$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b43a0d41-6746-30f4-b457-98d8e23a05f5.roa File: b43a0d41-6746-30f4-b457-98d8e23a05f5.roa (raw, json) Hash identifier: VMDaEd8HELU2svRC1T3LP3tIShoXkAYdklDw2RRf4vg= Subject key identifier: B7:84:B6:4C:8C:29:DF:A6:EE:4C:0B:DD:66:29:BB:1E:47:AC:D4:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EAECEAAF764D16F9A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b43a0d41-6746-30f4-b457-98d8e23a05f5.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396544 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ea:ec:ea:af:76:4d:16:f9:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=16d15852-6697-40f2-aaef-aba17c65f966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:a8:39:cd:0e:f9:87:67:cc:0c:4f:03:d8: 5e:47:d8:52:05:19:fa:8c:58:81:c1:78:f9:92:64: 53:d3:49:89:69:b7:d1:71:dd:e7:66:15:8d:c3:a8: 98:6b:1d:8c:bf:50:f4:4e:21:6a:d6:d6:f2:2f:96: 5c:2e:19:bf:cf:98:00:89:6e:ee:02:97:1b:23:a1: ed:41:e3:e1:a7:24:47:b1:cf:e2:c4:63:74:e4:20: 6b:99:d4:d3:dc:b2:0b:bc:b0:6e:e9:96:f6:04:75: 7c:44:16:42:a5:02:38:fb:d4:72:d7:23:9f:c4:e6: 86:5c:01:5e:51:88:cc:ce:4b:20:c7:19:ca:84:67: 1b:35:d7:54:fc:a3:d3:d9:3f:1e:6c:55:78:35:e5: 85:ea:33:5a:97:1c:8b:e1:d2:91:8e:e5:76:36:dc: 77:51:05:2f:83:48:30:c3:f0:8e:49:a0:c7:29:9a: 9b:1d:9c:96:6d:69:0b:48:a2:d2:9a:4d:38:08:99: 70:75:c0:2b:62:6e:f7:31:d2:40:52:18:40:fb:db: 73:aa:95:7c:b5:25:04:00:1d:c1:2a:d1:2a:81:65: 84:33:e0:82:e5:3f:07:ce:1a:ce:69:cd:d2:7f:82: fa:f8:6c:be:28:03:da:ff:4d:72:0d:d4:ac:cb:76: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:84:B6:4C:8C:29:DF:A6:EE:4C:0B:DD:66:29:BB:1E:47:AC:D4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b43a0d41-6746-30f4-b457-98d8e23a05f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:72:ea:54:7b:13:18:2e:a7:af:ce:53:d9:aa:5a:9d:03:68: dd:db:78:35:75:e9:47:24:4c:a0:a2:e5:61:72:f7:a7:73:1e: a5:9d:17:0e:d5:68:ac:2c:39:e3:60:64:27:72:e8:3d:7f:09: 3f:43:25:5a:a8:0e:25:cc:6e:9b:e3:14:e1:56:a1:ca:a2:76: 84:6e:b1:aa:f8:17:b8:e4:63:c3:1a:e0:46:78:66:de:38:bf: be:49:71:a7:8a:c3:fb:49:f5:47:61:4b:4e:14:76:9a:95:0a: 56:4c:a3:1f:60:9c:ab:98:ed:d8:28:8b:44:23:8c:02:10:61: 0f:0c:1c:c3:d4:7f:c7:32:95:26:3a:8c:b8:0e:52:ee:c3:31: d5:29:f1:4e:79:78:9c:f9:ad:02:4e:f3:5e:64:7b:2f:43:06: 51:74:40:43:c1:94:8f:05:d8:d7:13:73:23:b8:c7:b3:8f:c1: 59:b0:d5:0e:06:aa:8e:80:47:27:5d:a6:27:3a:ea:a6:92:70: 70:9f:53:dd:77:ed:eb:b6:bb:4e:9e:c2:6a:4c:a5:65:fe:63: 3e:59:68:c5:e3:c4:80:7d:7d:34:8c:83:03:ee:e0:c3:07:5f: 19:47:24:0c:cc:5a:4f:44:2e:d8:65:d8:85:4b:80:a9:80:2b: 8e:42:00:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYurs6q92TRb5poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MTZkMTU4NTItNjY5Ny00MGYyLWFhZWYtYWJhMTdjNjVmOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRSoOc0O+YdnzAxPA9heR9hSBRn6jFiBwXj5 kmRT00mJabfRcd3nZhWNw6iYax2Mv1D0TiFq1tbyL5ZcLhm/z5gAiW7uApcbI6Ht QePhpyRHsc/ixGN05CBrmdTT3LILvLBu6Zb2BHV8RBZCpQI4+9Ry1yOfxOaGXAFe UYjMzksgxxnKhGcbNddU/KPT2T8ebFV4NeWF6jNalxyL4dKRjuV2Ntx3UQUvg0gw w/COSaDHKZqbHZyWbWkLSKLSmk04CJlwdcArYm73MdJAUhhA+9tzqpV8tSUEAB3B KtEqgWWEM+CC5T8HzhrOac3Sf4L6+Gy+KAPa/01yDdSsy3ZMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeEtkyMKd+m7kwL3WYpux5HrNSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjQzYTBkNDEtNjc0Ni0z MGY0LWI0NTctOThkOGUyM2EwNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhy6lR7Exgup6/OU9mqWp0DaN3beDV16UckTKCi5WFy96dzHqWdFw7V aKwsOeNgZCdy6D1/CT9DJVqoDiXMbpvjFOFWocqidoRusar4F7jkY8Ma4EZ4Zt44 v75JcaeKw/tJ9UdhS04UdpqVClZMox9gnKuY7dgoi0QjjAIQYQ8MHMPUf8cylSY6 jLgOUu7DMdUp8U55eJz5rQJO815key9DBlF0QEPBlI8F2NcTcyO4x7OPwVmw1Q4G qo6ARyddpic66qaScHCfU9137eu2u06ewmpMpWX+Yz5ZaMXjxIB9fTSMgwPu4MMH XxlHJAzMWk9ELthl2IVLgKmAK45CAJY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:52 2025 by rpki-client