$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa File: b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa (raw, json) Hash identifier: 0oBtR0uIm54ue5lGUkyl9u38oiTI+HR9PBgX5wJZHTA= Subject key identifier: F1:45:B4:03:2D:57:54:0D:BE:14:CE:39:EC:05:EB:90:7B:89:CB:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E969D6FBBB2045E93558 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 397205 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:69:d6:fb:bb:20:45:e9:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=35227db5-92a9-4378-b7f4-c32e5c1d353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:b0:42:b1:ba:19:74:5b:2c:20:62:eb:e2: fa:d4:41:36:ea:48:b1:06:01:27:72:73:a9:17:33: 79:d8:b1:c9:04:81:4b:75:76:cf:3f:f4:51:44:dc: 92:5d:ee:53:59:8c:1b:52:18:de:16:5a:53:48:dd: 08:3c:63:d4:6c:95:50:9c:d2:c5:3a:b7:5f:04:c4: 31:60:21:cf:c8:82:a8:13:fd:72:83:4e:c7:74:d6: 6a:ea:d8:e9:af:9e:1e:d2:2e:a3:41:48:6c:11:7f: 71:10:db:4f:2a:c4:14:92:85:8b:8b:7b:0d:89:26: 99:b7:b5:f3:58:aa:ca:3d:2f:98:40:d5:c7:cb:87: 10:9f:a7:e6:89:bd:c0:cf:15:48:fb:9b:e3:fa:8b: 36:01:ce:ca:3c:c9:41:bc:72:42:43:af:db:eb:66: e9:6a:da:cb:4d:69:e3:65:93:f6:26:a9:fb:9c:b0: ea:1b:d7:d5:2f:58:32:dc:97:55:2a:b3:ac:10:d5: 0f:26:53:db:e8:b5:94:44:c2:ab:f2:16:ff:4c:ed: 27:6e:87:d9:64:75:5d:32:55:de:1c:5a:a9:cd:5e: 23:55:c5:aa:e3:47:d0:85:e5:53:12:dd:f1:c2:d2: c5:4e:e9:44:f0:ab:0c:2a:d7:c0:d2:2f:3f:3d:ae: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:B4:03:2D:57:54:0D:BE:14:CE:39:EC:05:EB:90:7B:89:CB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:57:49:bd:2a:bf:28:82:c3:55:75:4f:68:ec:ee:86:c3:2e: 63:4d:e4:d8:41:3e:7c:bb:92:9c:1f:f7:62:7c:48:d6:ea:32: 7c:b6:17:2a:7f:11:d3:56:d6:79:42:30:6b:0d:c8:ea:1a:9d: ff:a6:83:f4:9c:c6:86:cc:a7:53:45:f5:78:4c:eb:42:fb:71: ff:81:31:97:38:7a:d1:ae:4d:65:d8:88:3b:07:22:96:eb:92: 9c:00:a1:f0:6d:fd:98:04:fb:de:2e:2b:60:23:70:f9:37:4d: 28:cb:47:e4:66:53:cd:3c:d8:53:d6:2a:6c:f2:34:d9:4f:8a: 94:d9:34:7e:4f:8d:8d:cd:58:1f:50:b3:9b:c8:75:12:69:58: 9d:4a:ff:7b:23:57:87:6c:90:e5:18:51:b1:1a:21:61:3c:13: c6:90:10:a3:75:9b:ef:e1:d4:f1:49:72:86:0f:e3:75:77:65: 44:03:81:71:18:02:27:c5:4b:66:2a:d4:2d:b5:7c:04:f7:87: 96:0e:92:58:77:90:6b:67:7d:37:01:3c:8a:5c:95:76:fe:00: a5:25:a3:1f:95:93:3e:d1:89:f3:da:4d:a2:d7:4e:6f:e0:e0: 25:2e:19:14:11:5b:c1:d3:dd:7f:dd:98:09:8e:03:52:81:60: bf:2e:89:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYulp1vu7IEXpNVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk MzUyMjdkYjUtOTJhOS00Mzc4LWI3ZjQtYzMyZTVjMWQzNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYOwQrG6GXRbLCBi6+L61EE26kixBgEncnOp FzN52LHJBIFLdXbPP/RRRNySXe5TWYwbUhjeFlpTSN0IPGPUbJVQnNLFOrdfBMQx YCHPyIKoE/1yg07HdNZq6tjpr54e0i6jQUhsEX9xENtPKsQUkoWLi3sNiSaZt7Xz WKrKPS+YQNXHy4cQn6fmib3AzxVI+5vj+os2Ac7KPMlBvHJCQ6/b62bpatrLTWnj ZZP2Jqn7nLDqG9fVL1gy3JdVKrOsENUPJlPb6LWURMKr8hb/TO0nbofZZHVdMlXe HFqpzV4jVcWq40fQheVTEt3xwtLFTulE8KsMKtfA0i8/Pa6HAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFFtAMtV1QNvhTOOewF65B7icvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkY2QwNzAtMTVlNS0z ZmI1LWI0ZmMtNzQxNmU1YTVmN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpXSb0qvyiCw1V1T2js7obDLmNN5NhBPny7kpwf92J8SNbqMny2Fyp/ EdNW1nlCMGsNyOoanf+mg/ScxobMp1NF9XhM60L7cf+BMZc4etGuTWXYiDsHIpbr kpwAofBt/ZgE+94uK2AjcPk3TSjLR+RmU8082FPWKmzyNNlPipTZNH5PjY3NWB9Q s5vIdRJpWJ1K/3sjV4dskOUYUbEaIWE8E8aQEKN1m+/h1PFJcoYP43V3ZUQDgXEY AifFS2Yq1C21fAT3h5YOklh3kGtnfTcBPIpclXb+AKUlox+Vkz7RifPaTaLXTm/g 4CUuGRQRW8HT3X/dmAmOA1KBYL8uiYA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:54 2025 by rpki-client