$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa File: 83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa (raw, json) Hash identifier: uRzLEeaWW8vDbBy+3ctshug6cGa7vQx/P9i4hEABQMI= Subject key identifier: 33:14:28:FB:39:AC:43:76:FF:5D:15:57:A5:7A:E8:3A:CF:C6:98:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EF3E4028B5FE804B0F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 20172 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:3e:40:28:b5:fe:80:4b:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=e09552b8-3c23-45e6-97ff-c9e4aacd227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:41:fb:54:d2:e3:29:25:82:6c:8d:2b:97: 18:2c:43:cb:1c:d5:41:6b:b1:bf:7d:d6:99:70:60: 35:12:ff:a6:f0:39:b0:7d:99:03:58:f5:51:1f:a6: 37:81:76:1d:56:cf:81:6c:4f:5c:9d:80:64:14:4c: af:c5:dd:9a:c0:51:12:f7:6b:cc:62:f4:c6:5d:66: 25:17:06:fc:d5:bc:0c:03:38:89:16:02:d9:27:a5: 18:e7:11:ee:28:4a:e2:c7:f1:70:ca:3c:78:5c:ea: 4d:bd:84:12:fd:5f:eb:cd:99:63:52:39:77:d4:1c: 41:78:57:9b:59:e5:f1:5e:ee:cc:6e:88:f3:54:c5: f5:19:2f:f7:5a:44:40:f2:ca:3c:9d:68:2d:e5:f5: 24:66:2b:fe:09:84:84:73:2d:71:64:5e:c7:ae:ff: b3:5b:4e:99:3d:87:1a:be:e8:fd:39:d0:14:a7:e8: 60:1d:cc:e9:5d:28:ea:0e:4b:fc:0f:b7:14:0e:87: 84:0c:55:cf:c7:2d:46:92:50:3b:c6:8a:a4:2a:ed: 87:a0:e9:34:b4:03:51:e3:c6:d9:cf:75:c8:d2:01: 86:df:94:de:fc:32:5b:cd:8f:1b:d1:1e:d9:46:0d: 8e:97:ad:a4:cb:bb:c8:94:f7:80:bd:49:64:44:d9: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:28:FB:39:AC:43:76:FF:5D:15:57:A5:7A:E8:3A:CF:C6:98:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8a:32:05:b8:54:98:e9:04:f8:84:36:ef:04:e4:e9:66:a8: b9:90:ba:f6:a5:4f:fa:91:c6:fc:e0:dc:38:a9:85:b4:68:f8: 9b:b6:5a:48:fd:32:83:98:5c:50:b1:b0:1f:6f:69:33:ab:1a: b2:41:fb:dd:ed:5a:d9:47:72:50:8a:03:7c:83:a3:8f:00:fc: 7e:9a:6d:a4:d1:af:3f:a0:f6:ef:64:35:38:77:cb:3e:fd:60: 89:0a:b6:a9:f9:19:03:44:83:c0:a4:19:12:6c:68:88:77:f3: b5:14:d4:2a:97:8b:ab:03:7c:0f:99:93:fe:dc:2d:7f:40:b3: fc:9b:12:f1:f8:b5:7b:63:8c:9a:d0:b3:66:9b:39:49:9e:93: 2e:a9:73:c2:30:5f:68:a4:1d:53:0f:93:ba:16:55:39:49:6c: 98:8b:2b:7a:5c:25:64:7a:22:11:f6:37:7c:75:50:36:a1:fc: 75:f8:68:93:fe:08:7e:46:2e:6f:16:84:43:69:63:bd:c1:dc: 28:6d:f5:50:fa:e1:0e:ab:eb:2e:8a:50:a1:40:52:f0:cc:ba: 0c:12:95:23:2a:22:de:af:2f:cd:6f:85:8c:b3:7f:c4:09:86: 38:1e:d6:70:d5:e4:a2:28:d0:0b:cb:e7:5a:2a:41:80:b5:6e: c7:92:fa:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu8+QCi1/oBLD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk ZTA5NTUyYjgtM2MyMy00NWU2LTk3ZmYtYzllNGFhY2QyMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZNB+1TS4yklgmyNK5cYLEPLHNVBa7G/fdaZ cGA1Ev+m8DmwfZkDWPVRH6Y3gXYdVs+BbE9cnYBkFEyvxd2awFES92vMYvTGXWYl Fwb81bwMAziJFgLZJ6UY5xHuKErix/Fwyjx4XOpNvYQS/V/rzZljUjl31BxBeFeb WeXxXu7MbojzVMX1GS/3WkRA8so8nWgt5fUkZiv+CYSEcy1xZF7Hrv+zW06ZPYca vuj9OdAUp+hgHczpXSjqDkv8D7cUDoeEDFXPxy1GklA7xoqkKu2HoOk0tANR48bZ z3XI0gGG35Te/DJbzY8b0R7ZRg2Ol62ky7vIlPeAvUlkRNl5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMUKPs5rEN2/10VV6V66DrPxpguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODNjZmVkNGQtOGRlOS0z NWYyLTgxYzMtN2FjZWUzYmU0NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyKMgW4VJjpBPiENu8E5OlmqLmQuvalT/qRxvzg3DiphbRo+Ju2Wkj9 MoOYXFCxsB9vaTOrGrJB+93tWtlHclCKA3yDo48A/H6abaTRrz+g9u9kNTh3yz79 YIkKtqn5GQNEg8CkGRJsaIh387UU1CqXi6sDfA+Zk/7cLX9As/ybEvH4tXtjjJrQ s2abOUmeky6pc8IwX2ikHVMPk7oWVTlJbJiLK3pcJWR6IhH2N3x1UDah/HX4aJP+ CH5GLm8WhENpY73B3Cht9VD64Q6r6y6KUKFAUvDMugwSlSMqIt6vL81vhYyzf8QJ hjge1nDV5KIo0AvL51oqQYC1bseS+vQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:05 2025 by rpki-client