$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa File: d8d294fa-38aa-3b74-ac08-7094c84a655c.roa (raw, json) Hash identifier: huPWrWTxu5epog4rzYXdlxvZiVL1j4lnKk5WU8ramwM= Subject key identifier: 60:9E:4A:88:C8:78:D8:B0:6D:84:F8:FC:5A:DD:5A:6F:9B:1C:A9:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EC79BADC09A57B87E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396586 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:79:ba:dc:09:a5:7b:87:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=be9c2a3a-0c24-4913-98b9-ea782a1b8204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:74:c4:69:07:b9:47:dc:fd:cc:aa:13:13: cb:32:82:c8:db:f8:b8:32:52:fa:63:8f:44:5e:73: c1:a7:60:ce:00:21:43:fd:b0:7f:b6:bb:6e:62:9e: 85:67:34:3b:00:3a:dc:d0:72:7a:43:b2:79:c5:86: 72:0c:67:a0:7e:82:1d:c9:01:fc:59:28:0d:97:ff: c9:8e:42:93:5c:0d:d1:e8:b8:b8:95:77:df:49:4c: 15:cf:d7:25:1b:8f:a6:cd:2b:a8:18:0a:32:44:f5: 89:6d:91:eb:c3:16:d8:63:de:03:ec:9e:85:a3:47: 7d:d5:80:46:76:d6:17:0f:ce:64:2c:34:21:44:62: 0f:c4:9e:17:73:b5:37:84:5e:70:82:75:b7:05:86: 3a:af:4a:ec:ea:cf:8d:23:18:a6:5d:18:65:50:4a: 62:f6:2c:2f:e5:11:00:8d:1d:23:4e:84:a5:d0:d9: 9d:c8:6e:e7:c9:13:f0:a6:58:bd:48:00:23:38:c0: f8:36:20:01:7f:c3:da:55:91:3b:1e:84:60:d8:7d: fb:f1:71:ba:6f:7d:cf:c7:6d:19:5d:a4:3f:f4:91: 86:03:a8:d2:0b:df:4e:61:7d:13:16:37:2e:1c:0d: cb:52:3c:63:fb:f7:3b:f0:7f:af:d6:5f:80:01:48: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9E:4A:88:C8:78:D8:B0:6D:84:F8:FC:5A:DD:5A:6F:9B:1C:A9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c5:cd:c9:c4:a2:0f:54:3d:ff:65:b5:4a:e1:60:b4:95:51: 2d:01:e2:1e:ae:a0:da:76:7d:7e:6c:38:ed:e9:10:21:71:17: 9b:3c:4c:56:90:11:39:a1:12:c2:f4:8e:b9:0e:e5:4b:ab:e9: 47:86:29:bf:84:c8:15:97:52:14:cd:c2:3c:0e:ce:8b:09:22: fe:40:d3:3e:f4:a7:8e:48:b9:9e:2f:a4:ad:43:5b:70:c5:f5: 25:ee:bb:6e:85:65:1d:88:c5:f9:89:9d:b8:47:9c:c7:2a:6a: 1b:56:6b:b2:bd:00:22:c7:1f:70:5b:ef:97:1f:a0:2d:4d:30: dd:80:0a:5e:c2:5f:e7:d9:34:82:ea:43:05:f6:19:7f:79:7f: d7:21:9c:c0:4e:a2:76:b7:4f:bc:8e:b9:1b:13:a8:9c:59:c2: d6:c7:bf:50:15:3d:0d:bb:2c:ba:d9:21:9f:b6:39:6e:41:d4: 25:e6:bb:b7:f4:a7:72:42:25:26:f4:fb:ef:ab:79:65:9e:92: ed:bf:3e:4f:04:be:91:44:e0:b1:6c:a4:80:77:c6:dd:07:f5: 9a:57:2a:40:c6:03:78:08:04:a0:48:53:06:33:b1:fc:5a:cd: 2a:50:78:1f:0c:bf:d1:4f:5e:d9:4c:0f:b4:ac:83:ae:5d:14: aa:49:0d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYux5utwJpXuH4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk YmU5YzJhM2EtMGMyNC00OTEzLTk4YjktZWE3ODJhMWI4MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZN0xGkHuUfc/cyqExPLMoLI2/i4MlL6Y49E XnPBp2DOACFD/bB/trtuYp6FZzQ7ADrc0HJ6Q7J5xYZyDGegfoIdyQH8WSgNl//J jkKTXA3R6Li4lXffSUwVz9clG4+mzSuoGAoyRPWJbZHrwxbYY94D7J6Fo0d91YBG dtYXD85kLDQhRGIPxJ4Xc7U3hF5wgnW3BYY6r0rs6s+NIximXRhlUEpi9iwv5REA jR0jToSl0NmdyG7nyRPwpli9SAAjOMD4NiABf8PaVZE7HoRg2H378XG6b33Px20Z XaQ/9JGGA6jSC99OYX0TFjcuHA3LUjxj+/c78H+v1l+AAUioGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCeSojIeNiwbYT4/FrdWm+bHKmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhkMjk0ZmEtMzhhYS0z Yjc0LWFjMDgtNzA5NGM4NGE2NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjFzcnEog9UPf9ltUrhYLSVUS0B4h6uoNp2fX5sOO3pECFxF5s8TFaQ ETmhEsL0jrkO5Uur6UeGKb+EyBWXUhTNwjwOzosJIv5A0z70p45IuZ4vpK1DW3DF 9SXuu26FZR2IxfmJnbhHnMcqahtWa7K9ACLHH3Bb75cfoC1NMN2ACl7CX+fZNILq QwX2GX95f9chnMBOona3T7yOuRsTqJxZwtbHv1AVPQ27LLrZIZ+2OW5B1CXmu7f0 p3JCJSb0+++reWWeku2/Pk8EvpFE4LFspIB3xt0H9ZpXKkDGA3gIBKBIUwYzsfxa zSpQeB8Mv9FPXtlMD7Ssg65dFKpJDcw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:30 2025 by rpki-client