$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa File: c9abc068-7edc-39ad-ba76-b94baf924d42.roa (raw, json) Hash identifier: AqEPyhSzPcPV2CcM+JuT12bFGTU06zOiHV4ADXvo0ok= Subject key identifier: D4:91:38:09:ED:AD:95:D8:07:89:2C:DD:A8:C8:1C:DE:D4:14:67:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ED29E64D2DEEAF03F608 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 397202 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:29:e6:4d:2d:ee:af:03:f6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=7dfeb4ee-fabe-44c7-a90d-3f744d0454aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:32:97:73:98:20:44:84:4f:43:af:cb:c3: 48:3a:23:30:1d:ce:f8:ec:6c:28:54:1a:60:33:42: 52:ec:45:d9:2d:bf:db:62:f1:42:81:d4:69:43:20: 79:2c:f0:8f:31:9c:57:5f:5e:6d:c7:db:ff:13:b4: 99:23:c3:e9:55:81:3e:45:7d:d5:d9:ec:08:2b:45: f6:46:a8:97:b2:05:2c:f2:17:f7:07:17:70:e1:f1: 6a:b1:59:68:c6:e9:ab:76:56:46:3c:b4:05:3a:c1: a2:70:3e:4c:75:9a:3c:a2:08:5f:30:43:35:92:7f: 9c:f1:58:28:45:e3:1f:76:9e:61:16:07:93:8a:01: 02:e9:44:16:ff:a9:8b:ae:7d:2b:91:db:5d:c2:f6: f3:27:e9:70:aa:10:7e:4d:d5:6a:d5:d4:d9:b7:aa: 60:f8:c7:e6:b8:2d:dc:62:55:70:e3:5d:12:cc:be: 7e:9a:81:51:46:8a:64:60:72:6e:e1:a7:91:38:29: 52:5a:71:b6:e8:32:fa:fb:a5:d0:49:dd:af:9f:34: b0:31:03:42:f1:39:ba:6b:e0:32:13:ae:dd:1c:45: b8:80:29:8b:44:c6:e1:97:7a:73:c9:ab:7e:e8:ba: 09:78:d8:73:fa:f9:ed:c0:8f:b5:87:a0:cc:2e:c8: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:91:38:09:ED:AD:95:D8:07:89:2C:DD:A8:C8:1C:DE:D4:14:67:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:81:ec:51:84:46:42:c1:fb:8e:a2:fc:50:a0:b4:12:2f:cf: ea:b7:98:09:1c:38:4d:a6:af:27:2f:b4:4b:62:ec:dc:60:24: 4b:ba:8a:c9:45:c9:a1:af:2d:99:48:e2:84:a2:86:4d:d1:a7: 08:52:5f:d7:af:ac:ac:66:31:47:cc:d0:c2:43:c9:7b:94:e5: 61:2e:82:da:51:4e:4d:85:70:c2:46:e7:4b:cc:ae:fe:42:c3: e5:52:eb:6e:98:c6:00:fc:4a:23:4b:a0:9b:22:7e:e9:5c:30: 32:cb:e8:b7:0a:65:9b:5a:eb:02:51:fa:62:8f:e8:9c:c0:c5: 9f:35:f9:f7:98:df:48:b0:e1:30:eb:33:89:f6:76:f8:fb:bd: 92:94:93:06:14:1d:ae:90:3e:06:2d:3c:96:cd:ef:f9:fd:40: bf:f2:e2:90:7b:4d:ed:ea:40:10:89:6e:55:da:2c:93:8c:66: 81:df:a4:83:9c:d8:62:79:55:4e:b9:f2:40:a6:32:59:13:75: c2:0b:8f:5c:11:94:f3:c1:41:df:ad:a8:f3:d7:5c:7a:c9:ef: bb:fd:d3:5e:0f:de:b4:e8:92:7b:de:c1:7a:06:50:0c:7d:a2: 4b:3f:10:c2:fd:36:1a:f5:6e:4b:a9:47:fa:86:e4:21:61:b7: a2:75:8d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu0p5k0t7q8D9ggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk N2RmZWI0ZWUtZmFiZS00NGM3LWE5MGQtM2Y3NDRkMDQ1NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsyl3OYIESET0Ovy8NIOiMwHc747GwoVBpg M0JS7EXZLb/bYvFCgdRpQyB5LPCPMZxXX15tx9v/E7SZI8PpVYE+RX3V2ewIK0X2 RqiXsgUs8hf3Bxdw4fFqsVloxumrdlZGPLQFOsGicD5MdZo8oghfMEM1kn+c8Vgo ReMfdp5hFgeTigEC6UQW/6mLrn0rkdtdwvbzJ+lwqhB+TdVq1dTZt6pg+MfmuC3c YlVw410SzL5+moFRRopkYHJu4aeROClSWnG26DL6+6XQSd2vnzSwMQNC8Tm6a+Ay E67dHEW4gCmLRMbhl3pzyat+6LoJeNhz+vntwI+1h6DMLsiOswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSROAntrZXYB4ks3ajIHN7UFGfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzlhYmMwNjgtN2VkYy0z OWFkLWJhNzYtYjk0YmFmOTI0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByB7FGERkLB+46i/FCgtBIvz+q3mAkcOE2mrycvtEti7NxgJEu6islF yaGvLZlI4oSihk3RpwhSX9evrKxmMUfM0MJDyXuU5WEugtpRTk2FcMJG50vMrv5C w+VS626YxgD8SiNLoJsifulcMDLL6LcKZZta6wJR+mKP6JzAxZ81+feY30iw4TDr M4n2dvj7vZKUkwYUHa6QPgYtPJbN7/n9QL/y4pB7Te3qQBCJblXaLJOMZoHfpIOc 2GJ5VU658kCmMlkTdcILj1wRlPPBQd+tqPPXXHrJ77v9014P3rToknvewXoGUAx9 oks/EML9Nhr1bkupR/qG5CFht6J1jY8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:27 2025 by rpki-client