: 1d:60:b8:08:50:98:a7:40:c6:48:7a:40:ca:fa:32: 13:c3:93:57:c4:05:de:01:07:6f:20:36:9e:d2:d2: 80:f3:70:17:3b:61:cd:64:a8:4e:94:22:f8:25:55: a2:50:6c:78:96:0f:f6:e5:8b:4e:9c:94:f8:c8:c7: 7c:52:5c:cb:42:40:5e:c4:0b:cd:23:9b:00:c7:f1: b2:46:e2:2f:fe:a8:47:10:c9:84:32:a7:c9:79:aa: c0:d5:c8:24:63:e1:33:4b:7a:42:23:9d:75:56:3e: 00:17:82:6f:4a:d4:3e:fd:f8:ee:7d:11:b1:a3:be: fe:c4:1e:e9:45:73:1c:78:67:04:ee:73:11:a2:f0: 38:90:99:94:f9:41:5e:70:7b:53:4d:88:95:73:26: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:7A:1C:2D:0A:69:C3:3C:0C:80:D1:5A:CD:70:EF:9E:EF:FC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:45:e6:64:5e:3c:14:44:a5:c7:f2:bb:ca:ff:dc:0c:33:26: 9b:34:70:8e:de:ae:ad:e2:fb:f6:53:83:03:1c:ed:15:d9:4f: 07:51:aa:e9:e7:c8:2c:0a:12:3e:b0:0c:e9:1a:d2:f9:8e:a3: da:50:08:7e:cb:78:e8:0b:d4:0e:d4:d2:c6:fd:f8:50:7f:28: 5a:6e:70:fc:a0:8c:d7:d9:27:b4:bd:d9:fb:4d:7c:23:ec:fc: c8:66:29:0b:d0:60:57:55:31:14:35:66:1a:22:55:bd:b3:35: d6:a9:24:df:aa:8d:7c:01:5e:32:3c:f8:06:d4:5f:12:3e:26: 47:51:94:dd:ad:6e:05:ff:ee:a3:3b:40:06:d2:11:45:de:89: 59:4f:2c:ca:24:b3:c6:94:46:80:ba:ff:6c:87:9b:5b:40:b3: 81:8f:dc:a5:59:b5:d8:fb:ab:48:53:19:e2:7f:26:23:de:db: bd:c6:98:40:9a:9b:c4:88:e5:f0:31:4f:94:c4:83:d9:42:b0: 59:d8:ef:66:07:11:b1:a8:c8:4f:6a:f1:43:82:f1:6d:21:89: 53:50:24:4b:58:24:b3:c1:90:6e:ec:3a:a9:b9:a3:21:a7:6c: e5:3b:33:1a:2d:b5:f8:22:e0:8d:8b:b3:ea:81:0b:df:18:cc: 41:1a:7c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu4Q4TfSe8RwKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk OGFlZTEyOGQtNGJjMy00MDA1LTgyZmMtNzcwN2RhMDUzOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/HQcNXRG3Os6oMGNvGuX/uBFFahc9OMmaUa rOVmx2YYAehIcGMvPGShyDpIJO59rTwQoDwj4Ja9mUFRW9tvzBpHOeNJHAK0Muym +uwzkbEVK4a44nCnKSD9Scitb5NT+bwPIYg+aN0dYLgIUJinQMZIekDK+jITw5NX xAXeAQdvIDae0tKA83AXO2HNZKhOlCL4JVWiUGx4lg/25YtOnJT4yMd8UlzLQkBe xAvNI5sAx/GyRuIv/qhHEMmEMqfJearA1cgkY+EzS3pCI511Vj4AF4JvStQ+/fju fRGxo77+xB7pRXMceGcE7nMRovA4kJmU+UFecHtTTYiVcyYh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5TehwtCmnDPAyA0VrNcO+e7/z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhhMjBjNTgtOWE4MC0z Njk5LWI1ODMtNTU4NzAyZDIzODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVF5mRePBREpcfyu8r/3AwzJps0cI7erq3i+/ZTgwMc7RXZTwdRqunn yCwKEj6wDOka0vmOo9pQCH7LeOgL1A7U0sb9+FB/KFpucPygjNfZJ7S92ftNfCPs /MhmKQvQYFdVMRQ1ZhoiVb2zNdapJN+qjXwBXjI8+AbUXxI+JkdRlN2tbgX/7qM7 QAbSEUXeiVlPLMoks8aURoC6/2yHm1tAs4GP3KVZtdj7q0hTGeJ/JiPe273GmECa m8SI5fAxT5TEg9lCsFnY72YHEbGoyE9q8UOC8W0hiVNQJEtYJLPBkG7sOqm5oyGn bOU7Mxottfgi4I2Ls+qBC98YzEEafPY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:54 2025 by rpki-client