$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa File: 98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa (raw, json) Hash identifier: e1fdCEO7ae4moT7ZWb//+79vpic5Bdj0udcecyb9Asg= Subject key identifier: C5:7B:D0:CB:39:92:C5:0D:9C:FA:E4:CA:2D:FD:C3:C1:04:3B:B0:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EE68AA61D8A2ABE8A2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396608 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:68:aa:61:d8:a2:ab:e8:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=9b308655-8dd1-4fdb-afb5-1050d1d31a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:f1:92:d2:63:fd:81:c6:73:24:f8:e9:73: 2e:77:01:5b:1c:a6:0f:fc:74:d7:5f:47:19:cb:b0: c2:18:47:5d:b5:a2:20:0b:aa:be:01:54:99:bb:63: f2:38:79:60:42:9f:5a:7a:f6:45:25:8a:4a:63:28: e8:26:05:39:bb:3b:4e:d0:ae:8b:7c:8e:bf:6c:11: a5:6e:72:12:cb:12:bb:1c:47:bb:99:f7:a8:00:98: 93:1b:9b:7e:8e:f9:4f:91:97:07:16:11:4a:10:be: fc:96:85:49:85:d5:a8:dc:82:68:ed:60:66:7a:96: 00:bb:84:61:39:1b:60:ef:6c:11:02:89:47:d3:e9: b7:13:52:ab:8f:44:3e:65:a7:45:af:5b:1b:bc:48: c3:bb:e7:0b:69:bc:7c:b0:94:5f:a1:08:f5:cf:c3: b1:cd:85:ee:7d:56:c1:e0:e6:21:25:31:2f:50:d3: 36:f2:80:4b:52:40:ca:48:95:bb:03:a2:2a:34:6c: 6a:e9:41:b2:bd:77:3a:86:f8:0c:6e:03:92:57:d6: 40:a5:d5:03:2a:4d:f2:66:6d:fd:42:36:62:85:38: 66:b9:06:2a:f2:cd:42:ff:61:c7:16:a5:43:c9:be: 93:39:a1:76:c4:84:93:f1:4b:6c:fd:eb:d5:df:35: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7B:D0:CB:39:92:C5:0D:9C:FA:E4:CA:2D:FD:C3:C1:04:3B:B0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:06:f1:52:84:ab:eb:f3:42:b1:0d:d7:8e:76:b4:7b:03:12: dd:f6:a2:04:fb:2e:a3:b6:b4:69:dc:d7:91:48:a5:84:15:3e: 2e:a8:38:06:73:ec:2a:12:0a:27:11:de:91:67:cb:94:8f:96: e4:b9:90:f4:5e:fd:44:ca:4c:8f:a9:64:b4:c2:d7:13:d7:ee: 17:6d:db:94:d3:ea:be:02:21:01:e8:63:01:9e:ef:fd:0c:62: d3:7b:cd:21:4a:c3:04:90:17:5e:21:b7:0c:13:24:c1:e7:dd: f9:17:16:50:21:46:b2:44:67:d4:ca:81:e3:2c:bf:a5:34:3f: d3:81:08:6f:4c:a5:15:4b:85:bb:63:96:f4:c6:ed:74:f2:34: 51:25:09:ed:37:51:7c:10:45:1c:3b:24:2e:88:45:21:f2:d4: 99:2c:03:f8:5b:91:4d:7e:40:db:86:32:ea:42:a2:f8:35:b5: aa:33:13:0e:47:80:46:75:8f:32:b6:b3:2f:cf:fc:fe:09:f3: 6a:aa:d1:fa:3b:bc:60:75:f3:7c:21:25:62:ad:0d:92:de:8f: 17:da:6e:70:73:ea:f4:16:8f:ef:bd:79:1b:87:57:1d:65:1c: a6:29:d5:f7:37:7c:3b:0b:06:64:b5:3e:ca:d0:b2:ca:56:45: 1f:48:c6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu5oqmHYoqvoosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk OWIzMDg2NTUtOGRkMS00ZmRiLWFmYjUtMTA1MGQxZDMxYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmvxktJj/YHGcyT46XMudwFbHKYP/HTXX0cZ y7DCGEddtaIgC6q+AVSZu2PyOHlgQp9aevZFJYpKYyjoJgU5uztO0K6LfI6/bBGl bnISyxK7HEe7mfeoAJiTG5t+jvlPkZcHFhFKEL78loVJhdWo3IJo7WBmepYAu4Rh ORtg72wRAolH0+m3E1Krj0Q+ZadFr1sbvEjDu+cLabx8sJRfoQj1z8OxzYXufVbB 4OYhJTEvUNM28oBLUkDKSJW7A6IqNGxq6UGyvXc6hvgMbgOSV9ZApdUDKk3yZm39 QjZihThmuQYq8s1C/2HHFqVDyb6TOaF2xIST8Uts/evV3zVy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV70Ms5ksUNnPrkyi39w8EEO7DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOThjYjAwYzMtNTA5ZC0z MDA0LWI5ZDMtNjk4NGEwZTViMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4G8VKEq+vzQrEN1452tHsDEt32ogT7LqO2tGnc15FIpYQVPi6oOAZz 7CoSCicR3pFny5SPluS5kPRe/UTKTI+pZLTC1xPX7hdt25TT6r4CIQHoYwGe7/0M YtN7zSFKwwSQF14htwwTJMHn3fkXFlAhRrJEZ9TKgeMsv6U0P9OBCG9MpRVLhbtj lvTG7XTyNFElCe03UXwQRRw7JC6IRSHy1JksA/hbkU1+QNuGMupCovg1taozEw5H gEZ1jzK2sy/P/P4J82qq0fo7vGB183whJWKtDZLejxfabnBz6vQWj++9eRuHVx1l HKYp1fc3fDsLBmS1PsrQsspWRR9Ixig= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:25 2025 by rpki-client