$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df953ac0-66d2-375b-aadd-3dc8634cd664.roa File: df953ac0-66d2-375b-aadd-3dc8634cd664.roa (raw, json) Hash identifier: kNu/RzCqM1Yk18j2+6fMyg5GFdZV8jKHhHTPujv1Bh4= Subject key identifier: 87:01:D5:83:79:B4:A6:E2:CE:6F:9D:34:F6:D7:3D:61:9D:91:BE:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EB25499E52EA9D8C2DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df953ac0-66d2-375b-aadd-3dc8634cd664.roa Signing time: Thu 17 Jul 2025 12:33:14 +0000 ROA not before: Thu 17 Jul 2025 12:33:14 +0000 ROA not after: Wed 15 Oct 2025 12:33:14 +0000 asID: 396545 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:eb:25:49:9e:52:ea:9d:8c:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:14 2025 GMT Not After : Oct 15 12:33:14 2025 GMT Subject: CN=6d5a487c-e8a5-4f47-9e80-c9cbffb23c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:91:be:06:83:3b:b2:e3:2d:8a:72:ab:c6: 42:32:bc:91:94:c5:ac:00:c5:8c:50:db:14:05:74: ab:21:45:14:ec:92:c0:ff:3a:48:99:9a:32:03:f7: f2:84:c0:b9:09:a0:3c:fc:3d:06:b7:70:b1:65:7a: 20:54:de:a8:a0:19:2b:95:70:a6:cf:ec:45:78:a0: c3:c2:60:df:06:cc:50:73:9d:ae:54:32:ff:a5:c5: 25:a9:74:88:e5:a1:69:a1:2b:86:15:e9:f8:f1:e6: 77:d8:a7:e0:7e:68:ed:ad:32:90:ba:a9:48:65:78: 09:6d:cd:4f:bb:b4:79:46:cd:f9:53:ea:b8:11:e0: 8e:c9:23:39:b6:b0:4a:c1:d9:3c:ce:5f:c1:9d:db: 22:0b:aa:d5:9f:1f:e5:c6:c6:03:0a:f1:42:07:02: 8e:7d:a7:7c:b8:ab:d5:93:e5:0e:23:0b:ff:92:ad: cb:a6:fa:71:c0:ef:58:8e:05:b8:1e:1f:f7:09:cc: 08:39:8f:c9:a5:ea:01:30:ae:98:f5:2b:72:78:7e: 58:96:a4:8a:f1:c4:b2:a0:ca:db:4f:9b:0b:ac:94: 46:6e:ad:cd:12:90:eb:80:ef:a6:8a:38:de:3c:1e: 15:85:a8:2a:95:b5:b1:ec:89:99:5f:36:cf:09:99: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:D5:83:79:B4:A6:E2:CE:6F:9D:34:F6:D7:3D:61:9D:91:BE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df953ac0-66d2-375b-aadd-3dc8634cd664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:b0:f8:f9:44:45:a9:08:80:e9:75:d1:88:a0:3e:5f:9f: 21:08:07:ee:79:cf:7d:2f:06:7f:e0:20:fc:69:1c:bf:79:5c: 93:25:18:70:4b:8c:83:7f:ba:d9:8d:67:21:7c:1f:ea:cd:5d: fb:8e:97:93:b1:35:12:be:7e:af:24:2b:26:a4:d0:00:42:24: b3:98:38:6e:85:35:21:28:aa:ff:14:2a:f1:dd:b7:7d:71:ad: a2:a2:c4:c3:61:9e:d3:2e:80:62:0e:ef:be:c8:ca:82:80:99: 62:34:64:b0:de:3e:cf:a7:76:a2:f0:b2:6b:3a:67:b3:e2:eb: f6:b6:10:de:97:c7:0d:01:21:55:0f:a4:c7:a7:ae:fb:63:3b: d6:ed:f3:10:2e:fa:54:df:21:30:16:4d:17:49:5b:64:6e:ac: bd:75:4f:db:89:6d:06:d9:eb:3d:93:e6:50:5b:ae:44:2c:f6: 1c:d5:f3:11:2c:b2:cb:f2:70:19:39:5c:cb:a3:f7:5f:bb:36: e4:e2:c1:5e:3d:ac:7b:82:f8:dc:03:95:fb:e6:75:0d:93:84: c1:e4:75:07:51:f4:a6:9a:fc:d9:c9:bb:ca:2c:72:6d:3c:99: ec:c8:ad:54:e6:f4:49:ad:56:2c:cc:0a:da:a0:3c:b1:f1:63: 6f:34:71:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuslSZ5S6p2MLeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNFoXDTI1MTAxNTEyMzMxNFowLzEtMCsGA1UEAxMk NmQ1YTQ4N2MtZThhNS00ZjQ3LTllODAtYzljYmZmYjIzYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d6RvgaDO7LjLYpyq8ZCMryRlMWsAMWMUNsU BXSrIUUU7JLA/zpImZoyA/fyhMC5CaA8/D0Gt3CxZXogVN6ooBkrlXCmz+xFeKDD wmDfBsxQc52uVDL/pcUlqXSI5aFpoSuGFen48eZ32KfgfmjtrTKQuqlIZXgJbc1P u7R5Rs35U+q4EeCOySM5trBKwdk8zl/BndsiC6rVnx/lxsYDCvFCBwKOfad8uKvV k+UOIwv/kq3LpvpxwO9YjgW4Hh/3CcwIOY/JpeoBMK6Y9StyeH5YlqSK8cSyoMrb T5sLrJRGbq3NEpDrgO+mijjePB4VhagqlbWx7ImZXzbPCZk2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcB1YN5tKbizm+dNPbXPWGdkb7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY5NTNhYzAtNjZkMi0z NzViLWFhZGQtM2RjODYzNGNkNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEojsPj5REWpCIDpddGIoD5fnyEIB+55z30vBn/gIPxpHL95XJMlGHBL jIN/utmNZyF8H+rNXfuOl5OxNRK+fq8kKyak0ABCJLOYOG6FNSEoqv8UKvHdt31x raKixMNhntMugGIO777IyoKAmWI0ZLDePs+ndqLwsms6Z7Pi6/a2EN6Xxw0BIVUP pMenrvtjO9bt8xAu+lTfITAWTRdJW2RurL11T9uJbQbZ6z2T5lBbrkQs9hzV8xEs ssvycBk5XMuj91+7NuTiwV49rHuC+NwDlfvmdQ2ThMHkdQdR9Kaa/NnJu8oscm08 mezIrVTm9EmtVizMCtqgPLHxY280cRo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:50 2025 by rpki-client