$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7331504a-098b-36af-b853-2f6616ca1e79.roa File: 7331504a-098b-36af-b853-2f6616ca1e79.roa (raw, json) Hash identifier: nfsmkDehSbnb+iOMkLkBTAUrE0osnEFzmqVp3vvZkEE= Subject key identifier: E4:EA:75:15:44:F2:72:12:97:F9:71:9D:D3:CA:27:86:A7:03:9D:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EB17324410B61A382F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7331504a-098b-36af-b853-2f6616ca1e79.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 40717 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:eb:17:32:44:10:b6:1a:38:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=d9452820-73d4-4f98-9319-4725f8c08d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:a5:1e:6c:0e:58:a2:ef:ff:55:78:2a:ad: 67:a8:38:ed:c4:cf:42:af:b8:17:21:cf:ca:c3:e8: 29:37:09:8a:1c:9b:73:84:87:80:fe:ee:bc:9b:ee: 1a:2f:fb:a2:7d:54:29:4b:18:cf:20:4d:68:c4:54: f8:5d:34:38:80:4e:02:23:5c:10:bc:0b:0b:56:d4: 96:35:39:67:d4:43:c2:c2:09:04:ed:8f:e7:84:c2: f7:cc:ec:e6:d1:9e:e0:dc:b1:c7:57:90:fb:4a:89: d6:40:27:8f:24:64:85:be:4e:3d:29:19:d0:db:6d: 9c:52:83:bf:02:c8:8e:ff:4f:8c:ce:89:b9:7e:52: 0e:c7:af:eb:60:d9:9d:90:35:c5:85:32:2b:5e:c2: 58:dd:e8:35:c6:da:b4:62:8a:2b:35:85:da:e7:45: 83:51:d3:4c:56:00:49:05:e6:a1:09:1c:89:eb:44: 98:ff:74:43:b7:5b:bf:d3:26:4c:a8:14:a0:51:22: d5:4e:d3:fa:38:5e:25:ce:22:3b:3d:09:59:75:ab: 76:20:62:9e:6e:9e:9e:59:55:92:15:1e:46:79:c4: ad:64:99:db:85:41:14:c3:15:4c:0d:cd:2e:d8:82: 83:dd:07:4d:d3:8f:14:52:0e:ff:65:13:22:a9:68: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:75:15:44:F2:72:12:97:F9:71:9D:D3:CA:27:86:A7:03:9D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7331504a-098b-36af-b853-2f6616ca1e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:72:16:e0:e0:40:c8:d4:4a:d9:06:6f:64:f3:84:b9:8e:c4: 3d:1c:22:a8:1e:74:46:54:16:d8:82:6d:da:30:26:3e:3b:59: 05:54:66:48:5d:72:dd:9d:41:40:b5:7a:b1:42:4c:a9:42:5f: 70:6c:bf:92:92:b5:6d:73:f0:38:35:be:b8:7c:0d:a6:b5:2a: 94:17:7c:7c:8f:e8:d3:2b:49:23:50:34:5a:15:1f:41:91:71: 37:6b:9f:91:ab:21:75:b9:6e:d0:64:28:af:ff:63:50:2c:10: 61:f9:4e:4a:75:e0:26:59:5a:8b:d3:f0:d0:5c:58:b5:f3:6d: 85:6a:3d:99:d6:4c:77:1a:53:b1:27:44:f5:d7:ba:5c:d6:a3: 41:ef:ec:db:37:e4:37:18:6b:9d:c1:cf:39:48:ec:f6:43:07: f0:71:2c:0f:72:ac:ea:be:72:1e:c4:37:4c:a3:0e:0b:77:7a: fb:ca:e1:af:2d:17:16:6e:e0:0c:0e:11:8f:39:d7:bc:74:18: e9:ed:47:71:54:11:3c:3b:2b:1e:4e:7e:7c:9c:13:e4:d5:5f: ed:2f:ab:7c:5d:a3:ef:76:79:3e:94:c4:16:cf:51:52:a3:e3: a0:f8:fc:7f:80:56:e0:6b:07:1c:6b:37:a9:b3:ad:be:d9:a7: 9d:72:bc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYusXMkQQtho4LyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk ZDk0NTI4MjAtNzNkNC00Zjk4LTkzMTktNDcyNWY4YzA4ZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRWlHmwOWKLv/1V4Kq1nqDjtxM9Cr7gXIc/K w+gpNwmKHJtzhIeA/u68m+4aL/uifVQpSxjPIE1oxFT4XTQ4gE4CI1wQvAsLVtSW NTln1EPCwgkE7Y/nhML3zOzm0Z7g3LHHV5D7SonWQCePJGSFvk49KRnQ222cUoO/ AsiO/0+Mzom5flIOx6/rYNmdkDXFhTIrXsJY3eg1xtq0YoorNYXa50WDUdNMVgBJ BeahCRyJ60SY/3RDt1u/0yZMqBSgUSLVTtP6OF4lziI7PQlZdat2IGKebp6eWVWS FR5GecStZJnbhUEUwxVMDc0u2IKD3QdN048UUg7/ZRMiqWg+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTqdRVE8nISl/lxndPKJ4anA52WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzMzMTUwNGEtMDk4Yi0z NmFmLWI4NTMtMmY2NjE2Y2ExZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRyFuDgQMjUStkGb2TzhLmOxD0cIqgedEZUFtiCbdowJj47WQVUZkhd ct2dQUC1erFCTKlCX3Bsv5KStW1z8Dg1vrh8Daa1KpQXfHyP6NMrSSNQNFoVH0GR cTdrn5GrIXW5btBkKK//Y1AsEGH5Tkp14CZZWovT8NBcWLXzbYVqPZnWTHcaU7En RPXXulzWo0Hv7Ns35DcYa53BzzlI7PZDB/BxLA9yrOq+ch7EN0yjDgt3evvK4a8t FxZu4AwOEY8517x0GOntR3FUETw7Kx5OfnycE+TVX+0vq3xdo+92eT6UxBbPUVKj 46D4/H+AVuBrBxxrN6mzrb7Zp51yvG4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:46 2025 by rpki-client