$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed1806be-e3bf-3125-a96f-c3b7b456914d.roa File: ed1806be-e3bf-3125-a96f-c3b7b456914d.roa (raw, json) Hash identifier: D7CFcR+O+Kny8f/BRAFdCyqyDqKyiPfOuF6Mhk7iqfY= Subject key identifier: 45:99:24:17:45:D9:F2:91:13:AE:D8:0C:4B:A9:2A:67:3E:E1:21:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62ED9C535F5E7DED8B7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed1806be-e3bf-3125-a96f-c3b7b456914d.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396561 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ed:9c:53:5f:5e:7d:ed:8b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=721533b7-6e28-4023-a341-3f9ac60a509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:fa:95:22:ef:74:af:07:5f:f1:ab:c6:97: ad:ce:c4:44:ee:04:26:8a:b1:8e:df:2c:05:34:00: 44:32:ca:f7:a7:d5:9b:2b:67:c5:f1:47:fb:de:01: c4:62:63:9a:e7:4c:85:46:84:a9:b5:00:52:ac:38: 67:76:84:ce:ab:5f:90:8b:70:04:3a:3c:fa:ac:8a: a0:ee:92:0a:82:c7:96:8d:51:78:ef:bd:23:af:7c: 9f:9a:28:84:ff:ce:f1:1b:89:88:6e:2c:d5:0e:e0: f7:59:ff:f3:ab:bc:fc:aa:40:6d:08:33:20:77:a9: cc:00:77:c9:88:1e:09:f4:e3:ec:90:42:7f:4c:7c: 5f:9f:cc:6d:8a:24:ef:ea:72:a8:b3:fc:fb:c3:00: 92:b0:43:a4:ed:bd:ed:56:9f:73:ec:92:d6:77:31: 4b:ed:8b:16:6c:31:f9:b2:c1:14:b9:c4:43:7c:3f: 8f:b8:2a:bf:b6:c9:3b:f1:1a:9b:b3:f6:68:eb:70: ac:9a:99:cd:e2:10:36:d0:96:fb:5f:c0:1b:62:a1: c2:76:70:29:87:44:33:05:2a:34:72:dd:03:bf:ee: fe:50:47:9d:a3:d1:cd:4c:5b:63:5b:25:f1:08:b5: a7:76:6a:79:f9:d5:8b:61:a4:51:22:80:e6:57:8e: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:24:17:45:D9:F2:91:13:AE:D8:0C:4B:A9:2A:67:3E:E1:21:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed1806be-e3bf-3125-a96f-c3b7b456914d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6d:f4:97:e1:fe:02:95:69:52:53:a7:b3:f0:58:d0:1c:63: 05:16:58:96:22:2e:99:b2:a4:38:74:1c:a9:46:ec:0d:af:69: 59:2f:c0:67:77:26:d4:5c:5b:da:a9:33:df:ba:1e:4c:16:56: 44:79:f4:19:40:29:75:df:03:87:b3:81:ae:c2:f4:72:30:e1: c1:39:25:0f:2e:fe:f5:79:6a:d4:5c:03:91:0e:9d:4a:89:12: 94:de:c7:bb:0c:4b:96:96:11:83:b0:c2:20:aa:59:b8:52:10: 34:15:17:b2:cf:21:97:22:c0:3f:93:6f:9b:32:e9:f2:34:44: 1e:81:2b:98:a0:9b:85:b0:89:e8:ba:32:9c:23:ab:1d:fd:55: cc:a5:ad:04:6f:cf:51:66:7a:94:c7:73:53:d6:5a:c7:11:cf: 97:2d:cd:46:4d:af:4f:6c:07:72:fe:3e:f2:8f:d1:77:d3:b0: cf:54:d3:ee:6f:e3:56:7b:33:66:a0:0b:96:7b:99:d9:c3:56: fc:ac:34:0b:a6:82:93:fd:1c:f9:1b:9d:72:8d:96:9e:b8:ee: 76:a9:f3:d4:db:29:24:d9:e5:6d:1d:9c:3b:c9:db:98:77:28: 16:19:fd:0b:09:cb:1d:19:24:02:8e:07:43:4b:60:6f:58:3a: d7:6a:81:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu2cU19efe2LdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk NzIxNTMzYjctNmUyOC00MDIzLWEzNDEtM2Y5YWM2MGE1MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbf6lSLvdK8HX/GrxpetzsRE7gQmirGO3ywF NABEMsr3p9WbK2fF8Uf73gHEYmOa50yFRoSptQBSrDhndoTOq1+Qi3AEOjz6rIqg 7pIKgseWjVF4770jr3yfmiiE/87xG4mIbizVDuD3Wf/zq7z8qkBtCDMgd6nMAHfJ iB4J9OPskEJ/THxfn8xtiiTv6nKos/z7wwCSsEOk7b3tVp9z7JLWdzFL7YsWbDH5 ssEUucRDfD+PuCq/tsk78Rqbs/Zo63CsmpnN4hA20Jb7X8AbYqHCdnAph0QzBSo0 ct0Dv+7+UEedo9HNTFtjWyXxCLWndmp5+dWLYaRRIoDmV45cEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWZJBdF2fKRE67YDEupKmc+4SGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQxODA2YmUtZTNiZi0z MTI1LWE5NmYtYzNiN2I0NTY5MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBt9Jfh/gKVaVJTp7PwWNAcYwUWWJYiLpmypDh0HKlG7A2vaVkvwGd3 JtRcW9qpM9+6HkwWVkR59BlAKXXfA4ezga7C9HIw4cE5JQ8u/vV5atRcA5EOnUqJ EpTex7sMS5aWEYOwwiCqWbhSEDQVF7LPIZciwD+Tb5sy6fI0RB6BK5igm4Wwiei6 Mpwjqx39VcylrQRvz1FmepTHc1PWWscRz5ctzUZNr09sB3L+PvKP0XfTsM9U0+5v 41Z7M2agC5Z7mdnDVvysNAumgpP9HPkbnXKNlp647nap89TbKSTZ5W0dnDvJ25h3 KBYZ/QsJyx0ZJAKOB0NLYG9YOtdqgXI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:18 2025 by rpki-client