$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa File: bd4efe0c-435b-364e-90b0-423af199d985.roa (raw, json) Hash identifier: 2WCXeDCrPissSi5JUkTvyMCZZXR3HzHsGIinVWgsiMA= Subject key identifier: F9:AA:D0:D7:7C:05:09:3D:20:A9:73:19:1C:A9:CC:5F:BC:7A:BC:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EB7C9B75733AB9367300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 397210 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:eb:7c:9b:75:73:3a:b9:36:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=769beef8-1015-4d52-bb57-0f3d61ec308a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:db:f7:02:c6:a5:65:6a:99:4e:a8:85:41:a2: 99:dd:df:2d:58:9d:ee:3a:56:89:2e:f4:95:5c:2e: 1a:8f:80:95:4b:4e:66:39:03:20:7a:19:6d:7d:d5: af:6c:5a:2c:21:8f:d8:c0:fc:d3:84:a3:7d:61:e5: a5:33:e2:cf:9d:e8:42:c6:c0:80:66:3e:48:d0:38: 01:b3:4c:52:55:85:ff:bc:ea:3d:55:ec:53:26:30: 93:e6:91:b4:38:47:0b:d8:60:64:de:b6:75:f3:88: 87:ba:67:5d:97:17:60:92:75:fa:7f:25:3e:d3:9a: 03:70:62:0f:bf:87:28:68:33:7d:ac:a5:65:c6:4f: 00:2d:95:a1:2b:44:3c:22:62:5f:b1:1d:f8:b3:1a: cd:f3:72:ba:e8:23:b2:bf:b8:12:49:41:cb:f9:15: d6:a3:5b:a5:fb:52:a5:1f:2f:45:b4:5b:86:47:66: 87:3c:65:b7:d5:1a:ac:d2:50:55:bf:4f:d8:9f:25: 8b:74:f2:95:70:5c:00:e2:7a:48:7a:52:ed:86:4b: b5:82:37:84:93:49:84:f7:de:69:bb:ba:11:a5:15: 89:55:9b:37:ad:76:51:75:75:53:df:31:d6:31:af: 0e:4c:fc:7e:6b:31:5b:5b:99:59:a2:a9:fb:d5:f8: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:D0:D7:7C:05:09:3D:20:A9:73:19:1C:A9:CC:5F:BC:7A:BC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5f:23:32:9e:07:2c:6a:e3:b8:15:87:02:14:0c:25:bf:42: e7:46:27:8c:19:5b:e8:47:e5:e4:20:32:99:c1:db:cd:a9:0a: 5c:0d:cc:10:56:4c:6a:88:ac:7d:c3:47:f4:f9:8a:6f:e1:2f: dc:f8:38:29:0a:a0:4f:cb:dd:b1:8e:28:6c:97:6d:ec:f8:ea: ee:1f:5c:01:6f:7d:f1:45:b5:93:4c:8e:98:1e:31:d0:ad:ca: 46:ec:33:ef:a8:af:0b:b6:c6:8e:df:99:e0:19:2c:6e:55:87: 8c:d4:00:c0:39:38:04:25:6f:f8:28:03:3b:b0:a8:69:f9:1b: 2a:78:26:16:54:20:76:38:73:83:44:d2:a0:e5:e7:e0:81:88: 4a:fa:22:83:8b:38:88:c4:1c:3f:97:1c:14:90:52:dd:d5:e5: 94:85:fc:c6:9b:10:c7:f5:ef:c2:5b:e3:f1:98:04:cd:cd:54: 3d:fd:41:96:18:d5:85:7b:a6:c7:50:d6:8f:6a:80:36:22:9b: 12:05:db:e5:b0:5f:0e:ea:58:55:7a:ff:1c:41:e2:49:8a:0f: ba:78:05:5e:4d:c5:89:fd:d7:7d:de:65:3e:b3:84:64:fa:3d: 04:a0:43:97:7f:0e:e5:e6:02:72:47:9f:a0:fc:df:3d:9b:5c: cd:55:db:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYut8m3VzOrk2cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk NzY5YmVlZjgtMTAxNS00ZDUyLWJiNTctMGYzZDYxZWMzMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNv3AsalZWqZTqiFQaKZ3d8tWJ3uOlaJLvSV XC4aj4CVS05mOQMgehltfdWvbFosIY/YwPzThKN9YeWlM+LPnehCxsCAZj5I0DgB s0xSVYX/vOo9VexTJjCT5pG0OEcL2GBk3rZ184iHumddlxdgknX6fyU+05oDcGIP v4coaDN9rKVlxk8ALZWhK0Q8ImJfsR34sxrN83K66COyv7gSSUHL+RXWo1ul+1Kl Hy9FtFuGR2aHPGW31Rqs0lBVv0/YnyWLdPKVcFwA4npIelLthku1gjeEk0mE995p u7oRpRWJVZs3rXZRdXVT3zHWMa8OTPx+azFbW5lZoqn71fhloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmq0Nd8BQk9IKlzGRypzF+8erwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ0ZWZlMGMtNDM1Yi0z NjRlLTkwYjAtNDIzYWYxOTlkOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBfIzKeByxq47gVhwIUDCW/QudGJ4wZW+hH5eQgMpnB282pClwNzBBW TGqIrH3DR/T5im/hL9z4OCkKoE/L3bGOKGyXbez46u4fXAFvffFFtZNMjpgeMdCt ykbsM++orwu2xo7fmeAZLG5Vh4zUAMA5OAQlb/goAzuwqGn5Gyp4JhZUIHY4c4NE 0qDl5+CBiEr6IoOLOIjEHD+XHBSQUt3V5ZSF/MabEMf178Jb4/GYBM3NVD39QZYY 1YV7psdQ1o9qgDYimxIF2+WwXw7qWFV6/xxB4kmKD7p4BV5NxYn9133eZT6zhGT6 PQSgQ5d/DuXmAnJHn6D83z2bXM1V218= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:41 2025 by rpki-client