$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa File: 710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa (raw, json) Hash identifier: o75jbmQ3sk7c6eo1g3uPjxeZx+b6dBE8yaQwWEj2R70= Subject key identifier: 1D:8A:35:32:44:2D:B9:D3:4A:C3:1C:B3:BB:C7:25:86:FE:76:33:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EAD0B538FE4F1E535C59 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 397209 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:d0:b5:38:fe:4f:1e:53:5c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=6d06a706-8455-4d08-aca6-21cc54e2d722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:2f:3f:b4:0c:9d:0e:e3:49:f2:0a:47:29: 42:f0:dc:4b:b7:76:58:4d:99:b1:8c:ad:9c:94:1b: 8b:b2:80:1c:26:b4:1e:10:45:7f:84:60:bf:a6:83: 49:e2:b9:46:20:05:8d:b4:e0:1c:50:28:c1:82:f4: 54:01:97:2c:cc:be:02:ee:e0:7d:0a:ec:35:59:d6: 86:10:8c:ec:6d:a5:8c:ce:61:07:53:cd:0e:b4:42: 3b:38:94:e7:1a:08:3e:c9:bb:7d:d6:8e:48:9e:1f: 7d:2a:08:13:59:4c:53:43:c4:ba:f3:b6:44:a2:09: 72:41:66:e1:89:ca:ca:8d:60:65:7e:d6:eb:e0:e6: a3:ec:27:35:1c:39:54:c8:1d:99:77:1f:63:3f:98: 4d:68:11:a5:37:d7:f5:81:69:9d:0e:b6:9a:32:06: 72:1b:c5:31:cb:c4:5a:73:60:f5:bd:71:a3:b8:5f: a0:cf:1d:83:7f:92:f0:be:ce:d0:09:b7:17:e3:d8: 1b:d8:86:e0:93:85:08:19:a0:6d:97:cd:33:eb:82: b9:77:0b:32:cd:c2:a8:ca:8d:5c:2f:fa:0d:cf:57: a8:cb:e2:76:fb:7d:b0:95:c8:5a:9e:80:78:12:d7: 6f:57:99:94:dc:37:f5:a3:71:b5:1a:c1:35:55:4d: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:35:32:44:2D:B9:D3:4A:C3:1C:B3:BB:C7:25:86:FE:76:33:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c1:48:44:19:db:a0:86:df:73:af:01:17:39:87:3f:ce:e0: df:46:4a:58:75:c2:86:16:5d:bf:53:f9:73:2b:47:38:a1:99: 9e:ca:1e:03:b7:ca:10:cf:66:5e:a5:d0:bb:48:70:a9:ba:14: 20:58:a1:b8:50:fd:f6:45:8e:3f:f9:e4:f7:fd:ba:c7:3e:25: 5f:96:13:c2:05:4d:3c:c3:e3:3d:28:a1:3b:32:fa:1a:ca:19: 0a:3e:06:99:ce:cb:1b:2c:4e:ae:96:61:f0:e9:c2:62:83:92: b9:5b:a5:a2:1c:f6:32:61:25:66:6f:f7:04:5b:4b:ec:3e:c2: 6b:b1:b4:b7:44:ef:63:a2:7a:78:26:83:3d:04:36:73:d9:4b: 64:4f:84:18:32:3c:4e:6b:33:c1:07:72:fe:66:5b:34:69:1b: c2:92:5d:1f:a4:33:1c:dd:1c:61:38:75:3b:72:d6:bb:fb:7e: 32:5c:ae:d8:97:1e:25:59:30:8a:70:5e:45:71:3c:5b:ee:aa: 3c:e8:ac:87:96:1a:9f:23:2c:0e:f1:44:ee:75:d0:a3:23:22: cf:cd:ea:e4:8f:1c:b4:d8:3b:a7:63:61:2a:c6:17:69:e7:a2: a0:8d:54:cb:6d:a8:1b:f3:5f:e0:01:04:22:0b:49:01:db:4a: e9:10:4a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYurQtTj+Tx5TXFkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NmQwNmE3MDYtODQ1NS00ZDA4LWFjYTYtMjFjYzU0ZTJkNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKEvP7QMnQ7jSfIKRylC8NxLt3ZYTZmxjK2c lBuLsoAcJrQeEEV/hGC/poNJ4rlGIAWNtOAcUCjBgvRUAZcszL4C7uB9Cuw1WdaG EIzsbaWMzmEHU80OtEI7OJTnGgg+ybt91o5Inh99KggTWUxTQ8S687ZEoglyQWbh icrKjWBlftbr4Oaj7Cc1HDlUyB2Zdx9jP5hNaBGlN9f1gWmdDraaMgZyG8Uxy8Ra c2D1vXGjuF+gzx2Df5Lwvs7QCbcX49gb2Ibgk4UIGaBtl80z64K5dwsyzcKoyo1c L/oNz1eoy+J2+32wlchanoB4EtdvV5mU3Df1o3G1GsE1VU19EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2KNTJELbnTSsMcs7vHJYb+djO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzEwOTgwYjYtNjAzZC0z ZjljLTg5YmItZWI3Y2I5ZjIyM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXBSEQZ26CG33OvARc5hz/O4N9GSlh1woYWXb9T+XMrRzihmZ7KHgO3 yhDPZl6l0LtIcKm6FCBYobhQ/fZFjj/55Pf9usc+JV+WE8IFTTzD4z0ooTsy+hrK GQo+BpnOyxssTq6WYfDpwmKDkrlbpaIc9jJhJWZv9wRbS+w+wmuxtLdE72Oiengm gz0ENnPZS2RPhBgyPE5rM8EHcv5mWzRpG8KSXR+kMxzdHGE4dTty1rv7fjJcrtiX HiVZMIpwXkVxPFvuqjzorIeWGp8jLA7xRO510KMjIs/N6uSPHLTYO6djYSrGF2nn oqCNVMttqBvzX+ABBCILSQHbSukQSqI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:42 2025 by rpki-client