$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa File: b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa (raw, json) Hash identifier: gGbVSXSplx/LqBMwEcgBgOKpxOItocvwg88qDGBTBYc= Subject key identifier: D6:26:A1:58:48:2F:6B:28:95:08:CA:01:34:E9:FB:7C:4A:38:30:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EFB1381E6E04420AF680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa Signing time: Thu 17 Jul 2025 12:33:17 +0000 ROA not before: Thu 17 Jul 2025 12:33:17 +0000 ROA not after: Wed 15 Oct 2025 12:33:17 +0000 asID: 396542 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:b1:38:1e:6e:04:42:0a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:17 2025 GMT Not After : Oct 15 12:33:17 2025 GMT Subject: CN=31d9048e-bb61-4c46-a6fe-59d07ef15f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:a9:e9:26:d5:7c:6d:ed:26:90:0c:eb:84: db:e0:71:91:54:78:65:8b:72:d2:46:96:6a:94:82: 4f:e1:ce:12:8e:d5:64:5a:6e:d1:96:61:0b:ae:bc: 1a:3d:4d:64:a0:26:34:af:93:bf:62:10:34:c0:ef: 39:42:b7:4e:10:06:ab:0d:ab:e7:3a:5f:d6:06:84: 38:69:a5:54:37:66:81:c3:64:90:64:f5:68:55:8d: fd:bb:3c:ae:ca:a0:d9:20:99:b3:a6:df:46:41:25: 97:31:65:94:62:39:75:2b:87:56:eb:f4:c1:e6:2f: 1f:db:44:40:37:53:55:70:1d:05:bc:f6:8e:8b:26: 1c:b7:78:c4:e7:8b:77:2e:70:07:6f:a4:03:44:09: 17:a2:4f:f3:56:f5:19:f3:62:bf:0a:ed:ee:1f:39: f4:69:b5:df:e2:af:00:77:43:56:7e:34:a3:39:41: 84:c1:71:b3:2a:9c:0d:67:5f:29:17:38:e5:1c:18: 76:d6:49:b2:8e:89:66:fa:66:f5:cc:06:cd:17:d7: 7e:16:66:62:04:ad:bc:b5:db:5d:e6:bb:cb:92:9c: a0:ca:ee:1a:e5:d4:e9:ce:5f:2c:36:9e:cc:70:56: df:8f:20:8a:bb:86:07:ce:68:98:98:12:97:02:04: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:A1:58:48:2F:6B:28:95:08:CA:01:34:E9:FB:7C:4A:38:30:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ec:50:ae:0e:2f:bf:44:02:bb:93:17:d9:03:b5:fd:d6:b7: f0:eb:98:54:25:31:03:cc:4f:26:f0:93:f8:2c:f8:a8:36:c8: 33:9a:8e:a4:be:cf:5f:ec:0d:ca:4a:ac:b5:74:72:61:b3:0d: 78:aa:e5:7e:cb:7b:51:6e:46:7f:81:70:2b:c5:00:e9:f8:f2: f4:f0:d7:76:82:84:d4:46:57:a4:0c:1f:47:53:a2:20:e4:e3: 65:6d:b3:14:09:98:4f:5b:9c:3f:bb:e0:19:fc:e1:df:63:8a: e8:f9:b9:ee:db:19:69:fd:53:00:6f:8a:62:11:73:38:9b:88: 82:68:ed:b7:21:3f:29:87:bd:f1:42:f1:61:d8:6c:1e:c7:04: 42:36:9a:02:18:e3:bd:f2:93:50:1b:5c:3b:59:2b:5d:87:18: f1:97:f8:50:d0:19:27:2e:16:02:38:8c:5c:9e:eb:07:87:89: 3f:50:5f:02:97:90:f9:67:98:b4:8a:6a:bb:b6:ef:47:02:90: 41:8b:e2:a6:73:ec:f2:8e:03:17:da:04:82:bc:bd:30:1a:80: 75:e8:4c:cd:49:47:4a:24:e5:3f:a2:9a:1b:8e:4c:fe:74:a6: c0:f0:4d:88:9b:f7:f6:9a:99:72:70:12:f9:38:f2:06:b8:c1: 3b:05:89:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu+xOB5uBEIK9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxN1oXDTI1MTAxNTEyMzMxN1owLzEtMCsGA1UEAxMk MzFkOTA0OGUtYmI2MS00YzQ2LWE2ZmUtNTlkMDdlZjE1ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdyp6SbVfG3tJpAM64Tb4HGRVHhli3LSRpZq lIJP4c4SjtVkWm7RlmELrrwaPU1koCY0r5O/YhA0wO85QrdOEAarDavnOl/WBoQ4 aaVUN2aBw2SQZPVoVY39uzyuyqDZIJmzpt9GQSWXMWWUYjl1K4dW6/TB5i8f20RA N1NVcB0FvPaOiyYct3jE54t3LnAHb6QDRAkXok/zVvUZ82K/Cu3uHzn0abXf4q8A d0NWfjSjOUGEwXGzKpwNZ18pFzjlHBh21kmyjolm+mb1zAbNF9d+FmZiBK28tdtd 5rvLkpygyu4a5dTpzl8sNp7McFbfjyCKu4YHzmiYmBKXAgRyoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYmoVhIL2solQjKATTp+3xKODA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlNTlmMGYtMzc1OS0z ODMzLTlhMDUtNzFjYzFiMWUxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7sUK4OL79EAruTF9kDtf3Wt/DrmFQlMQPMTybwk/gs+Kg2yDOajqS+ z1/sDcpKrLV0cmGzDXiq5X7Le1FuRn+BcCvFAOn48vTw13aChNRGV6QMH0dToiDk 42VtsxQJmE9bnD+74Bn84d9jiuj5ue7bGWn9UwBvimIRczibiIJo7bchPymHvfFC 8WHYbB7HBEI2mgIY473yk1AbXDtZK12HGPGX+FDQGScuFgI4jFye6weHiT9QXwKX kPlnmLSKaru270cCkEGL4qZz7PKOAxfaBIK8vTAagHXoTM1JR0ok5T+imhuOTP50 psDwTYib9/aamXJwEvk48ga4wTsFibI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:44 2025 by rpki-client