$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa File: 0b790125-1c37-32a2-9a6f-6d1917a58a47.roa (raw, json) Hash identifier: xlXsj6ogQINZy8i96VV0EIN3ZXuuflwEF9Ke3T82b2A= Subject key identifier: 31:AF:A8:1F:8A:3C:2D:B1:D4:C0:6C:AD:8F:AE:E8:1E:98:31:3D:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB16333247B9154810F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396561 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:63:33:24:7b:91:54:81:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=febac7e3-a42d-4e41-b4c0-f84ab61b1eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:00:4d:8a:b7:46:85:70:4a:ed:33:e9:0d: 47:1e:87:ae:b9:1f:81:ca:f7:1c:e3:bf:8e:12:2a: 2b:4a:ce:40:c0:bf:27:4e:22:06:fd:73:92:1a:61: 31:56:70:06:ec:5c:21:38:3c:6d:59:18:a4:d4:2a: 58:b1:b2:14:aa:c5:0c:38:a4:51:6d:12:a0:e6:44: f3:80:4a:ae:c3:ca:3a:5e:32:cb:1d:58:64:77:fc: 33:f6:63:33:72:a2:86:02:18:d9:37:5f:2b:27:f3: fb:95:c6:16:89:58:16:47:23:d6:cc:bb:ee:d9:a6: c6:3b:b6:d4:ad:0f:64:2b:88:c2:30:fa:d9:d8:74: ad:de:47:9d:2b:b7:ba:4e:9c:06:88:55:93:51:aa: ab:a5:11:70:10:12:52:65:7d:0f:e2:8e:07:85:ba: 39:bc:73:0c:3b:2f:f4:4b:f5:6b:69:f9:4f:55:07: bf:9b:08:26:80:25:c4:06:46:3e:96:30:03:cd:45: 3d:2b:99:1f:df:10:9a:70:e6:00:98:7d:44:29:0e: 18:42:34:7a:90:4f:b4:92:bc:16:8b:13:a7:cb:63: d9:80:4b:fa:56:83:75:90:6b:a9:84:37:b0:a4:9d: d7:f2:9b:10:2d:37:c8:10:1d:cf:95:7b:41:73:86: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:A8:1F:8A:3C:2D:B1:D4:C0:6C:AD:8F:AE:E8:1E:98:31:3D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a4:c4:3f:e3:85:f8:4c:c9:5a:2e:12:06:0d:42:48:38:85: 61:d7:51:44:38:f4:13:d9:89:56:8b:df:22:df:0f:f1:f0:42: 9e:8b:6f:3a:c1:95:1b:7b:05:28:78:22:94:ef:b6:d6:12:21: 92:46:cb:da:76:cc:21:1f:6d:8c:70:14:33:0a:a8:14:eb:93: 37:38:40:3a:87:56:38:5d:6f:c9:7e:17:82:58:ab:37:54:4a: b5:99:33:dd:ce:6a:ac:1c:c3:1d:bb:d7:40:f1:36:11:3f:44: c0:24:ab:eb:d9:25:51:68:22:03:ef:dc:01:06:2c:bf:30:bb: ca:db:e7:b9:48:0e:51:15:5a:1b:e4:07:be:2e:e5:1a:6d:4e: a7:21:b7:a6:5b:26:34:54:4a:c6:09:c3:51:66:b2:2b:4c:a3: ba:9a:79:a3:dd:bf:38:9a:0f:38:fa:59:c5:60:34:40:3e:92: 0f:d6:02:77:9b:46:a8:09:c6:b7:84:36:d2:e1:63:8d:ef:a9: 5a:29:c7:97:94:00:8d:2e:27:f6:4c:98:1d:ba:d0:14:83:e9: e7:a3:df:de:01:5c:a4:11:83:19:f9:ff:45:44:98:52:4c:4e: fb:2f:38:45:e7:d4:58:a0:be:77:4f:35:77:10:41:88:0d:96: b8:5f:08:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLFjMyR7kVSBD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmViYWM3ZTMtYTQyZC00ZTQxLWI0YzAtZjg0YWI2MWIxZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLYATYq3RoVwSu0z6Q1HHoeuuR+Byvcc47+O EiorSs5AwL8nTiIG/XOSGmExVnAG7FwhODxtWRik1CpYsbIUqsUMOKRRbRKg5kTz gEquw8o6XjLLHVhkd/wz9mMzcqKGAhjZN18rJ/P7lcYWiVgWRyPWzLvu2abGO7bU rQ9kK4jCMPrZ2HSt3kedK7e6TpwGiFWTUaqrpRFwEBJSZX0P4o4Hhbo5vHMMOy/0 S/VraflPVQe/mwgmgCXEBkY+ljADzUU9K5kf3xCacOYAmH1EKQ4YQjR6kE+0krwW ixOny2PZgEv6VoN1kGuphDewpJ3X8psQLTfIEB3PlXtBc4bGnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDGvqB+KPC2x1MBsrY+u6B6YMT2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI3OTAxMjUtMWMzNy0z MmEyLTlhNmYtNmQxOTE3YTU4YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANpMQ/44X4TMlaLhIGDUJIOIVh11FEOPQT2YlWi98i3w/x8EKei286 wZUbewUoeCKU77bWEiGSRsvadswhH22McBQzCqgU65M3OEA6h1Y4XW/JfheCWKs3 VEq1mTPdzmqsHMMdu9dA8TYRP0TAJKvr2SVRaCID79wBBiy/MLvK2+e5SA5RFVob 5Ae+LuUabU6nIbemWyY0VErGCcNRZrIrTKO6mnmj3b84mg84+lnFYDRAPpIP1gJ3 m0aoCca3hDbS4WON76laKceXlACNLif2TJgdutAUg+nno9/eAVykEYMZ+f9FRJhS TE77LzhF59RYoL53TzV3EEGIDZa4Xwjj -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:56 2025 by rpki-client