$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a83be03d-163d-39b3-baa6-1205e0fc55ad.roa File: a83be03d-163d-39b3-baa6-1205e0fc55ad.roa (raw, json) Hash identifier: bNOis+qA9TDIjugy263zSfsx15dwLZAZNXOxTykR/sE= Subject key identifier: 8E:A6:98:E7:91:CB:B8:17:04:D7:52:86:0D:95:C6:91:26:54:27:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EC22FF0E176CAB774F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a83be03d-163d-39b3-baa6-1205e0fc55ad.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396592 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:22:ff:0e:17:6c:ab:77:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=0cbf12a6-9a00-4054-a1f6-58985f29b046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e5:77:1b:4b:6a:bb:28:c2:3c:e9:26:98:00: d0:b1:84:13:2a:75:1f:ad:d4:50:af:6c:e1:49:b8: 47:d4:d0:c9:9a:0b:00:fa:9f:66:5e:d7:00:99:f7: 28:23:05:da:f9:e2:00:42:71:cb:d6:95:a6:01:fb: 84:47:f1:45:9d:20:31:9e:f9:f4:51:eb:0d:d3:bd: 1d:43:ef:73:5e:27:ad:36:9a:8f:bf:83:b7:cd:4f: 21:9f:8b:83:86:71:6c:16:01:f0:6c:7d:d1:84:e3: 3a:38:c1:57:a7:79:69:4b:14:eb:59:50:68:6b:8c: fa:48:d1:4b:f8:38:06:8d:4b:0c:91:7d:84:90:3a: 49:d4:31:91:e2:0e:dc:f7:72:ab:2c:0a:74:2b:c8: 0a:77:e8:c7:c4:6b:97:47:7d:63:b3:7f:3a:b0:5e: 11:c4:59:44:0c:7f:57:92:a1:e4:c4:a3:a5:bb:11: f0:45:99:f1:5d:7c:3b:31:fb:9d:db:75:b9:72:89: 91:ed:76:8b:8f:3a:d3:20:7b:21:15:9b:87:e0:9e: a0:9b:07:2c:17:19:1a:01:34:2b:0c:af:72:9e:8d: 01:68:31:91:13:45:77:6b:d7:5a:1e:3a:3e:2d:48: b4:8c:ae:25:21:ae:ac:66:f0:7a:55:6b:43:1a:04: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:98:E7:91:CB:B8:17:04:D7:52:86:0D:95:C6:91:26:54:27:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a83be03d-163d-39b3-baa6-1205e0fc55ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:99:07:b8:76:fb:23:4a:29:d3:5c:61:00:f8:2f:c5:6b:76: 05:4b:bb:1a:76:39:44:8d:ba:06:94:c3:c6:02:6d:96:20:b0: fe:8e:93:68:8d:22:ee:4e:22:ba:4f:48:ce:05:d4:10:29:95: 75:ff:5a:f5:7e:f6:db:77:95:37:16:12:d4:cf:f8:e8:95:40: 78:f4:46:7d:42:b4:ea:d3:15:ea:7e:40:a9:36:5b:3b:e2:ee: 87:c8:96:7b:55:ec:6e:59:e2:02:e1:fa:ab:7b:58:c3:81:d9: e3:10:54:16:59:ce:b0:1d:54:7f:a1:ad:40:dc:97:ea:85:11: 29:01:0b:e7:9f:78:70:51:68:cc:2b:80:1f:90:bf:98:6b:5d: eb:2d:12:4d:d5:e0:94:a8:32:7c:51:1c:42:fc:27:15:aa:39: 64:77:3b:eb:d8:42:e9:b4:0d:f9:cd:b5:db:45:74:f9:7c:14: ee:8e:d8:33:95:29:59:1a:a4:de:f4:1a:ac:79:f8:16:d1:43: e2:8a:78:2b:6a:30:1a:01:0f:f8:7d:f2:9e:bb:a7:91:b9:ea: cb:3f:ad:a2:08:81:f2:31:f7:ba:90:52:9c:0a:90:79:21:f2: b5:c1:5e:d7:4a:fe:48:26:d9:6e:1c:b1:f1:4c:f9:ba:e4:56: ca:0a:40:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuwi/w4XbKt3TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk MGNiZjEyYTYtOWEwMC00MDU0LWExZjYtNTg5ODVmMjliMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOV3G0tquyjCPOkmmADQsYQTKnUfrdRQr2zh SbhH1NDJmgsA+p9mXtcAmfcoIwXa+eIAQnHL1pWmAfuER/FFnSAxnvn0UesN070d Q+9zXietNpqPv4O3zU8hn4uDhnFsFgHwbH3RhOM6OMFXp3lpSxTrWVBoa4z6SNFL +DgGjUsMkX2EkDpJ1DGR4g7c93KrLAp0K8gKd+jHxGuXR31js386sF4RxFlEDH9X kqHkxKOluxHwRZnxXXw7Mfud23W5comR7XaLjzrTIHshFZuH4J6gmwcsFxkaATQr DK9yno0BaDGRE0V3a9daHjo+LUi0jK4lIa6sZvB6VWtDGgQBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6mmOeRy7gXBNdShg2VxpEmVCexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgzYmUwM2QtMTYzZC0z OWIzLWJhYTYtMTIwNWUwZmM1NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImZB7h2+yNKKdNcYQD4L8VrdgVLuxp2OUSNugaUw8YCbZYgsP6Ok2iN Iu5OIrpPSM4F1BAplXX/WvV+9tt3lTcWEtTP+OiVQHj0Rn1CtOrTFep+QKk2Wzvi 7ofIlntV7G5Z4gLh+qt7WMOB2eMQVBZZzrAdVH+hrUDcl+qFESkBC+efeHBRaMwr gB+Qv5hrXestEk3V4JSoMnxRHEL8JxWqOWR3O+vYQum0DfnNtdtFdPl8FO6O2DOV KVkapN70Gqx5+BbRQ+KKeCtqMBoBD/h98p67p5G56ss/raIIgfIx97qQUpwKkHkh 8rXBXtdK/kgm2W4csfFM+brkVsoKQMw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:14 2025 by rpki-client