$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa File: 0fea01bf-4ec4-3c5e-bc01-51029a773988.roa (raw, json) Hash identifier: U4qPaPeYc5Row5BK78BZ82Ez6syBlXHOEcAu5lNOun0= Subject key identifier: 2E:BB:40:5E:DB:F1:2F:26:6E:D6:6E:D7:38:20:1C:47:35:21:40:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC779D363D6295347A076AF Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 36625 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:d3:63:d6:29:53:47:a0:76:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=1e54a132-b718-4c85-8de7-627e10ec7a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ea:4e:02:1a:dc:32:8b:a6:84:54:29:48:c5: 2b:e2:e7:b9:ab:6a:be:50:cb:2f:1a:9a:52:35:06: c8:c8:f1:80:e3:c3:54:14:c7:58:05:7d:5c:af:45: 6e:a8:6f:5a:48:e9:2a:43:bc:c1:ec:f2:d6:43:e4: 97:9b:64:c0:b7:a1:bb:67:bc:2f:91:09:73:ab:ee: 44:ce:cd:69:d2:da:3c:17:67:76:bc:97:76:53:fc: 35:6b:9b:b1:55:26:5c:fb:12:b8:a6:74:44:1d:5f: 13:be:88:7f:18:02:69:a0:2d:a4:05:85:21:0e:06: e0:fe:32:72:9a:25:79:54:0c:35:9e:56:4e:fd:77: a1:73:72:5f:d7:35:41:b2:60:2e:c5:7a:fb:cb:ff: 37:45:b1:dd:f4:8f:8a:1c:93:75:67:0e:ea:9d:2e: 33:2c:f1:9c:0f:34:a3:40:e5:38:5a:cf:97:22:ef: 6b:0c:e9:1f:5b:4a:7d:01:42:42:c6:98:76:0b:68: dc:1f:ca:9e:68:6e:70:bb:40:8c:86:f8:24:52:a9: 7d:d9:6a:d6:97:11:71:ef:36:2d:32:25:87:3f:14: 54:94:96:7a:0f:a3:80:36:ef:a9:dc:c9:9b:b3:67: d3:e4:d7:72:11:04:ef:be:6a:1e:0d:d3:3e:84:43: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:40:5E:DB:F1:2F:26:6E:D6:6E:D7:38:20:1C:47:35:21:40:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:af:18:a0:59:37:27:41:1a:54:31:12:45:89:93:bb:67:87: 49:50:1a:5f:1a:6c:df:24:2a:64:c6:14:7b:7d:5d:ec:10:3d: aa:13:0a:16:8a:03:76:1d:07:16:96:21:35:83:21:a2:c5:1c: 9e:8f:3c:bc:61:e2:9d:89:e1:d7:a0:13:05:45:50:07:b3:c8: 09:27:80:a3:3f:ea:d6:a4:1c:ce:cf:02:d7:dd:1c:a5:9f:8b: 4f:68:b6:47:1a:bb:e4:23:e7:1a:db:54:26:29:49:a6:5f:16: 8c:0e:bd:1d:19:4f:3c:e2:35:4d:f9:bc:0b:2f:59:ed:55:f4: b1:30:27:0f:e3:25:cd:66:64:c2:91:d4:32:cb:65:e1:cc:32: 41:0d:a5:03:ec:2a:5c:68:83:1d:68:48:d7:5c:6e:6d:37:27: e6:b8:4b:17:b5:79:21:49:c2:88:e5:42:7e:40:48:70:c6:43: c7:d2:5f:59:79:49:1d:74:bf:59:f9:73:c8:ee:28:eb:d0:1d: a7:df:9c:ff:4a:c5:f2:ee:21:b7:ff:ea:45:b4:d0:53:e4:3b: 92:b5:a2:40:04:42:77:41:02:39:af:d4:23:0e:06:2c:20:96: be:20:b6:93:d5:08:02:3f:94:14:e8:7c:a5:c8:bb:b8:8c:93: 94:2d:49:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3nTY9YpU0egdq8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MWU1NGExMzItYjcxOC00Yzg1LThkZTctNjI3ZTEwZWM3YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgepOAhrcMoumhFQpSMUr4ue5q2q+UMsvGppS NQbIyPGA48NUFMdYBX1cr0VuqG9aSOkqQ7zB7PLWQ+SXm2TAt6G7Z7wvkQlzq+5E zs1p0to8F2d2vJd2U/w1a5uxVSZc+xK4pnREHV8Tvoh/GAJpoC2kBYUhDgbg/jJy miV5VAw1nlZO/Xehc3Jf1zVBsmAuxXr7y/83RbHd9I+KHJN1Zw7qnS4zLPGcDzSj QOU4Ws+XIu9rDOkfW0p9AUJCxph2C2jcH8qeaG5wu0CMhvgkUql92WrWlxFx7zYt MiWHPxRUlJZ6D6OANu+p3Mmbs2fT5NdyEQTvvmoeDdM+hEMocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC67QF7b8S8mbtZu1zggHEc1IUDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZlYTAxYmYtNGVjNC0z YzVlLWJjMDEtNTEwMjlhNzczOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuvGKBZNydBGlQxEkWJk7tnh0lQGl8abN8kKmTGFHt9XewQPaoTChaK A3YdBxaWITWDIaLFHJ6PPLxh4p2J4degEwVFUAezyAkngKM/6takHM7PAtfdHKWf i09otkcau+Qj5xrbVCYpSaZfFowOvR0ZTzziNU35vAsvWe1V9LEwJw/jJc1mZMKR 1DLLZeHMMkENpQPsKlxogx1oSNdcbm03J+a4Sxe1eSFJwojlQn5ASHDGQ8fSX1l5 SR10v1n5c8juKOvQHaffnP9KxfLuIbf/6kW00FPkO5K1okAEQndBAjmv1CMOBiwg lr4gtpPVCAI/lBTofKXIu7iMk5QtSYg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:42 2025 by rpki-client