$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa File: fcb66183-4806-3611-83aa-916ffcde6df3.roa (raw, json) Hash identifier: HAYFj3iiExjtneXoRVC0Slq+/xxowaD3ijK7npZmPgU= Subject key identifier: 14:7A:F0:C4:5C:78:E3:90:2D:4E:6C:D9:80:F5:76:FD:D4:EE:4F:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62EF7250051F91280D0980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa Signing time: Thu 17 Jul 2025 12:33:16 +0000 ROA not before: Thu 17 Jul 2025 12:33:16 +0000 ROA not after: Wed 15 Oct 2025 12:33:16 +0000 asID: 396591 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:ef:72:50:05:1f:91:28:0d:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:16 2025 GMT Not After : Oct 15 12:33:16 2025 GMT Subject: CN=d897ce4e-aa02-43c4-bf75-cee8f05eb577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:f5:f9:12:79:f4:7d:97:30:56:f5:22:a2: 87:5e:b5:e2:7d:a6:5c:ca:ff:64:1e:17:cb:73:4c: c8:35:b4:70:c7:ec:28:6f:62:36:4f:a0:e5:36:f5: 1c:11:95:16:3d:3d:eb:84:27:7d:ac:fa:36:a1:eb: 8f:bf:79:84:d5:5b:64:01:98:f8:18:3c:21:6b:a6: b7:e2:54:2a:93:dc:2c:09:04:96:57:e6:d2:5e:da: 9e:47:89:a9:1a:79:ff:d4:f9:99:d1:f6:03:31:41: a2:9d:43:0c:39:28:78:eb:e5:e8:46:45:f8:d2:26: d7:b7:34:d5:ae:8a:18:ad:e1:5f:ff:9d:f1:4e:d3: 0e:46:a3:d5:71:5c:85:bf:33:40:43:69:05:9b:86: 36:96:07:bf:92:c5:cb:3a:46:df:94:3d:90:9c:47: 39:8c:bc:47:ed:a7:f2:74:d6:68:73:c4:c8:80:40: 39:c5:ee:a0:a7:d3:a0:24:3e:eb:45:d1:59:4b:b4: 8b:59:f0:cd:bf:7b:ff:aa:21:0d:00:0d:f4:84:81: 2b:e0:ed:6e:83:1a:0c:21:31:a7:7d:f5:9b:a9:3d: f2:91:80:a8:46:32:f7:ed:4b:ad:80:d1:d6:d1:3a: 80:45:c4:76:07:c7:96:4d:69:18:08:f0:08:54:75: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:F0:C4:5C:78:E3:90:2D:4E:6C:D9:80:F5:76:FD:D4:EE:4F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bf:69:c8:fe:f2:0f:21:d0:15:16:b9:0f:78:e0:b7:0a:a5: 85:2e:57:9c:17:af:11:d9:8a:2c:40:b9:1a:bc:c4:ba:3f:93: e4:9a:06:a5:3d:90:36:a5:9b:82:f0:c9:0d:54:78:c3:81:d8: 5c:dc:d9:95:70:88:ba:77:da:8e:27:13:c8:95:53:c9:29:04: 55:fe:3e:3f:44:5c:97:b6:a6:24:58:78:7b:6a:42:4f:d5:c4: d7:1b:21:e8:24:b4:90:1c:3c:b6:e4:75:f6:dd:73:18:3f:67: 3c:0e:5e:8f:90:79:0a:44:15:11:7e:03:31:f6:9f:89:04:17: 63:52:1f:f6:97:5f:a0:e2:ac:ef:d4:fb:9c:af:b6:1f:ad:97: 44:c0:dd:d6:dd:09:74:0b:4e:4e:1b:83:2a:89:1d:54:ec:45: b4:b8:fb:c1:f3:b6:9c:f8:25:10:2d:21:0b:71:54:0e:af:30: f3:a4:ef:0a:3d:1d:f1:75:a2:6c:b1:95:6b:58:8d:b2:dd:16: 98:20:f7:8d:c6:6f:3e:e0:4a:f4:50:ac:64:98:9e:aa:69:de: c5:0b:dc:bf:e5:e3:88:3a:6b:bb:16:c2:a2:32:8c:00:94:5c: 3e:83:2d:70:ff:13:05:a8:df:d6:99:2b:23:d7:6b:13:ef:88: 16:a0:89:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYu9yUAUfkSgNCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxNloXDTI1MTAxNTEyMzMxNlowLzEtMCsGA1UEAxMk ZDg5N2NlNGUtYWEwMi00M2M0LWJmNzUtY2VlOGYwNWViNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrb1+RJ59H2XMFb1IqKHXrXifaZcyv9kHhfL c0zINbRwx+wob2I2T6DlNvUcEZUWPT3rhCd9rPo2oeuPv3mE1VtkAZj4GDwha6a3 4lQqk9wsCQSWV+bSXtqeR4mpGnn/1PmZ0fYDMUGinUMMOSh46+XoRkX40ibXtzTV rooYreFf/53xTtMORqPVcVyFvzNAQ2kFm4Y2lge/ksXLOkbflD2QnEc5jLxH7afy dNZoc8TIgEA5xe6gp9OgJD7rRdFZS7SLWfDNv3v/qiENAA30hIEr4O1ugxoMITGn ffWbqT3ykYCoRjL37UutgNHW0TqARcR2B8eWTWkYCPAIVHXdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR68MRceOOQLU5s2YD1dv3U7k/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNiNjYxODMtNDgwNi0z NjExLTgzYWEtOTE2ZmZjZGU2ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+/acj+8g8h0BUWuQ944LcKpYUuV5wXrxHZiixAuRq8xLo/k+SaBqU9 kDalm4LwyQ1UeMOB2Fzc2ZVwiLp32o4nE8iVU8kpBFX+Pj9EXJe2piRYeHtqQk/V xNcbIegktJAcPLbkdfbdcxg/ZzwOXo+QeQpEFRF+AzH2n4kEF2NSH/aXX6DirO/U +5yvth+tl0TA3dbdCXQLTk4bgyqJHVTsRbS4+8Hztpz4JRAtIQtxVA6vMPOk7wo9 HfF1omyxlWtYjbLdFpgg943Gbz7gSvRQrGSYnqpp3sUL3L/l44g6a7sWwqIyjACU XD6DLXD/EwWo39aZKyPXaxPviBagiXg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:09 2025 by rpki-client