$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa File: 8e431389-36c2-35c4-a2ef-77849c8a28cd.roa (raw, json) Hash identifier: pwJ085Ik2NP6lsqA5t7skczWCkxa/XmytM2fsXhumkU= Subject key identifier: B9:7D:49:3D:6A:DB:57:E5:FA:94:AF:C1:A5:0E:09:05:56:FD:3C:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EDBA19E3E4CC609157D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 36632 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:ba:19:e3:e4:cc:60:91:57:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=2b86bf58-5a6e-4789-afbd-f795a38a88d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:bb:0d:2d:c3:c1:d4:68:55:85:55:4b:39: 58:f5:51:fd:11:9c:51:6c:1b:d4:55:58:a2:39:9d: b0:6f:47:91:ba:7b:3c:53:61:7c:95:e8:b3:1c:c5: 6d:a8:d0:df:01:c9:3e:da:28:07:9d:a5:ac:91:c1: 13:04:42:46:35:94:b2:e6:f8:d3:51:0b:17:48:2a: f1:07:21:4c:56:e7:cd:ee:f5:7c:59:d4:85:58:19: 26:a9:5a:ef:6b:04:97:2c:ee:f6:c2:20:a4:75:b5: d8:ee:7e:b5:76:f6:56:52:18:3b:7e:4f:00:6b:73: 3b:16:1f:46:a7:23:c1:1d:67:fb:a3:80:a9:ae:84: 54:91:00:74:81:5c:9a:20:7e:01:66:9d:cc:30:d4: 65:8c:55:6f:c2:ef:01:f3:5b:c7:d6:a6:f1:27:c2: 88:f8:c8:f0:38:9b:c7:c2:ee:41:11:0c:65:5d:f5: 0c:7c:19:b4:9e:2f:bc:6f:84:ac:ee:e0:fe:f2:a6: 72:f8:e2:c4:aa:47:99:f1:6c:92:16:7a:67:b3:ac: 33:07:46:ad:f5:8c:fc:dc:2f:20:20:91:98:9a:6c: 2d:30:ff:c4:32:53:2a:9e:67:cf:fe:29:c3:21:2b: 83:f6:d4:1c:cf:d5:b7:8f:5b:e1:33:20:52:1a:06: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:49:3D:6A:DB:57:E5:FA:94:AF:C1:A5:0E:09:05:56:FD:3C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:44:18:b0:b2:02:1a:6d:69:94:53:b8:af:ef:79:ab:bc:0d: 1c:d6:82:58:7a:29:69:18:af:9a:bb:03:1d:43:a6:98:9a:14: c8:a0:a2:0e:71:35:86:28:34:fb:54:dd:15:17:ad:91:19:40: 40:2d:7f:88:d9:37:61:13:8e:09:6f:10:dd:80:1b:da:fa:05: 6a:03:82:47:75:f7:ed:71:a1:6f:57:81:2c:7b:eb:d9:ae:0d: 37:cf:64:5f:d9:92:95:6c:b1:82:4f:76:78:78:eb:8f:7d:25: 95:32:89:ea:34:52:70:80:86:ee:1d:df:a5:05:84:e6:9d:bb: c8:c0:74:df:8e:34:04:7f:79:a7:b7:41:af:82:24:84:04:41: 6d:c2:05:82:26:f7:5e:e0:7b:e1:fa:31:dd:96:7d:10:78:30: 27:96:4e:c2:97:46:08:dc:3c:33:e4:9a:00:fd:a8:e8:a9:82: 59:e0:1c:a5:d8:e2:75:7c:48:b4:5c:48:ed:e4:5e:a4:77:d7: 4b:4d:a5:e6:2e:b3:da:43:2f:83:ef:86:54:81:72:79:75:a2: 82:88:bf:7d:e6:84:2b:eb:db:89:69:8d:2d:24:7f:34:67:12: c9:ac:4f:29:fa:0a:df:f3:32:c9:6c:84:20:21:b9:77:ff:67: 69:20:38:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu26GePkzGCRV9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MmI4NmJmNTgtNWE2ZS00Nzg5LWFmYmQtZjc5NWEzOGE4OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/27DS3DwdRoVYVVSzlY9VH9EZxRbBvUVVii OZ2wb0eRuns8U2F8leizHMVtqNDfAck+2igHnaWskcETBEJGNZSy5vjTUQsXSCrx ByFMVufN7vV8WdSFWBkmqVrvawSXLO72wiCkdbXY7n61dvZWUhg7fk8Aa3M7Fh9G pyPBHWf7o4CproRUkQB0gVyaIH4BZp3MMNRljFVvwu8B81vH1qbxJ8KI+MjwOJvH wu5BEQxlXfUMfBm0ni+8b4Ss7uD+8qZy+OLEqkeZ8WySFnpns6wzB0at9Yz83C8g IJGYmmwtMP/EMlMqnmfP/inDISuD9tQcz9W3j1vhMyBSGgbhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl9ST1q21fl+pSvwaUOCQVW/TxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzEzODktMzZjMi0z NWM0LWEyZWYtNzc4NDljOGEyOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpEGLCyAhptaZRTuK/veau8DRzWglh6KWkYr5q7Ax1DppiaFMigog5x NYYoNPtU3RUXrZEZQEAtf4jZN2ETjglvEN2AG9r6BWoDgkd19+1xoW9XgSx769mu DTfPZF/ZkpVssYJPdnh46499JZUyieo0UnCAhu4d36UFhOadu8jAdN+ONAR/eae3 Qa+CJIQEQW3CBYIm917ge+H6Md2WfRB4MCeWTsKXRgjcPDPkmgD9qOipglngHKXY 4nV8SLRcSO3kXqR310tNpeYus9pDL4PvhlSBcnl1ooKIv33mhCvr24lpjS0kfzRn EsmsTyn6Ct/zMslshCAhuXf/Z2kgOEo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:40 2025 by rpki-client