$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7486ae4-a252-3bda-a89c-b4e23044892d.roa File: e7486ae4-a252-3bda-a89c-b4e23044892d.roa (raw, json) Hash identifier: FCvuVRbcy13D2OGR+uaWbsJZFlVCeYy6hYNos2c6LFM= Subject key identifier: 2A:3A:B6:8D:AF:BC:62:4B:AE:11:30:9F:EE:D7:D9:20:54:8A:D9:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E9261CFC3D574C1D4880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7486ae4-a252-3bda-a89c-b4e23044892d.roa Signing time: Thu 17 Jul 2025 12:33:13 +0000 ROA not before: Thu 17 Jul 2025 12:33:13 +0000 ROA not after: Wed 15 Oct 2025 12:33:13 +0000 asID: 397206 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e9:26:1c:fc:3d:57:4c:1d:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:13 2025 GMT Not After : Oct 15 12:33:13 2025 GMT Subject: CN=6aabc1f6-4909-4d51-9747-182e461d3d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:10:49:03:c9:28:b9:65:80:b0:41:c9:da: 42:87:a7:4e:76:ce:a6:7d:4b:f5:01:37:aa:61:9e: 13:eb:33:54:f6:5a:5f:10:ed:ae:cc:b6:49:c6:9e: 43:5e:a6:66:83:00:e8:9b:c8:de:7d:47:0a:6c:25: 1a:4a:d0:7e:c1:e1:3f:d4:78:52:82:69:1b:05:ae: bb:34:24:f4:24:f0:44:92:ef:47:30:2d:33:a4:6f: 41:3c:b9:ae:ee:55:c1:6a:21:d2:06:17:25:31:01: 12:a5:57:11:47:fb:91:d4:58:31:c1:f1:43:ef:ab: e7:b5:49:6b:dd:92:ce:f9:fe:91:ce:b7:af:93:ce: 88:46:fa:6c:dd:da:8e:95:26:8f:43:ca:4b:e2:38: 45:3f:7d:c6:f6:a9:2a:d0:11:ea:ec:4b:ef:d1:b5: 7e:ee:99:18:83:79:39:0f:37:9f:bc:c7:f6:bc:c4: ce:57:df:6d:33:98:26:93:d5:f5:30:f2:34:0e:cb: 60:45:7d:01:db:53:b9:ed:50:9a:32:5e:a3:50:02: c2:f2:e8:70:c5:f8:ba:90:cb:f6:84:88:b3:d0:58: e9:89:8f:8d:7a:23:c5:d5:6d:2d:e0:89:08:95:81: 78:a3:0e:eb:6c:6c:b3:de:b8:34:22:de:1f:8e:72: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:B6:8D:AF:BC:62:4B:AE:11:30:9F:EE:D7:D9:20:54:8A:D9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7486ae4-a252-3bda-a89c-b4e23044892d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cb:de:39:c4:36:47:bb:c7:61:7b:25:e3:40:77:14:8d:a1: 84:3b:b2:71:6a:1d:07:f6:d6:e7:93:11:dc:89:60:cd:ea:e9: 7c:55:ce:58:e3:e2:4f:28:5f:0a:21:f2:e4:66:52:f4:05:e1: 89:e2:81:77:65:79:77:2a:5d:c2:c9:f3:20:20:08:cf:c8:01: b1:af:d2:fe:a0:52:21:16:0b:60:25:73:bc:62:e0:db:2e:6b: 08:ee:c6:d8:59:a1:08:f8:52:06:c4:2d:18:f9:88:d5:58:78: e4:be:6b:13:dd:52:e4:db:4b:40:e8:23:63:17:69:9d:19:a9: 11:c2:c1:8c:67:18:6b:1d:40:73:53:9f:bd:0b:9d:e9:eb:01: bf:ca:e1:ca:6e:90:17:86:32:c3:4c:74:22:c2:38:f9:c7:5e: 3c:6d:45:a9:26:a5:86:cb:f7:fc:0b:f7:60:8c:ab:fb:88:2d: 73:6c:fb:49:96:65:1a:ca:e8:b1:4b:88:93:0e:0e:81:4c:93: 06:ea:41:fd:25:e4:eb:e1:8b:11:65:36:e6:1a:e1:35:bf:7b: bb:fa:ae:2c:d9:45:db:fd:73:f8:7b:e2:58:ef:7a:6e:01:81: 11:fd:20:70:e9:11:cc:1f:65:43:00:2b:12:ce:ef:78:89:c4: eb:05:7d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYukmHPw9V0wdSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxM1oXDTI1MTAxNTEyMzMxM1owLzEtMCsGA1UEAxMk NmFhYmMxZjYtNDkwOS00ZDUxLTk3NDctMTgyZTQ2MWQzZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCQQSQPJKLllgLBBydpCh6dOds6mfUv1ATeq YZ4T6zNU9lpfEO2uzLZJxp5DXqZmgwDom8jefUcKbCUaStB+weE/1HhSgmkbBa67 NCT0JPBEku9HMC0zpG9BPLmu7lXBaiHSBhclMQESpVcRR/uR1FgxwfFD76vntUlr 3ZLO+f6Rzrevk86IRvps3dqOlSaPQ8pL4jhFP33G9qkq0BHq7Evv0bV+7pkYg3k5 DzefvMf2vMTOV99tM5gmk9X1MPI0DstgRX0B21O57VCaMl6jUALC8uhwxfi6kMv2 hIiz0FjpiY+NeiPF1W0t4IkIlYF4ow7rbGyz3rg0It4fjnKSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo6to2vvGJLrhEwn+7X2SBUitl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTc0ODZhZTQtYTI1Mi0z YmRhLWE4OWMtYjRlMjMwNDQ4OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfL3jnENke7x2F7JeNAdxSNoYQ7snFqHQf21ueTEdyJYM3q6XxVzljj 4k8oXwoh8uRmUvQF4YnigXdleXcqXcLJ8yAgCM/IAbGv0v6gUiEWC2Alc7xi4Nsu awjuxthZoQj4UgbELRj5iNVYeOS+axPdUuTbS0DoI2MXaZ0ZqRHCwYxnGGsdQHNT n70LnenrAb/K4cpukBeGMsNMdCLCOPnHXjxtRakmpYbL9/wL92CMq/uILXNs+0mW ZRrK6LFLiJMODoFMkwbqQf0l5OvhixFlNuYa4TW/e7v6rizZRdv9c/h74ljvem4B gRH9IHDpEcwfZUMAKxLO73iJxOsFfWE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:46 2025 by rpki-client