$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fb97bfe-a6ec-3c47-9c3d-ed609bc515c0.roa File: 0fb97bfe-a6ec-3c47-9c3d-ed609bc515c0.roa (raw, json) Hash identifier: 6WTTtgMnWXW65CgF4Q8lN/aE610WBS5Y24DwQQJ1hVU= Subject key identifier: FA:F8:F1:A9:46:81:D3:46:9B:97:CC:30:CD:29:27:07:F5:84:80:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77C6A625DBBE25FE21290 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fb97bfe-a6ec-3c47-9c3d-ed609bc515c0.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397199 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:6a:62:5d:bb:e2:5f:e2:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=d1fd4da3-5ece-4f9b-bdae-2e172df09e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:6d:19:8d:b2:a1:1c:c2:f3:db:f6:fa:b1: ef:6a:d1:b8:da:7e:9f:64:8e:88:f0:56:ac:b1:77: c6:0e:bc:d8:3c:e7:8b:23:76:31:4b:64:fb:71:a2: 73:63:d0:5f:ce:09:d2:8b:39:41:db:c2:43:b0:b2: a9:97:72:32:59:ca:df:c2:9b:aa:2c:f9:a5:3b:ee: cc:60:df:86:de:7b:19:34:a1:66:ff:4a:b9:4a:cd: ee:17:4b:01:7c:72:d0:3f:4d:9a:33:41:b8:a2:f2: af:65:b4:17:a1:9e:d1:ba:f7:86:a7:c3:ba:38:35: b4:a8:0f:9b:e2:09:42:16:be:72:a3:35:74:29:25: 4d:54:7e:6c:5a:12:44:7d:bb:a5:12:63:7e:12:7c: 0e:48:07:e6:78:30:c0:83:4f:4e:ff:37:79:b2:52: 4f:61:ee:43:89:59:a8:17:c5:e7:29:a6:4c:b3:c1: d3:4a:15:22:e7:6a:59:71:29:7c:ab:e7:7a:dd:ab: 74:f1:f4:c0:a5:1c:74:ec:ff:2d:2d:d6:90:19:33: 42:48:de:92:94:c0:0a:f7:b2:14:b0:80:1d:85:e5: ae:0d:5f:73:ca:05:96:26:22:35:14:23:26:6d:24: 6c:30:e5:32:74:39:51:03:b6:bc:52:cf:3f:3e:2f: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F8:F1:A9:46:81:D3:46:9B:97:CC:30:CD:29:27:07:F5:84:80:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fb97bfe-a6ec-3c47-9c3d-ed609bc515c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:79:5f:98:2c:6a:ab:9a:66:38:8a:60:51:b0:07:ac:3f:14: d1:d3:24:90:b5:c1:99:95:cd:2c:2d:9f:96:8d:a8:74:51:f1: 5d:b4:d7:83:2d:06:78:ea:9c:73:80:d0:4b:f6:da:7c:76:ca: f5:94:d6:da:00:84:e1:29:e3:8b:76:f0:60:ba:d9:61:e2:81: de:fd:74:eb:b4:45:22:bf:2c:7d:e6:75:ee:b9:88:5b:24:26: 45:b4:76:ef:d3:22:0b:a8:4e:11:37:af:4b:6c:d9:9d:10:55: b7:17:06:ef:6b:96:ed:3a:5e:e4:1b:c4:52:1e:a8:7c:ef:e3: ee:97:f0:63:8a:47:7b:b7:c3:46:32:39:87:f1:49:bc:b9:1b: 73:22:e7:ab:3a:3a:5a:bc:39:f1:38:76:7b:14:11:4d:3a:74: 50:5e:3a:3a:63:1c:ff:20:94:03:87:77:60:9f:d0:3f:7a:32: 1f:40:65:ff:01:3a:f7:cb:62:c9:51:cd:59:04:ad:46:da:5c: e7:b6:bd:cb:79:61:48:5b:31:0d:2f:8a:80:ec:ed:bf:67:04: 8d:7d:22:11:f1:3f:ee:f8:2c:d0:66:08:cc:b8:8d:58:fe:4e: 4d:1b:3c:bd:3f:50:2d:45:7c:8d:b9:b7:23:ee:12:88:41:f1: a4:cc:82:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3xqYl274l/iEpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZDFmZDRkYTMtNWVjZS00ZjliLWJkYWUtMmUxNzJkZjA5ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIptGY2yoRzC89v2+rHvatG42n6fZI6I8Fas sXfGDrzYPOeLI3YxS2T7caJzY9BfzgnSizlB28JDsLKpl3IyWcrfwpuqLPmlO+7M YN+G3nsZNKFm/0q5Ss3uF0sBfHLQP02aM0G4ovKvZbQXoZ7RuveGp8O6ODW0qA+b 4glCFr5yozV0KSVNVH5sWhJEfbulEmN+EnwOSAfmeDDAg09O/zd5slJPYe5DiVmo F8XnKaZMs8HTShUi52pZcSl8q+d63at08fTApRx07P8tLdaQGTNCSN6SlMAK97IU sIAdheWuDV9zygWWJiI1FCMmbSRsMOUydDlRA7a8Us8/Pi+hdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr48alGgdNGm5fMMM0pJwf1hIBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZiOTdiZmUtYTZlYy0z YzQ3LTljM2QtZWQ2MDliYzUxNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR5X5gsaquaZjiKYFGwB6w/FNHTJJC1wZmVzSwtn5aNqHRR8V2014Mt BnjqnHOA0Ev22nx2yvWU1toAhOEp44t28GC62WHigd79dOu0RSK/LH3mde65iFsk JkW0du/TIguoThE3r0ts2Z0QVbcXBu9rlu06XuQbxFIeqHzv4+6X8GOKR3u3w0Yy OYfxSby5G3Mi56s6Olq8OfE4dnsUEU06dFBeOjpjHP8glAOHd2Cf0D96Mh9AZf8B OvfLYslRzVkErUbaXOe2vct5YUhbMQ0vioDs7b9nBI19IhHxP+74LNBmCMy4jVj+ Tk0bPL0/UC1FfI25tyPuEohB8aTMggc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:16 2025 by rpki-client