$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa File: 7e9d8625-f410-386c-9018-a927f219e329.roa (raw, json) Hash identifier: pgFTq5CJM9BTrIOGBBvbbs80yZ6+jLRhOpTPL5TGkTw= Subject key identifier: 08:FD:61:5E:38:3E:A0:FC:92:E6:04:98:AF:D5:7D:A8:F1:DA:36:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E97765E2399F9CC066C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396588 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:77:65:e2:39:9f:9c:c0:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=30cda960-965f-4768-a08d-c7203f64ee4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:65:ec:7c:98:89:e9:cd:9a:04:4e:b0:ea: 23:eb:e7:43:02:0c:25:80:ba:6d:14:2e:8b:66:9b: 19:10:2f:9d:a4:2a:28:91:21:ba:63:fe:50:75:f4: 06:43:fe:a9:ac:7e:01:a4:25:e0:58:85:a9:12:5a: 18:0f:27:84:d9:b3:9f:35:07:d9:7a:f2:ec:22:b9: eb:97:f9:ba:f8:b8:38:68:9e:7c:16:84:18:f4:bc: b7:2f:61:b9:24:c8:86:4e:13:5b:ec:33:a8:15:c7: d5:b2:14:8e:69:6c:da:3c:3a:82:f1:14:42:23:2e: 4a:b3:98:b2:4e:fd:c2:18:61:95:dc:0f:4d:fc:13: 62:83:6c:74:f4:41:18:68:7e:cb:47:f4:58:93:b0: cc:88:25:6e:a4:bf:b6:31:f8:cb:5d:4e:8a:fc:c3: 46:24:eb:c5:fc:17:ed:0c:b4:06:b4:de:22:de:4d: c3:f7:27:87:8c:26:42:17:2a:be:32:59:a9:cb:a9: 0a:c0:ea:86:70:60:67:53:25:e8:b1:f2:bd:8e:d0: 7c:09:a0:a8:5c:e5:99:66:ea:c7:1a:8b:fa:3d:31: 0a:05:26:cb:9d:40:99:0f:16:54:53:b2:e6:86:38: b3:2c:a8:d8:34:a4:96:95:23:bd:18:de:f4:a2:8f: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FD:61:5E:38:3E:A0:FC:92:E6:04:98:AF:D5:7D:A8:F1:DA:36:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:53:4c:24:61:f6:6e:63:37:86:76:71:80:3a:90:d4:ec:c0: 1c:13:98:2e:17:cf:1e:f4:1a:21:de:1d:81:7d:11:1e:f1:09: 11:34:7a:5d:61:84:9a:f8:a9:6d:21:e8:3b:46:09:7b:f5:59: ec:71:79:7c:ec:ce:ec:b2:21:38:35:78:c6:96:62:68:7b:8d: da:19:4c:70:bb:50:0e:6c:4f:45:fc:1d:19:c3:7b:c8:5b:fb: 8b:71:54:f8:6a:9a:b9:0a:47:ad:00:b8:eb:01:5c:f8:33:1c: 2a:53:28:4e:4f:70:e6:b0:cb:b4:c0:1a:16:3f:c7:9a:88:8c: 54:4e:b0:bc:c9:de:91:a7:a3:2c:da:bd:23:91:60:f6:de:64: 0e:aa:51:44:9c:4e:12:56:cf:d7:55:2e:96:f7:86:1d:af:f7: 22:9c:73:ef:c6:0a:f8:fc:e2:40:c2:04:7a:aa:3b:9c:78:65: 0b:98:d1:a7:44:c7:53:d0:cc:c9:9e:5c:20:fe:a6:21:c8:1b: 8b:9d:6f:5b:90:e0:d0:dd:02:46:14:42:2b:34:b2:ee:fd:f8: 4c:4f:58:8f:1f:a1:6b:5b:9e:4f:63:1b:39:06:b1:4c:5e:a5: 93:f6:0f:2c:7a:cf:46:b6:ca:8c:dd:24:b7:b6:36:b6:48:2f: 29:10:9a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYul3ZeI5n5zAZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MzBjZGE5NjAtOTY1Zi00NzY4LWEwOGQtYzcyMDNmNjRlZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRFl7HyYienNmgROsOoj6+dDAgwlgLptFC6L ZpsZEC+dpCookSG6Y/5QdfQGQ/6prH4BpCXgWIWpEloYDyeE2bOfNQfZevLsIrnr l/m6+Lg4aJ58FoQY9Ly3L2G5JMiGThNb7DOoFcfVshSOaWzaPDqC8RRCIy5Ks5iy Tv3CGGGV3A9N/BNig2x09EEYaH7LR/RYk7DMiCVupL+2MfjLXU6K/MNGJOvF/Bft DLQGtN4i3k3D9yeHjCZCFyq+Mlmpy6kKwOqGcGBnUyXosfK9jtB8CaCoXOWZZurH Gov6PTEKBSbLnUCZDxZUU7LmhjizLKjYNKSWlSO9GN70oo+XJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj9YV44PqD8kuYEmK/Vfajx2jZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2U5ZDg2MjUtZjQxMC0z ODZjLTkwMTgtYTkyN2YyMTllMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpTTCRh9m5jN4Z2cYA6kNTswBwTmC4Xzx70GiHeHYF9ER7xCRE0el1h hJr4qW0h6DtGCXv1WexxeXzszuyyITg1eMaWYmh7jdoZTHC7UA5sT0X8HRnDe8hb +4txVPhqmrkKR60AuOsBXPgzHCpTKE5PcOawy7TAGhY/x5qIjFROsLzJ3pGnoyza vSORYPbeZA6qUUScThJWz9dVLpb3hh2v9yKcc+/GCvj84kDCBHqqO5x4ZQuY0adE x1PQzMmeXCD+piHIG4udb1uQ4NDdAkYUQis0su79+ExPWI8foWtbnk9jGzkGsUxe pZP2Dyx6z0a2yozdJLe2NrZILykQmso= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:25 2025 by rpki-client