$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa File: 856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa (raw, json) Hash identifier: 4uMYreq9gHJJg9P/OeBspI7wx7pRss6VOAnJ2LAo7lA= Subject key identifier: 70:0D:F3:D0:60:2D:15:7F:C6:81:10:1D:DE:40:87:38:29:45:37:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EA6B5F64F419B6349B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 397195 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:6b:5f:64:f4:19:b6:34:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=adb42fd4-1976-471a-8df1-0ad4177078d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:ea:f1:f7:de:0c:68:89:e6:5e:a8:0e:51: cf:4c:fa:4b:f1:bf:e6:99:42:b1:da:05:02:4c:17: 5d:bc:b7:ec:ae:d6:37:ba:a3:ac:cc:fb:eb:6b:c2: 7c:9a:eb:bb:76:26:06:c5:d5:b1:e9:5d:7d:1a:eb: 7a:2d:c0:a1:3c:cc:5c:ce:22:46:1b:8f:20:b2:6a: 09:3e:9e:96:4b:7e:ea:7d:af:f1:18:d9:66:67:3f: 48:26:5d:c9:d4:d7:b1:a4:80:88:a3:4f:90:84:be: 1d:6a:3f:7a:a0:e2:a1:30:5a:01:f8:30:36:46:45: 25:b4:1a:ed:1a:69:21:9e:be:1d:41:f0:75:0f:cf: c6:6f:9d:47:0d:7d:88:2e:44:88:dd:4e:c6:e2:3f: 66:c0:67:ce:cb:ae:5a:24:36:ae:49:fc:eb:57:3c: 3f:2e:3c:d9:e9:30:d8:d1:85:e6:4d:fb:d7:fc:7a: f4:b3:1e:9e:33:9a:94:c4:8a:25:5b:d7:8e:6f:25: 04:d6:d1:4c:96:a0:3d:2b:f9:84:0c:0f:21:db:1a: f5:33:f4:53:47:c4:a1:41:71:ee:da:15:49:a0:ef: d8:bd:9f:77:4e:e4:58:a1:e6:0c:40:65:5c:87:8c: a8:c1:84:61:aa:27:4c:92:6a:a8:1e:b4:3c:47:af: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:F3:D0:60:2D:15:7F:C6:81:10:1D:DE:40:87:38:29:45:37:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:37:8d:a0:d8:e1:01:05:57:62:29:3f:96:9d:a2:c1:94:de: 01:03:b5:4b:77:87:f4:f5:bd:29:38:fa:cb:64:60:0b:ad:4a: 58:21:72:cd:3a:11:58:86:e3:bd:bf:46:1f:95:7a:8a:ae:45: 21:80:a6:8a:1c:4f:4c:2e:39:58:1c:ec:14:6c:6f:13:31:83: 46:45:bd:fd:4f:b2:a2:26:c3:d5:c6:59:ad:36:c6:8d:28:c7: ae:a2:72:ea:e1:d0:14:16:8a:f6:7c:31:be:d0:9e:ad:b4:53: 0e:70:b8:f4:7f:16:1b:1d:81:28:25:09:d5:35:fd:ff:09:09: f1:ee:26:84:5b:0b:6b:77:cb:64:80:0c:9c:52:90:c6:a7:40: 8d:95:6d:ea:a2:21:82:5b:c5:5f:ea:37:97:08:00:98:9e:d7: 1f:de:1f:c2:b5:d0:24:9b:93:b3:03:fc:42:6b:02:98:1f:f0: 89:66:bb:d1:33:d0:55:f9:08:cb:e6:c1:a0:1f:fd:db:16:f9: 52:3f:56:6d:14:40:b4:08:91:ae:22:66:a7:bf:a7:e3:3c:45: c2:4b:a9:9d:0b:d7:e9:d7:d8:60:e0:a2:91:1e:c7:1c:bc:76: 54:03:c7:d9:cd:14:19:56:99:5b:b0:b3:80:95:bf:6c:da:b9: fa:b2:d5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuprX2T0GbY0mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk YWRiNDJmZDQtMTk3Ni00NzFhLThkZjEtMGFkNDE3NzA3OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobXq8ffeDGiJ5l6oDlHPTPpL8b/mmUKx2gUC TBddvLfsrtY3uqOszPvra8J8muu7diYGxdWx6V19Gut6LcChPMxcziJGG48gsmoJ Pp6WS37qfa/xGNlmZz9IJl3J1NexpICIo0+QhL4daj96oOKhMFoB+DA2RkUltBrt Gmkhnr4dQfB1D8/Gb51HDX2ILkSI3U7G4j9mwGfOy65aJDauSfzrVzw/LjzZ6TDY 0YXmTfvX/Hr0sx6eM5qUxIolW9eObyUE1tFMlqA9K/mEDA8h2xr1M/RTR8ShQXHu 2hVJoO/YvZ93TuRYoeYMQGVch4yowYRhqidMkmqoHrQ8R6/AxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAN89BgLRV/xoEQHd5AhzgpRTeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2ZjU2OTMtYzRkMy0z MmFkLWE5ZmYtZjhhMGYwOTIyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM3jaDY4QEFV2IpP5adosGU3gEDtUt3h/T1vSk4+stkYAutSlghcs06 EViG472/Rh+VeoquRSGApoocT0wuOVgc7BRsbxMxg0ZFvf1PsqImw9XGWa02xo0o x66icurh0BQWivZ8Mb7Qnq20Uw5wuPR/FhsdgSglCdU1/f8JCfHuJoRbC2t3y2SA DJxSkManQI2VbeqiIYJbxV/qN5cIAJie1x/eH8K10CSbk7MD/EJrApgf8Ilmu9Ez 0FX5CMvmwaAf/dsW+VI/Vm0UQLQIka4iZqe/p+M8RcJLqZ0L1+nX2GDgopEexxy8 dlQDx9nNFBlWmVuws4CVv2zaufqy1WA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:07 2025 by rpki-client