$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa File: 237e22c1-1d5e-3e56-ab84-1316298cd75c.roa (raw, json) Hash identifier: XCFRnlZWsjJlyau+HWC8n9y5jaUN1n53Fe1UH17FNvk= Subject key identifier: 4C:C4:05:3D:2A:66:1C:55:0C:CE:76:1A:DF:EE:94:87:32:A5:15:3A Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A77808C3C71991FA9C1D40200 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 11273 IP address blocks: 216.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8c:3c:71:99:1f:a9:c1:d4:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=d1009bb2-947a-42ee-9b8b-69349b41873b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:5c:7a:0d:db:62:b0:86:d8:36:08:a1:81: 01:68:f9:38:ea:ef:45:ab:7e:a5:2c:ee:dc:63:c3: 94:11:90:e4:dc:b5:eb:9e:39:22:ec:5b:96:63:89: 1a:cd:fa:7d:cc:af:6f:2e:cf:5c:62:45:15:1f:fd: c4:a1:eb:9c:71:f8:f3:fb:b5:da:40:94:62:48:a5: 2d:94:90:79:e1:a9:67:2e:4a:12:8c:6e:3a:63:37: 4a:86:26:08:55:70:77:6d:64:d0:b7:4b:d1:f8:5d: 30:bb:d1:94:a6:db:2d:16:a9:89:89:3d:fd:32:e7: 85:dd:18:77:af:a6:1a:26:78:0b:cc:8c:2e:af:05: e0:36:1c:c5:fe:c9:6b:f9:a8:d1:da:ed:0a:4e:1c: 9d:bb:18:e5:87:e9:3b:94:64:40:f4:ff:af:a1:44: 07:67:7f:a4:0e:f5:10:5d:9a:bb:e4:e3:f8:4d:88: 6c:4d:2e:af:8d:95:49:92:98:6b:72:48:ee:21:da: e1:22:a5:f4:88:37:95:c7:8a:d5:74:67:61:d5:d0: 2d:b9:da:30:79:46:7c:9e:77:7b:fb:ee:a3:87:e4: 75:f3:da:37:5d:89:37:f4:c6:0f:96:f3:14:8f:34: 56:17:79:4a:aa:12:db:e9:0b:30:8d:7a:cc:28:27: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C4:05:3D:2A:66:1C:55:0C:CE:76:1A:DF:EE:94:87:32:A5:15:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9e:e5:10:11:6c:39:f5:9a:35:3b:84:24:4a:14:cc:14:54: cc:4c:d0:8e:f1:10:4d:95:be:6d:6d:40:ed:28:e1:7b:55:63: 1a:01:4c:1b:a4:16:e9:a6:63:16:40:f2:be:3c:4e:fb:70:51: 68:6d:e9:95:44:66:78:fc:63:ce:e8:55:21:1a:81:d7:c5:b9: a0:0a:88:21:0c:ee:57:68:64:4b:82:4f:7a:a8:c3:ec:df:9d: 83:cc:bf:68:8c:c7:d7:78:7e:ba:b3:77:e0:1a:f6:1c:75:09: 93:fa:41:a8:e1:22:08:a9:ae:e8:a9:c4:69:75:88:bf:8a:ad: 75:e4:f8:9b:a1:d1:a6:8b:32:a4:3f:cb:17:ca:f5:d9:a2:c4: 67:11:e3:a9:b7:ff:7f:94:e1:fe:88:0b:af:f8:7c:bb:97:53: f8:2c:70:e3:5d:ed:1b:8e:d1:65:9a:60:e4:9b:b3:ac:2d:1d: fd:3a:b1:b0:28:4f:f5:df:1e:48:50:9f:24:93:0e:7b:c7:e9: 27:a1:2c:cd:82:b2:12:47:e2:0f:36:f1:36:29:2c:80:48:4d: 21:2e:c6:a6:be:55:20:1d:04:24:7e:76:5d:5a:bb:48:04:05: 44:21:43:be:33:ec:e6:8d:63:7b:43:3d:50:1c:e2:ab:c6:fd: 9e:5f:2a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIw8cZkfqcHUAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZDEwMDliYjItOTQ3YS00MmVlLTliOGItNjkzNDliNDE4NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZNceg3bYrCG2DYIoYEBaPk46u9Fq36lLO7c Y8OUEZDk3LXrnjki7FuWY4kazfp9zK9vLs9cYkUVH/3Eoeuccfjz+7XaQJRiSKUt lJB54alnLkoSjG46YzdKhiYIVXB3bWTQt0vR+F0wu9GUptstFqmJiT39MueF3Rh3 r6YaJngLzIwurwXgNhzF/slr+ajR2u0KThyduxjlh+k7lGRA9P+voUQHZ3+kDvUQ XZq75OP4TYhsTS6vjZVJkphrckjuIdrhIqX0iDeVx4rVdGdh1dAtudoweUZ8nnd7 ++6jh+R189o3XYk39MYPlvMUjzRWF3lKqhLb6QswjXrMKCc1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzEBT0qZhxVDM52Gt/ulIcypRU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjM3ZTIyYzEtMWQ1ZS0z ZTU2LWFiODQtMTMxNjI5OGNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADee5RARbDn1mjU7hCRKFMwUVMxM0I7xEE2Vvm1tQO0o4XtVYxoBTBuk FummYxZA8r48TvtwUWht6ZVEZnj8Y87oVSEagdfFuaAKiCEM7ldoZEuCT3qow+zf nYPMv2iMx9d4frqzd+Aa9hx1CZP6QajhIgipruipxGl1iL+KrXXk+Juh0aaLMqQ/ yxfK9dmixGcR46m3/3+U4f6IC6/4fLuXU/gscONd7RuO0WWaYOSbs6wtHf06sbAo T/XfHkhQnySTDnvH6SehLM2CshJH4g828TYpLIBITSEuxqa+VSAdBCR+dl1au0gE BUQhQ74z7OaNY3tDPVAc4qvG/Z5fKlo= -----END CERTIFICATE-----Generated at Thu Jul 10 18:56:09 2025 by rpki-client