$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bb15674-31ab-3096-baff-fdae36cbfcb4.roa File: 0bb15674-31ab-3096-baff-fdae36cbfcb4.roa (raw, json) Hash identifier: jUw/T7qu3yyZWDfck+gxaF0HOmpU0POQQhZ/CJop+vE= Subject key identifier: 8B:D2:6E:A5:FC:58:7B:94:B5:92:FA:37:1D:7A:0D:FB:55:5A:11:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC778AD0B2715F08C8BD0A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bb15674-31ab-3096-baff-fdae36cbfcb4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396565 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:ad:0b:27:15:f0:8c:8b:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=db0944e4-188a-47e8-a9ca-e2c3f3855caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a9:3a:70:ed:b1:14:4b:fb:13:a2:93:a8:af: ff:6d:35:46:f8:e1:fd:dd:82:09:48:fb:4e:0d:45: cf:46:cb:7f:a4:c3:9b:b5:f0:e5:d3:fa:7b:05:28: 80:e8:03:40:32:e3:16:d2:cc:21:96:6b:37:fa:1b: f5:3d:88:a3:59:fe:72:7a:a5:51:f2:ec:ad:bb:9e: 28:26:a8:b8:b5:15:0e:e1:46:86:0d:af:e0:aa:d7: 6e:6d:9e:8c:c4:50:b0:ad:70:4b:0c:f2:06:a6:e1: 6f:1a:d8:67:b3:bb:f8:01:7d:ec:96:8b:99:ef:d6: 52:e3:d8:56:85:b0:b3:4a:12:69:07:c3:a4:f8:05: f2:6c:22:00:f9:f0:10:9f:83:07:2a:e4:66:a0:19: 31:3c:a5:43:f9:5e:07:22:e5:d0:53:ef:93:d5:09: ba:37:29:8e:8b:f7:96:64:9f:6c:fa:51:71:cf:7d: c2:2a:86:99:d0:f9:f1:d5:62:bb:dd:4a:36:81:b0: cb:2d:03:e6:37:9d:6e:87:a8:19:59:8b:4a:61:e5: 49:51:89:04:2b:43:5b:a7:fb:d9:1d:e7:f5:0a:7c: ab:9a:9b:c4:65:f4:0c:3f:18:f8:02:b8:7f:9b:bb: 59:49:4b:e9:44:94:02:f1:39:51:4d:c5:87:66:80: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:6E:A5:FC:58:7B:94:B5:92:FA:37:1D:7A:0D:FB:55:5A:11:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bb15674-31ab-3096-baff-fdae36cbfcb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:58:92:29:15:b2:81:92:01:a2:9c:82:ec:94:e1:e6:f9:62: 27:37:41:48:07:7a:61:56:5e:c6:a2:3c:17:85:92:5a:a3:a1: a3:e1:91:e0:0f:a3:e4:88:ca:d5:c7:0c:18:3b:c7:49:c0:79: 79:58:ad:78:27:83:71:f3:1b:cd:1b:46:78:f3:ac:f9:1f:5e: 18:0a:fb:00:4f:c6:48:20:db:56:af:af:b7:b4:c2:ab:dc:68: 04:19:dc:53:88:5d:c6:26:35:ef:9d:21:12:34:77:db:18:48: 02:9a:7d:42:63:03:c4:e0:44:be:f7:18:ca:15:ca:7e:1b:c8: 00:57:f6:43:95:98:22:34:f4:48:c2:ed:e2:cf:6f:9d:00:9f: 91:78:22:32:36:33:06:b7:e1:c3:6c:e0:dc:58:01:2d:1e:c8: 07:36:b0:f4:3b:8a:0a:4c:6d:af:ac:30:3c:1e:e6:75:05:05: 71:bf:98:e5:4a:0d:ff:6b:e2:61:da:eb:06:8b:da:fb:84:e4: 89:fe:74:61:1b:12:97:d7:2d:11:76:f9:e7:84:6a:a4:80:e1: 35:67:be:87:ac:d8:fa:12:a6:97:17:37:9d:c6:27:c0:2f:11: 8c:fa:af:ae:71:98:94:e6:73:1c:72:2e:48:69:05:2c:0f:bf: 12:4b:99:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3itCycV8IyL0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZGIwOTQ0ZTQtMTg4YS00N2U4LWE5Y2EtZTJjM2YzODU1Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKk6cO2xFEv7E6KTqK//bTVG+OH93YIJSPtO DUXPRst/pMObtfDl0/p7BSiA6ANAMuMW0swhlms3+hv1PYijWf5yeqVR8uytu54o Jqi4tRUO4UaGDa/gqtdubZ6MxFCwrXBLDPIGpuFvGthns7v4AX3slouZ79ZS49hW hbCzShJpB8Ok+AXybCIA+fAQn4MHKuRmoBkxPKVD+V4HIuXQU++T1Qm6NymOi/eW ZJ9s+lFxz33CKoaZ0Pnx1WK73Uo2gbDLLQPmN51uh6gZWYtKYeVJUYkEK0Nbp/vZ Hef1CnyrmpvEZfQMPxj4Arh/m7tZSUvpRJQC8TlRTcWHZoDaVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvSbqX8WHuUtZL6Nx16DftVWhFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGJiMTU2NzQtMzFhYi0z MDk2LWJhZmYtZmRhZTM2Y2JmY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChYkikVsoGSAaKcguyU4eb5Yic3QUgHemFWXsaiPBeFklqjoaPhkeAP o+SIytXHDBg7x0nAeXlYrXgng3HzG80bRnjzrPkfXhgK+wBPxkgg21avr7e0wqvc aAQZ3FOIXcYmNe+dIRI0d9sYSAKafUJjA8TgRL73GMoVyn4byABX9kOVmCI09EjC 7eLPb50An5F4IjI2Mwa34cNs4NxYAS0eyAc2sPQ7igpMba+sMDwe5nUFBXG/mOVK Df9r4mHa6waL2vuE5In+dGEbEpfXLRF2+eeEaqSA4TVnvoes2PoSppcXN53GJ8Av EYz6r65xmJTmcxxyLkhpBSwPvxJLmRM= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:31 2025 by rpki-client