$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa File: 849f041b-2e30-30e5-b488-bf73e770191d.roa (raw, json) Hash identifier: FZijXv+hDsdRF3ZMr8VE/OMk7zpDkF5SrWHtoQIEBzA= Subject key identifier: 91:9F:4D:2B:C0:19:F2:B0:FD:15:5B:C5:27:DA:DA:40:B0:E5:C8:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ACE0BABF3497D41A50B01C900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 216.168.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ab:f3:49:7d:41:a5:0b:01:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=1ed71471-fc0e-4883-b5f2-ff45196d53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:1d:76:7c:bd:9f:a1:7d:7d:26:56:54:01: 19:ee:6c:f1:23:6b:17:a4:35:a7:56:5c:da:b1:8c: 83:1e:a5:44:96:6b:e0:b5:16:2b:a2:9b:84:43:40: ca:35:cd:b7:46:47:ec:58:13:e7:ba:bd:e9:09:cd: 17:a8:51:2c:e1:fc:62:b2:6a:52:b2:26:41:04:43: e7:5c:a5:95:8f:ce:a7:3b:a2:f4:97:3d:c1:cb:3c: e8:2b:60:bc:f0:8f:d4:c1:57:b0:6f:c4:8d:e6:c1: d0:70:d0:b3:c4:73:82:ea:b4:eb:70:00:0a:d4:63: 51:fb:ef:04:e9:7e:3e:9e:b1:17:1e:e4:6b:57:5a: 0e:87:3f:f5:c7:73:cc:15:85:84:1b:95:00:1a:d8: f1:60:4b:2e:df:6c:f7:25:32:3c:02:7c:53:75:57: 4a:45:98:32:77:13:f6:20:0e:25:ec:0c:61:10:1c: d8:9b:dc:48:aa:de:31:0a:ac:55:b8:38:62:15:d7: 60:88:03:37:75:62:37:52:d8:7e:9c:03:f1:8d:4a: a8:7e:ec:ac:59:a6:4c:3c:05:b8:2b:a5:6a:65:cd: 5e:2a:a4:57:3a:9a:b1:42:f4:ee:5c:d2:53:3c:96: fe:89:78:e2:a3:ce:4a:fd:ea:09:e3:ab:0a:d8:f8: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9F:4D:2B:C0:19:F2:B0:FD:15:5B:C5:27:DA:DA:40:B0:E5:C8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:69:bd:aa:9c:52:4f:ea:97:76:27:21:76:1a:bb:3d:54:ec: 92:27:f7:af:20:d8:09:ea:ee:5a:49:fb:cd:e0:27:21:42:0c: 28:58:6f:be:bc:4d:e2:d8:d7:60:4f:08:8e:84:29:02:56:2c: 57:9f:d8:7f:31:db:cb:65:79:f1:a3:8a:79:c9:ba:f0:07:64: 0d:77:7f:fc:36:72:80:4a:32:49:2b:de:5a:45:41:ea:34:30: d9:bd:03:43:79:b2:aa:30:e4:57:21:71:56:43:05:50:c9:e6: 0e:3f:19:cc:2b:20:43:83:88:fd:ca:24:67:04:51:a4:cb:79: 79:36:12:a9:95:48:67:62:9b:2b:e2:9c:0a:11:93:85:03:f3: 35:b9:05:16:78:89:4f:49:c8:90:84:e6:0c:5f:65:59:f2:db: fd:bd:74:df:5f:76:56:12:f7:04:da:cc:24:17:c3:6b:46:bc: ea:fa:93:33:a0:03:1f:9a:0d:ea:56:73:91:e2:1d:23:39:9b: 48:69:ec:bb:76:3f:6d:df:0d:3e:03:95:7c:9d:f2:ee:fa:16: e7:fe:21:68:39:1d:76:68:4e:1e:a8:37:02:ef:8e:0e:81:7b: b9:53:2b:86:20:58:83:99:f2:5a:a1:fd:96:5e:7d:27:dc:57: c9:f6:38:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6vzSX1BpQsByQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MWVkNzE0NzEtZmMwZS00ODgzLWI1ZjItZmY0NTE5NmQ1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqQddny9n6F9fSZWVAEZ7mzxI2sXpDWnVlza sYyDHqVElmvgtRYropuEQ0DKNc23RkfsWBPnur3pCc0XqFEs4fxismpSsiZBBEPn XKWVj86nO6L0lz3ByzzoK2C88I/UwVewb8SN5sHQcNCzxHOC6rTrcAAK1GNR++8E 6X4+nrEXHuRrV1oOhz/1x3PMFYWEG5UAGtjxYEsu32z3JTI8AnxTdVdKRZgydxP2 IA4l7AxhEBzYm9xIqt4xCqxVuDhiFddgiAM3dWI3Uth+nAPxjUqofuysWaZMPAW4 K6VqZc1eKqRXOpqxQvTuXNJTPJb+iXjio85K/eoJ46sK2Pg6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGfTSvAGfKw/RVbxSfa2kCw5cjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQ5ZjA0MWItMmUzMC0z MGU1LWI0ODgtYmY3M2U3NzAxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlpvaqcUk/ql3YnIXYauz1U7JIn968g2Anq7lpJ+83gJyFCDChYb768 TeLY12BPCI6EKQJWLFef2H8x28tlefGjinnJuvAHZA13f/w2coBKMkkr3lpFQeo0 MNm9A0N5sqow5FchcVZDBVDJ5g4/GcwrIEODiP3KJGcEUaTLeXk2EqmVSGdimyvi nAoRk4UD8zW5BRZ4iU9JyJCE5gxfZVny2/29dN9fdlYS9wTazCQXw2tGvOr6kzOg Ax+aDepWc5HiHSM5m0hp7Lt2P23fDT4DlXyd8u76Fuf+IWg5HXZoTh6oNwLvjg6B e7lTK4YgWIOZ8lqh/ZZefSfcV8n2OJ8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:00 2025 by rpki-client