$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/790c78d6-c376-398e-b057-7457e255e362.roa File: 790c78d6-c376-398e-b057-7457e255e362.roa (raw, json) Hash identifier: 9PyvOaiVl7/hoDPhHMR4vJqeijtxTPzQfFmWPHVGHSM= Subject key identifier: 38:F4:24:71:A5:F6:F7:44:E9:C9:F8:47:50:DE:4E:25:5C:83:EE:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EF8F0ADD9AA057224600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/790c78d6-c376-398e-b057-7457e255e362.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 397196 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:8f:0a:dd:9a:a0:57:22:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=77be489c-02c0-475a-9491-931c2bce9427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:84:da:c6:ee:ac:11:73:d0:8d:f4:2a:f3: 88:9a:e3:31:d5:dd:8e:33:ea:a2:32:2c:3f:c0:dc: 42:73:4a:2d:71:97:c8:8f:a6:ca:a3:37:1e:56:aa: 58:15:5d:dc:a3:e4:ba:43:f0:ec:36:9e:cd:df:02: 3b:10:e8:ae:b6:f7:5d:0d:69:66:79:da:3c:b1:3e: 5b:fa:c6:dd:52:28:97:49:e9:09:b0:bd:6a:5b:ed: 56:c0:e5:c5:2e:2f:4f:29:4f:2d:d9:38:2c:5d:f3: 17:f3:02:11:26:f8:6c:53:fe:ce:03:fc:34:8b:08: 85:54:38:14:e0:1f:bc:6a:27:f4:34:fc:32:18:96: a3:a4:0e:e4:33:14:9b:f6:40:fa:69:53:32:35:f1: 8f:33:9a:98:7b:f3:9c:4d:6a:f5:7c:0d:90:5e:74: 6c:74:9d:02:e5:35:ad:c9:2f:ba:f3:f1:d4:29:81: a2:23:9b:54:fa:ba:bb:82:10:26:e1:a7:3b:5a:2d: 56:71:e7:1c:6f:ce:e8:ee:a4:02:0a:aa:de:0e:9a: b7:b5:1e:0b:c6:7b:8f:58:83:3f:a1:b3:e5:fa:ac: 0c:e8:a4:09:a2:af:0c:c5:7e:d6:de:7a:97:b7:6d: de:00:7a:8d:66:4b:21:32:4f:49:6b:b4:9f:26:c3: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:24:71:A5:F6:F7:44:E9:C9:F8:47:50:DE:4E:25:5C:83:EE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/790c78d6-c376-398e-b057-7457e255e362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:f9:ff:8e:66:99:8b:f2:9e:a9:e4:63:68:13:53:36:34: b9:e3:1c:00:4d:2f:49:f6:19:84:da:2b:3d:06:eb:63:56:41: 17:17:00:cb:26:fc:11:a5:03:a1:64:34:cb:44:86:ac:67:af: ea:75:ec:c2:d9:93:10:00:c8:18:b3:c6:0b:1a:a1:08:1a:ea: c0:1f:b2:0f:9c:70:af:2e:e2:32:18:d8:a0:9b:a9:7e:bf:93: 94:b1:14:1c:9b:3d:9f:dc:96:f5:d7:87:8e:1e:a2:f1:47:48: 5a:cd:eb:75:d5:83:82:60:50:85:2f:46:96:4c:a2:c3:ee:33: 15:1c:15:12:8e:85:a0:81:a9:73:ee:93:1f:4d:a7:6c:bc:ac: e3:4d:29:a6:34:e5:6d:50:31:be:e4:15:f6:4f:24:ea:82:32: db:9e:82:cb:25:01:be:1e:1b:86:7e:0c:d2:1c:f9:61:1f:c1: 0e:d7:12:ea:85:fa:d4:a9:f9:d3:b3:fb:66:06:a1:e3:5e:56: 86:8d:74:a9:6f:10:fd:ab:55:d7:4d:45:73:8c:aa:74:81:8d: 97:73:fd:04:aa:33:52:35:75:ec:8d:58:9a:c8:57:b2:40:eb: 16:d4:b4:a3:bd:ce:1b:29:87:22:a9:25:ec:e8:de:36:0c:94: 02:6b:54:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu+PCt2aoFciRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk NzdiZTQ4OWMtMDJjMC00NzVhLTk0OTEtOTMxYzJiY2U5NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghiE2sburBFz0I30KvOImuMx1d2OM+qiMiw/ wNxCc0otcZfIj6bKozceVqpYFV3co+S6Q/DsNp7N3wI7EOiutvddDWlmedo8sT5b +sbdUiiXSekJsL1qW+1WwOXFLi9PKU8t2TgsXfMX8wIRJvhsU/7OA/w0iwiFVDgU 4B+8aif0NPwyGJajpA7kMxSb9kD6aVMyNfGPM5qYe/OcTWr1fA2QXnRsdJ0C5TWt yS+68/HUKYGiI5tU+rq7ghAm4ac7Wi1Wceccb87o7qQCCqreDpq3tR4LxnuPWIM/ obPl+qwM6KQJoq8MxX7W3nqXt23eAHqNZkshMk9Ja7SfJsOchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj0JHGl9vdE6cn4R1DeTiVcg+7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzkwYzc4ZDYtYzM3Ni0z OThlLWIwNTctNzQ1N2UyNTVlMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrK+f+OZpmL8p6p5GNoE1M2NLnjHABNL0n2GYTaKz0G62NWQRcXAMsm /BGlA6FkNMtEhqxnr+p17MLZkxAAyBizxgsaoQga6sAfsg+ccK8u4jIY2KCbqX6/ k5SxFBybPZ/clvXXh44eovFHSFrN63XVg4JgUIUvRpZMosPuMxUcFRKOhaCBqXPu kx9Np2y8rONNKaY05W1QMb7kFfZPJOqCMtuegsslAb4eG4Z+DNIc+WEfwQ7XEuqF +tSp+dOz+2YGoeNeVoaNdKlvEP2rVddNRXOMqnSBjZdz/QSqM1I1deyNWJrIV7JA 6xbUtKO9zhsphyKpJezo3jYMlAJrVIc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:12 2025 by rpki-client