$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa File: ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa (raw, json) Hash identifier: eGQTrKNu8+BD9TiQuQdBAjsKAPhp5okKB2+QAs/gDEs= Subject key identifier: 6B:8F:E0:6A:6E:2A:36:B9:21:1E:9E:15:9E:60:DE:AE:D3:EC:89:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EC109882E8485E1F2F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa Signing time: Thu 17 Jul 2025 12:33:15 +0000 ROA not before: Thu 17 Jul 2025 12:33:15 +0000 ROA not after: Wed 15 Oct 2025 12:33:15 +0000 asID: 396587 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ec:10:98:82:e8:48:5e:1f:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:15 2025 GMT Not After : Oct 15 12:33:15 2025 GMT Subject: CN=47809af9-d63a-4ff5-b39f-e45f1e1a0d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:04:e7:d4:51:98:af:1f:64:a4:40:f7:2d: 12:5b:a5:5c:c0:d6:e4:98:1e:7d:fc:06:b4:c2:40: 2d:c9:7c:22:a7:fc:e5:fc:5c:d9:50:92:a0:51:e0: 14:82:f9:1c:e8:15:dd:49:f4:78:90:73:65:f9:19: 53:c8:52:9f:56:a3:e3:86:2a:20:b7:18:60:cd:bc: 37:33:4b:5e:cc:db:70:05:6f:ab:87:c1:1f:69:96: 75:e0:e4:bd:16:b7:55:b2:7c:b4:d7:f6:a8:0b:7b: 4f:7d:45:71:25:5f:2a:7c:81:9c:25:e2:8f:3d:4e: 9b:02:6a:de:f5:67:0d:2e:dc:4e:09:e5:96:42:3e: 6f:6a:b9:3c:56:4b:bc:25:73:a3:a1:34:bf:82:e0: df:95:ac:01:a8:9d:15:6c:06:4a:b9:0b:7d:bb:2e: f3:ec:88:e5:15:79:ec:8d:2c:ce:26:b2:b0:c4:8d: 27:6b:60:dc:ac:9d:99:32:6b:df:02:6f:e1:e6:9c: 5f:4d:94:20:ab:09:9e:96:3a:eb:c3:de:5d:76:86: 0e:93:5d:71:50:65:77:ac:14:41:6f:4f:da:6e:d2: 77:98:30:96:2d:b4:09:58:2f:ea:56:fb:d9:9b:d5: 09:8b:e1:2e:f9:7f:e7:69:58:a2:9c:1d:4b:aa:51: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8F:E0:6A:6E:2A:36:B9:21:1E:9E:15:9E:60:DE:AE:D3:EC:89:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:70:e5:d7:1d:f8:0d:51:f0:8d:d0:4c:87:ce:34:ab:20:fa: 73:39:0a:ad:db:a0:77:c3:38:32:3f:05:28:3a:71:52:6d:15: 5d:2f:75:a1:07:13:01:e3:77:e5:4b:f8:80:b1:07:b0:3a:1b: 6a:46:a2:c8:5d:e4:bc:e1:8e:46:aa:f1:87:52:bc:2a:c4:82: bb:07:92:c6:e5:f7:c5:eb:e9:39:49:00:fc:18:bb:bf:a8:90: b4:89:9f:3d:cb:50:2a:8d:fa:0d:bc:30:e0:bc:59:bb:ed:10: 9b:8b:ba:3f:ce:aa:08:29:b5:78:bf:0b:4c:00:68:d2:ed:1e: de:9f:dd:3c:27:20:2b:5f:da:d0:e5:3b:fc:d7:a8:6a:e6:73: c1:00:8f:78:e1:af:43:d7:fa:e3:82:bd:69:bf:82:8b:8b:68: a5:10:ca:8a:af:43:80:ed:a9:12:f2:08:6e:38:94:1a:b6:10: e3:4b:50:33:04:77:49:c3:d9:dc:77:86:10:0e:b3:2f:22:7c: 0f:e1:37:ed:73:40:7b:d3:03:88:a7:60:06:02:35:fb:81:9e: 2e:9e:13:78:4c:9c:73:de:68:b8:30:30:b6:b1:9f:26:c7:f5: 10:c3:6a:f3:49:36:a2:44:d5:18:af:99:c5:23:48:ef:6b:99: ce:12:43:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYuwQmILoSF4fL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNVoXDTI1MTAxNTEyMzMxNVowLzEtMCsGA1UEAxMk NDc4MDlhZjktZDYzYS00ZmY1LWIzOWYtZTQ1ZjFlMWEwZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ4E59RRmK8fZKRA9y0SW6VcwNbkmB59/Aa0 wkAtyXwip/zl/FzZUJKgUeAUgvkc6BXdSfR4kHNl+RlTyFKfVqPjhiogtxhgzbw3 M0tezNtwBW+rh8EfaZZ14OS9FrdVsny01/aoC3tPfUVxJV8qfIGcJeKPPU6bAmre 9WcNLtxOCeWWQj5vark8Vku8JXOjoTS/guDflawBqJ0VbAZKuQt9uy7z7IjlFXns jSzOJrKwxI0na2DcrJ2ZMmvfAm/h5pxfTZQgqwmeljrrw95ddoYOk11xUGV3rBRB b0/abtJ3mDCWLbQJWC/qVvvZm9UJi+Eu+X/naViinB1LqlFZWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuP4GpuKja5IR6eFZ5g3q7T7IliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4N2Q4ZDUtNzMzNi0z Y2RlLWFmMzUtNmNhOWUxYTFhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNw5dcd+A1R8I3QTIfONKsg+nM5Cq3boHfDODI/BSg6cVJtFV0vdaEH EwHjd+VL+ICxB7A6G2pGoshd5Lzhjkaq8YdSvCrEgrsHksbl98Xr6TlJAPwYu7+o kLSJnz3LUCqN+g28MOC8WbvtEJuLuj/OqggptXi/C0wAaNLtHt6f3TwnICtf2tDl O/zXqGrmc8EAj3jhr0PX+uOCvWm/gouLaKUQyoqvQ4DtqRLyCG44lBq2EONLUDME d0nD2dx3hhAOsy8ifA/hN+1zQHvTA4inYAYCNfuBni6eE3hMnHPeaLgwMLaxnybH 9RDDavNJNqJE1RivmcUjSO9rmc4SQ3U= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:36 2025 by rpki-client