$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa File: 0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa (raw, json) Hash identifier: n4XyuCQNOxdHF7YoJyRoYyJi3pH2dsqZWiu/O60dyS8= Subject key identifier: 79:C3:A9:5C:A3:A7:7B:D6:46:F1:0A:03:F1:1E:A4:AD:07:8E:5B:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC7782D1F4CC005D492E100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396604 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:2d:1f:4c:c0:05:d4:92:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4bf47ab4-d2bc-4d75-a2d2-fc1e77e73fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fa:29:77:89:29:c2:23:07:f5:83:a3:93:b4: 59:c0:ab:e5:5f:72:c1:8a:7b:38:50:a8:47:01:91: d9:e9:60:fb:38:88:10:8c:c9:a8:99:7b:84:26:d0: 58:7d:c2:85:e8:1b:55:2b:f7:29:f7:30:f9:8d:a4: ae:05:a6:24:e0:1c:45:c7:46:22:8c:99:c9:f6:07: 54:be:88:b1:c3:99:32:a0:96:8e:f5:54:47:83:35: 03:dd:11:5f:05:78:69:a8:a7:41:b8:83:f9:73:e7: d1:e1:8d:ce:3b:e4:6d:7c:35:c3:69:3d:e1:bc:d6: b7:5b:07:b6:19:f2:2e:1a:f7:de:ef:3f:80:c0:11: 3f:6a:7c:88:90:f3:93:59:26:ed:e4:4c:d3:8f:a9: 63:78:47:fe:ca:c5:7c:75:88:8e:19:4c:d2:a8:6e: e0:a2:b3:48:36:9e:b5:c1:84:24:07:70:bc:5c:f7: d8:b3:bc:18:cc:e2:39:44:4f:0f:68:a9:9e:ff:36: 4e:97:d5:95:68:1f:ab:8f:d1:91:ea:66:60:b6:eb: 03:eb:3c:c4:39:16:46:24:f7:6e:9b:f5:c1:f7:51: ce:9b:17:af:d3:64:48:18:a0:fe:cd:3a:19:c4:e1: 68:e9:e0:71:c4:e5:df:56:3c:f9:ef:01:79:c7:d3: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C3:A9:5C:A3:A7:7B:D6:46:F1:0A:03:F1:1E:A4:AD:07:8E:5B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ab9061d-94f7-36ee-ae97-d17b2c8eb73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:14:5c:d1:d3:e7:0c:cd:a4:af:eb:83:71:5b:7b:08:05:c4: e7:be:13:8e:50:06:d2:eb:6a:1d:c4:09:54:da:7d:c4:62:31: 68:7f:65:66:af:9c:2c:7d:77:83:80:17:60:a7:23:62:94:71: eb:0c:f4:15:0f:51:2a:27:86:8b:9a:fe:5d:96:62:c9:c4:67: c0:46:d4:ee:23:62:07:b2:e9:80:93:47:c1:60:fc:75:a7:9c: b7:05:5e:20:f4:a1:2b:28:2c:cb:72:6f:46:d6:18:f2:ef:12: 30:c6:6c:1b:af:f7:8e:97:5e:96:55:be:00:d7:99:d2:49:99: ba:c4:34:80:87:8b:c9:7b:af:56:12:47:d8:54:ca:8d:26:88: c9:80:b9:3e:70:d9:57:67:be:5b:e8:ee:1c:4e:89:ca:f1:a5: fc:90:1c:47:75:d2:fd:65:29:59:89:36:1d:16:57:e5:ab:1c: 63:15:54:fe:fa:a8:9c:8b:21:b0:86:9f:42:5c:b5:37:68:0b: 42:3d:ad:d5:7c:82:f6:00:09:c2:14:90:8c:59:0c:e7:c3:ac: 54:ae:c2:1d:7b:b0:3f:b9:73:ae:18:a4:4c:83:62:62:07:94: 17:e8:24:07:5b:3a:89:31:83:8b:9a:c3:cb:dc:c0:0e:08:79: 79:2c:ba:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3gtH0zABdSS4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGJmNDdhYjQtZDJiYy00ZDc1LWEyZDItZmMxZTc3ZTczZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPopd4kpwiMH9YOjk7RZwKvlX3LBins4UKhH AZHZ6WD7OIgQjMmomXuEJtBYfcKF6BtVK/cp9zD5jaSuBaYk4BxFx0YijJnJ9gdU voixw5kyoJaO9VRHgzUD3RFfBXhpqKdBuIP5c+fR4Y3OO+RtfDXDaT3hvNa3Wwe2 GfIuGvfe7z+AwBE/anyIkPOTWSbt5EzTj6ljeEf+ysV8dYiOGUzSqG7gorNINp61 wYQkB3C8XPfYs7wYzOI5RE8PaKme/zZOl9WVaB+rj9GR6mZgtusD6zzEORZGJPdu m/XB91HOmxev02RIGKD+zToZxOFo6eBxxOXfVjz57wF5x9O3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnDqVyjp3vWRvEKA/EepK0HjlthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFiOTA2MWQtOTRmNy0z NmVlLWFlOTctZDE3YjJjOGViNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAUXNHT5wzNpK/rg3FbewgFxOe+E45QBtLrah3ECVTafcRiMWh/ZWav nCx9d4OAF2CnI2KUcesM9BUPUSonhoua/l2WYsnEZ8BG1O4jYgey6YCTR8Fg/HWn nLcFXiD0oSsoLMtyb0bWGPLvEjDGbBuv946XXpZVvgDXmdJJmbrENICHi8l7r1YS R9hUyo0miMmAuT5w2Vdnvlvo7hxOicrxpfyQHEd10v1lKVmJNh0WV+WrHGMVVP76 qJyLIbCGn0JctTdoC0I9rdV8gvYACcIUkIxZDOfDrFSuwh17sD+5c64YpEyDYmIH lBfoJAdbOokxg4uaw8vcwA4IeXksujg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:59 2025 by rpki-client