$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa File: da6da85c-d240-3bb3-8248-3a8de9713ce4.roa (raw, json) Hash identifier: 78kFB5h47dPgvGEgawKoJVABBljd/m8rX3adY67/hNQ= Subject key identifier: 95:E4:93:2D:B3:0E:58:65:0B:1E:78:99:3B:11:81:FB:C7:32:D9:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EE2C7F68CE61BA0CB080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 25485 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ee:2c:7f:68:ce:61:ba:0c:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=e3adbf56-537b-4728-ad7d-66c07af1eb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:e5:2e:fb:72:2e:45:82:f5:63:ce:a1:c7: 15:7a:ff:9f:e8:85:e9:17:fa:77:98:2c:fa:30:17: b3:c9:8f:aa:8a:f9:a1:b2:ea:82:1a:ee:da:8e:da: d9:70:91:71:8e:bf:48:7c:ed:99:84:36:56:90:20: c0:74:21:fb:dd:e7:04:d4:19:e0:fa:13:e5:4a:34: f4:12:ca:c7:33:db:bf:1a:e8:52:30:4c:9e:88:06: 36:2b:10:2b:8f:fb:52:df:32:b7:13:5d:f1:eb:50: ad:6b:37:14:73:aa:61:72:d6:77:c5:52:84:99:d1: 9a:0a:9d:3e:20:da:89:17:2b:73:d3:5f:bb:09:83: db:4a:76:56:1e:ce:cb:8f:48:91:88:fe:3d:ee:ad: c2:d8:f0:7f:e0:aa:9b:5e:ef:a2:95:3d:a0:d7:f2: 99:97:cc:49:59:e8:81:a0:33:8d:c9:5a:4e:21:5f: ab:20:ad:cb:ee:4d:0c:15:4c:4b:69:9e:c1:6f:6a: b8:2c:39:05:5a:6a:26:1e:df:4b:cc:f9:88:91:e7: e3:b7:07:eb:b6:7c:ea:a5:83:b0:62:b8:90:b8:69: 90:12:90:1c:24:a9:f7:57:7f:aa:f8:1d:90:b3:96: 7e:7f:28:8d:12:fa:5c:9a:25:0c:93:f7:e4:19:e0: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:93:2D:B3:0E:58:65:0B:1E:78:99:3B:11:81:FB:C7:32:D9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8d:0e:6a:d3:95:90:42:7f:7e:66:16:21:b3:3a:c2:d7:1f: d4:fb:46:54:86:7e:53:65:19:c3:1c:21:12:d1:7a:7c:f0:6f: 63:03:ad:e3:5f:63:3e:ed:cf:97:3f:d9:c0:ca:90:2e:2f:8f: 80:93:e7:ee:07:f1:c5:c8:ae:56:5a:e9:2f:8a:56:cb:1e:57: 2a:d2:06:da:ac:7c:6c:8f:42:84:51:f7:d2:9a:6a:19:38:d7: 24:89:54:b5:6d:f9:8c:c3:2b:62:d2:99:77:96:18:c5:fd:59: 4c:32:b3:78:06:28:4b:60:53:61:ef:71:6b:17:46:03:27:e5: 9f:3d:5e:69:c0:40:cd:b0:4b:4c:32:4d:b1:4a:17:fe:6b:f9: ee:bb:75:32:1b:4b:44:74:67:df:4c:8b:05:e3:1a:be:3b:0e: a1:85:a7:9c:7a:da:2c:17:fe:04:9f:6f:b3:5f:09:63:5f:dc: d4:c5:67:41:ca:e7:d2:b7:52:d9:40:b7:45:db:ec:ea:71:d7: f1:fa:fd:53:a2:40:81:90:52:da:2d:2b:44:9b:2c:9b:c6:12: 79:2b:f8:16:3c:16:e4:ca:77:e0:57:fe:a9:50:0c:fc:5b:aa: 77:8a:af:0b:1d:c5:8f:3a:d0:bf:24:de:40:23:d3:44:69:e6: e7:c4:cc:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu4sf2jOYboMsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk ZTNhZGJmNTYtNTM3Yi00NzI4LWFkN2QtNjZjMDdhZjFlYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNnlLvtyLkWC9WPOoccVev+f6IXpF/p3mCz6 MBezyY+qivmhsuqCGu7ajtrZcJFxjr9IfO2ZhDZWkCDAdCH73ecE1Bng+hPlSjT0 EsrHM9u/GuhSMEyeiAY2KxArj/tS3zK3E13x61CtazcUc6phctZ3xVKEmdGaCp0+ INqJFytz01+7CYPbSnZWHs7Lj0iRiP497q3C2PB/4KqbXu+ilT2g1/KZl8xJWeiB oDONyVpOIV+rIK3L7k0MFUxLaZ7Bb2q4LDkFWmomHt9LzPmIkefjtwfrtnzqpYOw YriQuGmQEpAcJKn3V3+q+B2Qs5Z+fyiNEvpcmiUMk/fkGeBihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXkky2zDlhlCx54mTsRgfvHMtl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2ZGE4NWMtZDI0MC0z YmIzLTgyNDgtM2E4ZGU5NzEzY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSNDmrTlZBCf35mFiGzOsLXH9T7RlSGflNlGcMcIRLRenzwb2MDreNf Yz7tz5c/2cDKkC4vj4CT5+4H8cXIrlZa6S+KVsseVyrSBtqsfGyPQoRR99Kaahk4 1ySJVLVt+YzDK2LSmXeWGMX9WUwys3gGKEtgU2HvcWsXRgMn5Z89XmnAQM2wS0wy TbFKF/5r+e67dTIbS0R0Z99MiwXjGr47DqGFp5x62iwX/gSfb7NfCWNf3NTFZ0HK 59K3UtlAt0Xb7Opx1/H6/VOiQIGQUtotK0SbLJvGEnkr+BY8FuTKd+BX/qlQDPxb qneKrwsdxY860L8k3kAj00Rp5ufEzCo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:09 2025 by rpki-client