$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa File: d3d0ed94-a94d-384b-a208-cd45356f874c.roa (raw, json) Hash identifier: /NcgSCUCBFXox6TXMHb/hDHF5Vq0Zu7/PDuhM4G4EA4= Subject key identifier: 9A:11:C2:EE:7D:F8:65:A7:13:4E:8B:F2:E0:07:86:B5:8D:34:75:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E88B127E0E73F69E7580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa Signing time: Thu 17 Jul 2025 12:33:13 +0000 ROA not before: Thu 17 Jul 2025 12:33:13 +0000 ROA not after: Wed 15 Oct 2025 12:33:13 +0000 asID: 36623 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e8:8b:12:7e:0e:73:f6:9e:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:13 2025 GMT Not After : Oct 15 12:33:13 2025 GMT Subject: CN=c1e63660-962e-498f-bb47-a5076f3a4e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:d5:4b:f7:0d:06:cd:4d:96:35:81:ab:74: 9d:50:59:eb:ac:be:41:b3:53:66:c0:7d:cf:8c:af: 83:02:cd:51:66:92:a0:fd:36:25:8c:49:f8:30:53: 59:d1:0c:9a:84:17:a6:1f:3a:fc:98:15:82:34:75: 50:37:5a:ba:ca:99:c9:11:81:f7:2c:ad:35:f3:51: e3:2a:a1:3b:e3:85:94:2c:db:8d:fe:13:93:64:da: 06:c4:d2:c7:dd:13:14:bf:37:36:d6:70:6d:fa:f6: cf:4e:b7:e0:db:91:53:4b:5b:03:d1:4c:f0:e0:b4: 15:61:8a:e3:67:11:0f:94:a3:3a:1f:36:44:c8:7f: 05:62:4a:d4:66:5a:56:7a:41:02:1f:90:24:60:e3: 7c:30:7a:07:5d:7c:56:08:77:be:89:1f:bd:38:73: da:b7:cc:9e:29:21:b2:cb:1e:67:ef:41:ad:51:69: e0:a7:e2:8d:3e:d4:ef:be:cd:26:11:67:f5:3e:1b: 58:98:07:25:ab:0d:2c:62:57:a6:40:0a:91:d3:52: 05:84:4d:26:0e:0c:30:da:dc:b2:57:1b:87:39:f0: 47:8b:ed:d0:d8:3f:b0:0a:7f:25:e9:c7:b0:58:7f: 69:89:83:09:4e:37:c7:30:eb:1c:43:0d:6b:11:fd: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:11:C2:EE:7D:F8:65:A7:13:4E:8B:F2:E0:07:86:B5:8D:34:75:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:46:45:fa:7f:69:b2:a9:fc:c0:16:11:80:a5:f8:0d:dc:ed: 77:e7:1b:f0:77:92:6d:92:49:25:85:6c:59:1f:a6:56:08:59: d4:2b:a0:ad:50:3b:a0:8f:87:c8:12:6c:77:10:78:9b:be:ef: 71:ca:e0:cc:45:97:01:59:4b:fb:69:7c:d8:70:cf:ee:8d:a7: b7:82:6a:20:7f:e8:42:b7:f9:0d:39:80:21:c9:44:ce:a2:b3: 73:c7:23:67:67:22:6e:7b:06:02:90:96:83:46:84:2a:ec:12: f6:61:c9:01:a0:e8:5b:2c:6d:c9:57:6d:e5:c0:62:cb:c2:8c: 33:b6:b8:9e:83:0a:5c:b9:d5:f0:53:84:d0:e0:0a:25:a2:93: 60:f9:09:63:5b:e5:1c:70:5e:8b:a0:0d:52:ae:fc:3b:da:65: 74:5f:91:28:7d:54:c2:d2:ef:69:3d:fc:d4:f9:18:0c:12:bc: 4f:be:8f:f4:df:7d:41:9a:a5:c1:ee:8a:9d:00:dd:50:69:76: 1f:c2:00:00:dc:e7:6f:52:95:00:92:6c:5e:eb:5c:0e:da:91: c0:ec:f1:41:61:31:59:84:e9:c3:2d:90:b0:f6:b0:f5:09:0e: 2f:ce:53:89:53:90:49:74:ec:56:e2:2f:63:55:4b:06:e5:d9: 06:73:47:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuiLEn4Oc/aedYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxM1oXDTI1MTAxNTEyMzMxM1owLzEtMCsGA1UEAxMk YzFlNjM2NjAtOTYyZS00OThmLWJiNDctYTUwNzZmM2E0ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5bVS/cNBs1NljWBq3SdUFnrrL5Bs1NmwH3P jK+DAs1RZpKg/TYljEn4MFNZ0QyahBemHzr8mBWCNHVQN1q6ypnJEYH3LK0181Hj KqE744WULNuN/hOTZNoGxNLH3RMUvzc21nBt+vbPTrfg25FTS1sD0Uzw4LQVYYrj ZxEPlKM6HzZEyH8FYkrUZlpWekECH5AkYON8MHoHXXxWCHe+iR+9OHPat8yeKSGy yx5n70GtUWngp+KNPtTvvs0mEWf1PhtYmAclqw0sYlemQAqR01IFhE0mDgww2tyy VxuHOfBHi+3Q2D+wCn8l6cewWH9piYMJTjfHMOscQw1rEf2+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoRwu59+GWnE06L8uAHhrWNNHXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkMGVkOTQtYTk0ZC0z ODRiLWEyMDgtY2Q0NTM1NmY4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlGRfp/abKp/MAWEYCl+A3c7XfnG/B3km2SSSWFbFkfplYIWdQroK1Q O6CPh8gSbHcQeJu+73HK4MxFlwFZS/tpfNhwz+6Np7eCaiB/6EK3+Q05gCHJRM6i s3PHI2dnIm57BgKQloNGhCrsEvZhyQGg6FssbclXbeXAYsvCjDO2uJ6DCly51fBT hNDgCiWik2D5CWNb5RxwXougDVKu/DvaZXRfkSh9VMLS72k9/NT5GAwSvE++j/Tf fUGapcHuip0A3VBpdh/CAADc529SlQCSbF7rXA7akcDs8UFhMVmE6cMtkLD2sPUJ Di/OU4lTkEl07FbiL2NVSwbl2QZzRxE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:38 2025 by rpki-client