$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa File: 77ce4854-9903-3349-acd2-9089161d4f56.roa (raw, json) Hash identifier: Q5PxQ+en3ZPR02XpDiI5OcTRYAWq5Fm4OgnXNxTzF4U= Subject key identifier: 64:6F:38:58:42:48:1E:D2:73:8B:59:CF:37:F5:86:C1:CD:9E:2F:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EBECCCA852B906EAFA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396574 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:eb:ec:cc:a8:52:b9:06:ea:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=a0752c02-be06-449d-8997-6444985bbf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:cb:31:a7:45:e0:1f:4d:20:a1:aa:2b:fb: d3:fe:81:4e:82:a4:0f:dc:71:71:7b:fd:80:86:34: bb:45:1c:e5:c4:76:3b:a9:ab:6d:4b:fc:89:1b:c1: da:86:d6:93:b2:b5:3b:86:97:50:4f:7f:bb:4e:d8: b0:fd:d1:c3:8a:30:fb:10:25:35:3d:72:26:ea:ac: 61:0f:cb:b6:5d:ff:eb:af:d4:89:a8:1c:ea:e1:56: c2:b4:0f:fe:aa:40:a8:8b:3a:54:ac:a5:0c:0f:b7: 92:86:a8:ce:71:57:94:cd:6b:0b:a0:27:ba:9a:0b: c1:f9:27:f8:b7:f4:0b:01:4a:ea:23:cd:37:fd:15: 81:bb:7e:17:fb:7d:fe:91:ec:e3:57:10:42:b0:25: c8:62:92:34:13:7a:49:58:fe:21:5c:e7:42:8f:44: 18:6f:c6:01:73:40:eb:aa:cf:55:a2:10:c9:a9:07: 5c:e8:df:ee:51:f7:9a:3c:ce:ac:3c:04:db:71:9f: e3:dd:55:2e:36:82:9b:9a:ad:2a:fe:ea:0a:93:5a: 5d:a6:10:42:28:42:f0:ce:bd:b0:70:76:f1:06:d8: 72:b3:1c:8a:25:64:da:a3:8e:ba:8d:1b:64:71:0e: e4:17:36:0f:f1:f9:d1:e1:66:8a:2e:d0:c7:77:a1: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6F:38:58:42:48:1E:D2:73:8B:59:CF:37:F5:86:C1:CD:9E:2F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0f:a4:3c:56:21:e3:73:7e:bc:3f:d5:16:38:b4:6c:af:0a: 1c:84:44:77:24:2b:7e:6a:56:8d:11:c5:6b:49:cc:f3:d0:9a: 09:2e:22:f3:58:3a:f6:dd:c6:bd:95:92:02:76:39:75:3f:cd: 23:f9:18:0a:f2:f8:4a:20:7d:34:75:29:8c:31:9b:6f:9d:6d: 13:ff:81:f4:33:42:ac:01:c3:dd:18:1c:1e:98:90:c3:75:bd: dc:34:8d:61:7f:c2:35:77:fa:d2:d2:fb:6e:05:0a:47:c8:d8: 4b:d2:df:e2:d1:59:c9:6a:c9:16:da:5b:93:29:4b:64:1f:ef: 6e:c4:50:3a:e8:2e:a3:9d:49:81:76:c8:61:24:f1:bc:5a:68: c4:b0:8d:4e:f4:28:5c:a3:09:d3:82:37:8e:5e:7b:bb:04:7c: a0:69:0f:b6:0c:4e:05:9a:8f:c0:f5:5c:90:88:ca:a2:71:1d: b4:4f:e3:53:71:7e:b4:35:e0:c4:05:35:dc:39:5a:da:5a:b3: 08:c5:de:42:8f:e1:95:b7:cb:3a:f3:c3:70:2c:3e:2a:9f:45: 08:dc:ba:3a:49:99:49:70:a1:87:36:03:05:69:6d:b7:f3:ae: e5:73:a9:f6:fe:fb:d2:64:6c:52:1a:b6:2a:05:3a:23:4b:4e: 15:e6:c1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuvszKhSuQbq+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk YTA3NTJjMDItYmUwNi00NDlkLTg5OTctNjQ0NDk4NWJiZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1PLMadF4B9NIKGqK/vT/oFOgqQP3HFxe/2A hjS7RRzlxHY7qattS/yJG8HahtaTsrU7hpdQT3+7Ttiw/dHDijD7ECU1PXIm6qxh D8u2Xf/rr9SJqBzq4VbCtA/+qkCoizpUrKUMD7eShqjOcVeUzWsLoCe6mgvB+Sf4 t/QLAUrqI803/RWBu34X+33+kezjVxBCsCXIYpI0E3pJWP4hXOdCj0QYb8YBc0Dr qs9VohDJqQdc6N/uUfeaPM6sPATbcZ/j3VUuNoKbmq0q/uoKk1pdphBCKELwzr2w cHbxBthysxyKJWTao466jRtkcQ7kFzYP8fnR4WaKLtDHd6EYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRvOFhCSB7Sc4tZzzf1hsHNni/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzdjZTQ4NTQtOTkwMy0z MzQ5LWFjZDItOTA4OTE2MWQ0ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEPpDxWIeNzfrw/1RY4tGyvChyERHckK35qVo0RxWtJzPPQmgkuIvNY Ovbdxr2VkgJ2OXU/zSP5GAry+EogfTR1KYwxm2+dbRP/gfQzQqwBw90YHB6YkMN1 vdw0jWF/wjV3+tLS+24FCkfI2EvS3+LRWclqyRbaW5MpS2Qf727EUDroLqOdSYF2 yGEk8bxaaMSwjU70KFyjCdOCN45ee7sEfKBpD7YMTgWaj8D1XJCIyqJxHbRP41Nx frQ14MQFNdw5WtpaswjF3kKP4ZW3yzrzw3AsPiqfRQjcujpJmUlwoYc2AwVpbbfz ruVzqfb++9JkbFIatioFOiNLThXmwY8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:19 2025 by rpki-client