$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa File: ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa (raw, json) Hash identifier: hUJedSgoh1pZXqUqy3tSoj/AADWzH+e02p3UuPEe1Ek= Subject key identifier: 29:16:6F:83:86:02:51:29:4C:51:A1:41:7D:56:91:8F:2D:FB:B3:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EC4A09935FD6ABA5F440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396826 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:4a:09:93:5f:d6:ab:a5:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=076623ff-f12d-4179-af49-4360c562d25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:ff:6d:54:96:21:a1:14:33:98:ff:14:23: ee:7a:7b:cb:4c:92:a4:2b:f0:33:ca:b6:d5:35:1b: 8f:2b:72:70:b4:15:1c:2c:ae:a3:eb:9f:25:c0:c6: c8:05:ff:90:ee:7a:f5:1a:33:26:ad:0b:6d:b0:36: 97:1f:97:3b:df:dc:3a:cc:76:e8:3e:11:96:06:0c: 43:67:a9:42:a9:b2:72:8d:fd:4f:10:49:66:d5:09: 11:58:fc:c5:c5:40:f3:8d:4a:0b:a7:63:0d:63:7d: 6f:73:83:77:a1:13:51:ee:32:d6:6e:cf:83:21:ac: 4e:0d:34:99:53:e0:42:f0:1d:0a:31:a1:29:be:c4: 85:f9:a6:36:e0:73:99:1c:aa:75:a9:e7:05:8f:71: b4:b9:2e:ba:3b:bb:6d:84:13:1d:02:4a:05:41:b5: 8b:53:55:20:00:5e:9d:af:8e:cf:4d:d1:0f:05:43: 31:a3:f4:8f:df:cf:2e:28:93:4f:bd:5a:4d:84:78: ee:53:3e:9d:57:80:cb:31:a7:71:4c:25:07:8d:33: 06:f6:03:78:02:71:5a:01:5c:36:31:3c:4c:90:a9: 05:eb:47:71:dc:d6:43:ff:67:55:0f:f6:2c:02:e1: 57:fd:86:ac:42:80:e0:2a:0a:9f:f1:f7:d5:76:d8: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:6F:83:86:02:51:29:4C:51:A1:41:7D:56:91:8F:2D:FB:B3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d2:6a:4d:cc:18:8c:14:af:ea:c9:22:c6:db:09:d7:27:de: 39:2d:79:8c:0b:1f:81:8d:99:31:3f:29:58:72:5b:5a:0d:f2: 98:7c:a8:90:df:a1:ee:49:84:5c:1b:7c:37:08:7c:8a:ac:2f: 50:3a:31:1f:fe:9d:2e:83:d5:5e:9c:2b:20:8e:ca:04:6f:0f: e4:7c:f0:11:87:77:bd:71:c7:ac:62:20:ae:06:71:ca:72:27: 50:de:c0:b2:e0:4f:41:6c:04:7a:a8:f1:8e:f2:6b:92:f8:b8: 01:cd:88:bc:72:af:b4:c7:f6:33:72:92:39:49:58:7a:36:d9: 6f:52:5f:b4:06:77:12:41:60:6b:88:37:7f:48:10:4c:61:2c: 06:d4:48:10:cc:b6:83:2b:58:02:e5:57:b8:05:1c:2c:74:0e: d4:2b:77:6a:c9:81:5b:15:5a:cf:e1:6c:ba:fe:25:40:e8:9c: 7b:57:67:6d:ed:b2:7b:d2:ee:fd:33:bb:ca:8f:7a:d9:a5:68: da:24:5c:b7:32:a9:12:b0:c0:76:f0:21:f3:36:e4:79:e1:4a: f6:c9:12:15:65:6a:f3:e5:d2:cc:7f:42:12:fd:d1:e4:24:46: cc:db:65:86:5a:07:4d:41:d9:27:d4:45:08:6b:65:55:e1:86: b6:41:03:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuxKCZNf1qul9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk MDc2NjIzZmYtZjEyZC00MTc5LWFmNDktNDM2MGM1NjJkMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyn/bVSWIaEUM5j/FCPuenvLTJKkK/AzyrbV NRuPK3JwtBUcLK6j658lwMbIBf+Q7nr1GjMmrQttsDaXH5c739w6zHboPhGWBgxD Z6lCqbJyjf1PEElm1QkRWPzFxUDzjUoLp2MNY31vc4N3oRNR7jLWbs+DIaxODTSZ U+BC8B0KMaEpvsSF+aY24HOZHKp1qecFj3G0uS66O7tthBMdAkoFQbWLU1UgAF6d r47PTdEPBUMxo/SP388uKJNPvVpNhHjuUz6dV4DLMadxTCUHjTMG9gN4AnFaAVw2 MTxMkKkF60dx3NZD/2dVD/YsAuFX/YasQoDgKgqf8ffVdtgmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkWb4OGAlEpTFGhQX1WkY8t+7OFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3YzAxNmQtM2M2Yy0z OGQ1LTgzMjMtYjQ0YmE4MDBjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Sak3MGIwUr+rJIsbbCdcn3jkteYwLH4GNmTE/KVhyW1oN8ph8qJDf oe5JhFwbfDcIfIqsL1A6MR/+nS6D1V6cKyCOygRvD+R88BGHd71xx6xiIK4Gccpy J1DewLLgT0FsBHqo8Y7ya5L4uAHNiLxyr7TH9jNykjlJWHo22W9SX7QGdxJBYGuI N39IEExhLAbUSBDMtoMrWALlV7gFHCx0DtQrd2rJgVsVWs/hbLr+JUDonHtXZ23t snvS7v0zu8qPetmlaNokXLcyqRKwwHbwIfM25HnhSvbJEhVlavPl0sx/QhL90eQk RszbZYZaB01B2SfURQhrZVXhhrZBA+Y= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:39 2025 by rpki-client