$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa File: ba1a1a16-ef0f-310f-8aef-e850123604ed.roa (raw, json) Hash identifier: dmxCPjCH7rjhSWPopWcTfHOWyPEqWXJYWhrO87stKq0= Subject key identifier: 26:4B:3A:57:17:61:7C:98:BF:FA:98:DF:28:33:7C:D7:47:28:52:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EEA4D5E6471C3429AAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396617 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:a4:d5:e6:47:1c:34:29:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=1d39bbb3-6a0c-42d7-bc4c-9035898c04aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:ea:1e:34:80:2a:23:4d:7d:50:d1:74:f6: fc:cf:70:7d:54:51:64:20:2b:7f:e3:3a:eb:05:8b: 43:ca:b6:83:48:5a:d4:da:10:78:6e:c4:c7:4c:2e: db:f4:6d:4d:91:15:9a:e1:cb:8f:f8:b4:b2:b7:8c: 21:3e:01:c6:9f:82:4b:24:cb:58:34:60:37:11:03: 90:58:03:1d:d0:a0:9e:cc:b2:38:18:5d:0e:77:23: 09:5c:a7:db:9d:a7:62:9a:8d:ed:5a:1d:19:30:18: 8e:d6:17:f9:e4:da:e8:36:93:6c:48:8c:8c:e4:8d: 1f:2e:25:1e:8b:94:d9:0d:e2:83:15:26:6e:b3:72: 77:35:f5:f7:02:4e:31:e9:db:19:4f:c1:2c:f3:6b: 79:c9:f1:b4:b4:4b:55:89:bb:6b:e9:ca:21:da:50: 57:f3:6e:1d:02:bc:b7:7d:b8:5b:59:f7:0b:e8:e3: 36:99:eb:5f:57:09:68:10:8d:1a:5a:3e:36:c6:e6: e0:7b:a3:f8:8e:cc:81:37:ed:ba:cf:5d:bc:56:45: e7:8e:38:32:86:42:41:c4:66:6b:18:3d:49:92:d6: d8:a9:a2:18:6f:ec:d7:45:d0:80:b5:de:3b:37:80: 44:17:84:42:91:4a:16:cd:63:a9:b5:ba:81:74:58: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4B:3A:57:17:61:7C:98:BF:FA:98:DF:28:33:7C:D7:47:28:52:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cf:b3:14:d5:46:9b:59:87:a2:bb:ae:19:7f:a7:31:ed:f1: fb:f0:70:7a:ce:07:d2:93:17:2a:9a:57:c2:6b:14:0a:02:97: 73:8c:ce:fc:d5:74:2b:b5:30:39:60:d1:16:8e:7f:02:c7:14: 09:03:67:ff:db:51:fa:0a:9f:08:7e:df:d3:2e:9a:ab:af:c7: 91:71:83:5b:69:ff:e2:c2:04:83:53:a5:97:58:99:4f:6d:48: 21:ef:de:99:00:6a:68:a6:41:a3:65:79:d6:38:6d:58:b9:01: bd:52:ab:49:59:02:59:6e:99:a4:45:41:5a:92:eb:5e:89:c8: 77:0b:1e:68:0f:1e:10:68:2d:a1:e2:89:4b:bd:e9:ab:6b:8d: 7f:07:1d:f3:8d:c7:0f:9c:b3:31:e1:d0:e0:c1:0a:60:a3:48: 39:6e:82:aa:09:a7:7a:15:10:93:11:ae:b9:ff:1b:45:2c:31: 57:2e:29:ee:65:3a:c8:cf:c1:00:8b:0b:3a:d1:38:fa:93:bb: d7:76:c9:61:a3:15:a6:2c:e7:9c:cb:7b:c6:09:09:00:8d:b7: 97:f6:5b:ac:46:9c:6a:c4:ac:fa:ca:32:69:bf:8c:15:59:cb: 4a:1e:77:b2:0e:64:a6:1c:56:99:63:49:b3:40:3d:65:2d:3b: 16:18:80:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu6k1eZHHDQpqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk MWQzOWJiYjMtNmEwYy00MmQ3LWJjNGMtOTAzNTg5OGMwNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aHqHjSAKiNNfVDRdPb8z3B9VFFkICt/4zrr BYtDyraDSFrU2hB4bsTHTC7b9G1NkRWa4cuP+LSyt4whPgHGn4JLJMtYNGA3EQOQ WAMd0KCezLI4GF0OdyMJXKfbnadimo3tWh0ZMBiO1hf55NroNpNsSIyM5I0fLiUe i5TZDeKDFSZus3J3NfX3Ak4x6dsZT8Es82t5yfG0tEtVibtr6coh2lBX824dAry3 fbhbWfcL6OM2metfVwloEI0aWj42xubge6P4jsyBN+26z128VkXnjjgyhkJBxGZr GD1JktbYqaIYb+zXRdCAtd47N4BEF4RCkUoWzWOptbqBdFiY0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZLOlcXYXyYv/qY3ygzfNdHKFJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmExYTFhMTYtZWYwZi0z MTBmLThhZWYtZTg1MDEyMzYwNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITPsxTVRptZh6K7rhl/pzHt8fvwcHrOB9KTFyqaV8JrFAoCl3OMzvzV dCu1MDlg0RaOfwLHFAkDZ//bUfoKnwh+39Mumquvx5Fxg1tp/+LCBINTpZdYmU9t SCHv3pkAamimQaNledY4bVi5Ab1Sq0lZAllumaRFQVqS616JyHcLHmgPHhBoLaHi iUu96atrjX8HHfONxw+cszHh0ODBCmCjSDlugqoJp3oVEJMRrrn/G0UsMVcuKe5l OsjPwQCLCzrROPqTu9d2yWGjFaYs55zLe8YJCQCNt5f2W6xGnGrErPrKMmm/jBVZ y0oed7IOZKYcVpljSbNAPWUtOxYYgHo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:20 2025 by rpki-client