$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff5f410b-60cd-3835-a164-1a80be8ccb64.roa File: ff5f410b-60cd-3835-a164-1a80be8ccb64.roa (raw, json) Hash identifier: tQui7qW/6weMdElsgxf7H1Z2Ka35xf+OFEvu9AVGeIw= Subject key identifier: 1B:A5:99:B6:9E:81:1E:E7:A9:D3:89:52:2E:72:43:A7:2C:7D:70:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8C62E8C512EE7A81F6AB8300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff5f410b-60cd-3835-a164-1a80be8ccb64.roa Signing time: Thu 17 Jul 2025 12:33:13 +0000 ROA not before: Thu 17 Jul 2025 12:33:13 +0000 ROA not after: Wed 15 Oct 2025 12:33:13 +0000 asID: 396554 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:62:e8:c5:12:ee:7a:81:f6:ab:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 17 12:33:13 2025 GMT Not After : Oct 15 12:33:13 2025 GMT Subject: CN=3bc56c35-97f9-46f6-9d3e-483a47608011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:67:ec:63:82:b0:af:2c:90:ff:17:28:be: b3:c3:93:1d:19:77:b5:5b:19:e5:e6:44:29:79:9e: bc:2e:26:da:bc:4c:54:6c:7f:ff:9d:f9:80:b2:fc: 29:00:95:8a:50:fb:e1:f8:d4:26:fd:7b:ce:8c:96: 9c:dd:7f:dd:e7:1d:d4:45:d7:69:10:37:d1:9d:67: 53:d8:61:af:69:41:08:de:61:c4:ac:22:81:59:6e: 6a:f5:03:29:d7:3e:eb:ca:1a:36:43:75:cf:94:53: 3f:76:00:8f:da:37:69:8c:b5:e9:bb:72:00:18:6c: c1:0f:88:ab:e0:e3:67:a0:f7:d9:b7:30:fd:3a:d9: 45:17:5a:49:e4:bf:59:61:49:1d:8a:51:ad:e5:f4: 97:42:76:ef:b0:7e:83:11:e7:18:6e:b5:5c:ea:1f: ea:7d:14:b4:4d:71:e6:4f:49:9f:cd:44:06:d3:36: fc:92:aa:b9:da:53:52:c4:a8:61:90:43:1d:a3:b3: 7c:f0:e2:87:b3:9e:35:88:83:3c:ed:9e:da:ba:bc: 79:6d:25:19:d1:2a:e0:a6:16:eb:ad:66:bd:01:c6: 1e:c1:5e:3b:2f:6e:53:83:c5:39:35:80:bb:81:ad: fe:dd:d6:c0:4b:92:67:d2:66:a1:f5:1e:fa:2b:f2: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:99:B6:9E:81:1E:E7:A9:D3:89:52:2E:72:43:A7:2C:7D:70:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff5f410b-60cd-3835-a164-1a80be8ccb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:96:64:a4:d6:42:11:9b:21:e6:db:71:fe:b3:1e:f0:5f:86: 95:c4:93:e4:9d:d5:9b:be:cd:21:f3:1e:ef:f8:1f:3e:02:a4: a3:86:f7:20:a4:65:af:e9:a1:ef:77:5d:cb:45:44:64:08:92: 57:85:a1:8e:5c:a8:3b:ac:5e:df:a5:b5:3f:6f:fd:88:3a:ac: 02:d7:b8:d1:fc:b7:b8:e5:b4:b4:72:3e:c1:ab:d9:31:0e:51: ba:df:90:1f:c3:29:f1:7c:40:61:db:56:e2:a9:08:4e:c5:17: b4:7a:94:62:33:98:85:b8:c7:3d:93:b5:f7:4c:42:bf:80:61: 8b:89:3f:f6:54:08:38:8d:1b:c3:60:15:e8:9a:75:39:1f:04: 8a:39:e4:2e:12:a1:ba:71:0e:73:48:b6:44:7e:76:09:b4:ca: b8:c1:48:73:38:22:b4:b5:ec:eb:24:a3:06:f0:55:78:ad:8b: a1:80:61:44:9f:87:71:c7:3c:7b:5a:7c:3f:5b:2b:21:a7:36: 36:24:a0:4d:fd:e4:65:dd:d6:7d:81:c8:32:d0:c5:1d:ba:fd: 23:52:88:62:33:67:09:ea:3f:b6:29:d0:e6:37:f4:37:cf:84: c5:1b:86:0f:59:12:53:d3:6b:2d:ac:da:fd:bd:18:fa:e4:70: a5:67:03:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMYujFEu56gfargwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxNzEyMzMxM1oXDTI1MTAxNTEyMzMxM1owLzEtMCsGA1UEAxMk M2JjNTZjMzUtOTdmOS00NmY2LTlkM2UtNDgzYTQ3NjA4MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuRn7GOCsK8skP8XKL6zw5MdGXe1Wxnl5kQp eZ68LibavExUbH//nfmAsvwpAJWKUPvh+NQm/XvOjJac3X/d5x3URddpEDfRnWdT 2GGvaUEI3mHErCKBWW5q9QMp1z7ryho2Q3XPlFM/dgCP2jdpjLXpu3IAGGzBD4ir 4ONnoPfZtzD9OtlFF1pJ5L9ZYUkdilGt5fSXQnbvsH6DEecYbrVc6h/qfRS0TXHm T0mfzUQG0zb8kqq52lNSxKhhkEMdo7N88OKHs541iIM87Z7aurx5bSUZ0Srgphbr rWa9AcYewV47L25Tg8U5NYC7ga3+3dbAS5Jn0mah9R76K/KcAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBulmbaegR7nqdOJUi5yQ6csfXDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmY1ZjQxMGItNjBjZC0z ODM1LWExNjQtMWE4MGJlOGNjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeWZKTWQhGbIebbcf6zHvBfhpXEk+Sd1Zu+zSHzHu/4Hz4CpKOG9yCk Za/poe93XctFRGQIkleFoY5cqDusXt+ltT9v/Yg6rALXuNH8t7jltLRyPsGr2TEO UbrfkB/DKfF8QGHbVuKpCE7FF7R6lGIzmIW4xz2TtfdMQr+AYYuJP/ZUCDiNG8Ng FeiadTkfBIo55C4SobpxDnNItkR+dgm0yrjBSHM4IrS17OskowbwVXiti6GAYUSf h3HHPHtafD9bKyGnNjYkoE395GXd1n2ByDLQxR26/SNSiGIzZwnqP7Yp0OY39DfP hMUbhg9ZElPTay2s2v29GPrkcKVnA8s= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:47 2025 by rpki-client