$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae0f31f4-bd1a-3185-b0bf-0f1187faf271.roa File: ae0f31f4-bd1a-3185-b0bf-0f1187faf271.roa (raw, json) Hash identifier: 85PL3SDPFCrRy2mfYR9SB9Nk2zZTFgeGSCyzfepyouw= Subject key identifier: 87:37:C1:53:4F:1E:92:1C:24:EA:DF:2D:60:A2:13:6F:3C:FA:B7:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EAFB956459B78C8F9400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae0f31f4-bd1a-3185-b0bf-0f1187faf271.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396577 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:fb:95:64:59:b7:8c:8f:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=63cfdf68-9c4b-423a-9768-5f9ddbc07d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:d0:a9:a6:05:bb:ed:cd:c4:23:27:71:0e: ba:c0:84:cb:d1:87:6a:9f:43:6e:e8:fc:85:c6:00: b5:29:9f:83:9a:89:08:ff:3b:a8:85:e2:b5:fd:31: 9a:a9:8e:b9:df:ba:6d:6f:be:8d:c6:67:33:04:b7: bf:a3:44:04:23:d4:64:b9:b8:71:8b:c9:1e:a0:fb: e8:81:3a:b4:06:c5:86:04:e2:0c:1b:34:8a:89:b7: 15:9b:20:f1:87:90:61:49:28:33:00:5e:6f:f5:5d: 3a:27:40:2d:f2:21:eb:6a:3e:e4:fb:67:93:06:ae: 1b:28:fb:4b:e1:8b:31:47:74:74:5b:1a:d9:7f:92: c9:5d:32:d2:8f:34:0a:89:fd:20:3e:d4:c4:5d:54: ec:ee:66:4f:9d:5d:86:fd:14:77:24:5f:56:74:c4: 72:6b:73:10:5b:b6:ec:6d:b8:45:c5:ca:49:58:7e: 0e:e3:f2:7f:9d:ea:81:0a:b7:fa:73:80:80:ee:96: 20:d6:98:ae:3f:41:3d:01:5e:59:81:6d:33:e4:2c: 03:a6:35:69:bc:38:5b:dc:49:f5:8e:ff:66:5c:ce: 58:2d:15:b8:3c:f6:bc:64:c3:4d:fe:ba:7d:5a:1a: 62:b5:22:02:cc:03:21:6a:49:91:7c:bd:ba:a0:e3: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:37:C1:53:4F:1E:92:1C:24:EA:DF:2D:60:A2:13:6F:3C:FA:B7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae0f31f4-bd1a-3185-b0bf-0f1187faf271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e2:2a:eb:98:62:d3:1a:3a:a9:d5:e9:08:01:a4:df:17:5b: c2:6c:02:cb:2c:5a:e8:45:46:94:cb:b3:69:15:59:22:93:e9: 0f:81:e9:b2:da:07:2f:b8:02:c3:89:31:68:79:ae:dd:38:34: d4:76:60:4e:4d:a9:e3:8a:fd:81:39:f0:89:dd:1a:65:af:71: 1e:6e:7f:d8:3b:9e:42:d6:6d:f0:52:22:e2:89:f2:87:71:3a: f8:ff:32:98:9e:ef:84:8b:2c:5d:9c:28:9e:33:80:23:78:d4: 4c:40:ca:11:2c:fb:db:73:da:21:a7:34:93:ce:c1:f0:42:9a: 96:87:fc:53:ae:5b:eb:85:25:47:d2:ec:b8:b4:a9:96:dd:fc: 03:87:d7:5e:25:a7:b7:20:a7:14:87:63:fd:f6:e2:14:04:80: 10:17:4b:98:db:8a:0c:66:dc:2f:29:1f:ee:f9:77:63:e3:0e: e2:e3:91:52:f8:e7:12:14:f6:bd:aa:85:a0:a8:da:9d:58:db: 93:3e:6e:29:4e:35:d0:a7:73:6b:2a:2d:8a:05:ce:11:8b:df: 15:93:8b:7c:12:eb:2e:68:a8:b0:e8:9a:ff:b2:f8:97:05:33: 90:9e:4f:08:ea:42:89:8c:17:ce:9a:8a:f0:ec:90:5d:40:0d: fc:d6:9b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYur7lWRZt4yPlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NjNjZmRmNjgtOWM0Yi00MjNhLTk3NjgtNWY5ZGRiYzA3ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfQqaYFu+3NxCMncQ66wITL0Ydqn0Nu6PyF xgC1KZ+DmokI/zuoheK1/TGaqY6537ptb76NxmczBLe/o0QEI9Rkubhxi8keoPvo gTq0BsWGBOIMGzSKibcVmyDxh5BhSSgzAF5v9V06J0At8iHraj7k+2eTBq4bKPtL 4YsxR3R0WxrZf5LJXTLSjzQKif0gPtTEXVTs7mZPnV2G/RR3JF9WdMRya3MQW7bs bbhFxcpJWH4O4/J/neqBCrf6c4CA7pYg1piuP0E9AV5ZgW0z5CwDpjVpvDhb3En1 jv9mXM5YLRW4PPa8ZMNN/rp9WhpitSICzAMhakmRfL26oOMnQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc3wVNPHpIcJOrfLWCiE288+rd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWUwZjMxZjQtYmQxYS0z MTg1LWIwYmYtMGYxMTg3ZmFmMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTiKuuYYtMaOqnV6QgBpN8XW8JsAsssWuhFRpTLs2kVWSKT6Q+B6bLa By+4AsOJMWh5rt04NNR2YE5NqeOK/YE58IndGmWvcR5uf9g7nkLWbfBSIuKJ8odx Ovj/Mpie74SLLF2cKJ4zgCN41ExAyhEs+9tz2iGnNJPOwfBCmpaH/FOuW+uFJUfS 7Li0qZbd/AOH114lp7cgpxSHY/324hQEgBAXS5jbigxm3C8pH+75d2PjDuLjkVL4 5xIU9r2qhaCo2p1Y25M+bilONdCnc2sqLYoFzhGL3xWTi3wS6y5oqLDomv+y+JcF M5CeTwjqQomMF86aivDskF1ADfzWm/Y= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:28 2025 by rpki-client