$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa File: d08e2bc4-06d0-35bf-9749-f8eff9086892.roa (raw, json) Hash identifier: 5J7SPjYQQxxi9Qcudt386jDTowko15u4L+Ug5KLjdGk= Subject key identifier: D2:93:71:DD:52:61:B3:67:03:18:F8:CF:87:54:69:50:80:E6:7D:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ACE0BAC474923EE89D358EDE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 216.168.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ac:47:49:23:ee:89:d3:58:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=ced8f7a7-4b10-4b6f-b3d6-250a0416187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:04:8b:c4:c1:6d:cd:3a:81:3e:f1:b9:cb: 6f:fd:28:38:93:3a:51:f8:f9:8b:0e:6d:b9:3c:91: af:8f:35:ca:bd:39:e3:a3:58:df:de:c0:15:d0:58: 3a:cb:fa:cb:36:67:9d:cf:52:7e:2b:dc:1b:71:90: 03:37:50:fc:76:ee:94:5b:36:99:46:44:38:d6:17: 1a:45:2c:85:b2:22:85:69:c1:29:60:b2:f4:66:b4: 22:98:e7:1a:bc:b6:e2:ee:a7:0c:a7:cb:87:29:7e: ef:91:ff:08:f6:14:9e:ad:b1:0c:17:c2:db:8d:f7: e9:01:38:e7:29:68:a2:24:c0:a4:f2:23:0d:5a:b7: 98:76:08:4f:a5:2e:7a:2f:cc:b9:09:2d:4b:8d:4f: 81:df:2e:30:72:30:59:0b:a7:a4:f2:9b:ed:2f:a0: d0:a1:2e:24:ea:29:60:3f:1e:67:ed:d9:9c:68:e7: c1:26:08:20:c4:8e:33:27:5a:cf:e7:b7:fc:cb:23: ef:51:1a:1b:ff:6c:29:97:61:f9:ba:52:03:17:9b: ef:d9:a7:4d:5d:96:3f:b7:4c:a2:dd:a1:66:49:bb: 1a:44:f0:b7:ea:b0:3e:a6:98:10:d7:0a:31:c1:d1: a7:15:76:65:15:bc:41:e8:a7:0f:db:a8:bf:ab:07: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:93:71:DD:52:61:B3:67:03:18:F8:CF:87:54:69:50:80:E6:7D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3e:59:ed:e6:ca:ee:76:17:65:ed:91:1b:68:c3:1f:f5:fd: 92:79:43:04:09:63:ef:8f:d4:8f:81:0c:82:c8:d6:1a:6c:00: aa:e4:dc:cb:bc:e9:30:e8:b4:09:8f:00:ac:2c:8d:91:ad:e7: a6:fb:ef:59:94:20:41:5a:35:23:d5:3c:6b:eb:02:57:32:9c: 66:b3:11:21:2a:80:59:dd:0d:37:b0:2a:aa:93:a7:93:52:61: d0:ac:16:a2:4d:c6:f7:13:2c:c3:b0:69:42:1b:e0:e0:8c:7d: 2c:19:be:52:59:ac:ab:21:8d:4b:a5:86:04:1b:6e:97:5f:1b: 12:46:d7:dc:54:37:6b:68:ea:99:2d:f2:a3:80:9b:d9:b2:24: 71:5c:7a:05:49:f5:42:ca:5e:45:c8:cf:e9:87:b9:88:78:b0: e4:ef:0c:60:e3:58:e2:64:c3:e6:76:90:2e:73:4b:dd:46:8c: 45:7f:f3:02:5f:18:85:aa:35:73:0c:8d:ef:a0:d2:7c:82:ba: 78:ca:bb:9f:da:3a:53:88:01:9c:9e:a3:c7:52:f6:98:4e:ef: 05:7a:28:54:cf:dc:cb:6b:91:5e:cf:cc:d7:24:6a:0b:4c:b6: 5b:78:d0:18:80:2d:4d:e2:71:19:44:c3:ba:2e:9e:2d:06:86: f9:6f:66:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6xHSSPuidNY7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk Y2VkOGY3YTctNGIxMC00YjZmLWIzZDYtMjUwYTA0MTYxODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUwEi8TBbc06gT7xuctv/Sg4kzpR+PmLDm25 PJGvjzXKvTnjo1jf3sAV0Fg6y/rLNmedz1J+K9wbcZADN1D8du6UWzaZRkQ41hca RSyFsiKFacEpYLL0ZrQimOcavLbi7qcMp8uHKX7vkf8I9hSerbEMF8LbjffpATjn KWiiJMCk8iMNWreYdghPpS56L8y5CS1LjU+B3y4wcjBZC6ek8pvtL6DQoS4k6ilg Px5n7dmcaOfBJgggxI4zJ1rP57f8yyPvURob/2wpl2H5ulIDF5vv2adNXZY/t0yi 3aFmSbsaRPC36rA+ppgQ1woxwdGnFXZlFbxB6KcP26i/qwfbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKTcd1SYbNnAxj4z4dUaVCA5n1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA4ZTJiYzQtMDZkMC0z NWJmLTk3NDktZjhlZmY5MDg2ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM+We3myu52F2XtkRtowx/1/ZJ5QwQJY++P1I+BDILI1hpsAKrk3Mu8 6TDotAmPAKwsjZGt56b771mUIEFaNSPVPGvrAlcynGazESEqgFndDTewKqqTp5NS YdCsFqJNxvcTLMOwaUIb4OCMfSwZvlJZrKshjUulhgQbbpdfGxJG19xUN2to6pkt 8qOAm9myJHFcegVJ9ULKXkXIz+mHuYh4sOTvDGDjWOJkw+Z2kC5zS91GjEV/8wJf GIWqNXMMje+g0nyCunjKu5/aOlOIAZyeo8dS9phO7wV6KFTP3MtrkV7PzNckagtM tlt40BiALU3icRlEw7ouni0GhvlvZjU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:31 2025 by rpki-client