$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa File: 102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa (raw, json) Hash identifier: uUz/x3DfshIS9wgbwDnYgij7iGjOpTzSS21Z54rfWYg= Subject key identifier: 5B:F8:EB:50:D1:8B:1F:66:7B:36:13:93:48:3E:57:25:3B:93:F5:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77AF2B79FCFECE6E00E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396581 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:f2:b7:9f:cf:ec:e6:e0:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=fabe137b-193f-4c35-9405-b29648d6b9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:4c:f6:86:bb:e0:34:58:d6:a6:15:46:3d: 94:8b:86:fe:ba:b8:87:ff:9b:e2:08:1b:f2:82:a3: e0:45:64:90:4c:68:0a:29:2d:a5:da:f5:b0:d7:69: 69:2a:81:e7:9d:3d:f4:57:ca:68:e7:9c:76:d5:3e: 05:34:8b:09:fc:50:8f:d1:d2:9a:0c:bb:a3:4e:af: 08:c6:31:39:2b:6f:dd:9a:f0:3c:12:f1:fe:4b:a4: 89:81:ae:4a:cf:0b:32:f6:bb:9e:69:fb:dd:00:70: 18:95:c4:25:8c:fc:c1:49:6b:eb:88:7b:57:b6:87: 9a:54:7d:18:e4:bc:03:c4:30:71:11:58:66:a1:8c: 6d:97:33:97:6b:90:e7:24:f1:2d:43:9e:3c:36:7a: e7:58:89:b7:41:a9:10:d8:8c:41:69:e5:14:e4:9b: 52:52:47:82:e7:b7:62:67:fe:df:9d:3a:6a:16:f7: 28:73:40:5b:b1:d0:27:02:5b:32:fd:60:02:eb:aa: 62:ab:3b:ad:bd:54:0b:36:49:8b:de:d1:7a:b5:cc: 36:ee:0e:41:62:e7:b3:d8:1d:75:33:80:4b:28:45: e9:39:68:0d:80:f1:be:27:3b:d0:5c:95:65:1e:63: 11:fb:6b:16:8c:4e:aa:38:74:b8:51:e5:1a:b5:53: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:EB:50:D1:8B:1F:66:7B:36:13:93:48:3E:57:25:3B:93:F5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:06:45:10:92:21:75:20:c3:68:a7:80:fe:a9:f8:98:e1:88: ab:6a:ad:fa:27:45:4a:69:8e:9a:e7:4c:bc:91:96:63:87:a3: 61:df:48:c6:3e:a3:cb:d2:d1:62:17:1f:96:3f:29:9f:65:c1: 7f:ee:8d:5c:f1:b3:ec:86:35:0f:bf:19:68:35:7d:32:14:8c: 2f:90:2b:b3:ef:08:aa:20:0d:65:21:b1:c9:40:33:97:01:a4: 76:73:2a:f9:fb:9d:4c:3b:19:c8:68:5b:8c:53:c3:8f:38:30: 5c:6b:e3:3e:82:72:b2:e1:1d:3d:34:d5:8c:bf:8b:68:ef:dd: 11:b4:5c:30:0d:a8:50:68:31:58:92:be:f4:4b:43:d7:03:16: ec:4b:45:a5:e4:e6:99:69:81:0b:43:15:6e:20:c9:16:3c:01: 0e:87:8d:3d:be:ab:f8:33:b4:3a:3a:4c:f7:db:1a:97:27:5b: 16:b5:20:cf:e1:66:73:c1:a2:c2:af:6e:90:a1:65:03:8e:60: 4d:90:82:73:f6:44:2d:47:02:87:84:8c:6a:86:d0:33:8c:50: d9:92:c6:8a:f9:10:cf:44:96:e8:0b:3e:f7:06:b2:d2:65:42: 9b:8e:7f:91:6b:26:3c:2e:f6:09:0f:dc:54:59:ef:84:e6:90: 37:ff:17:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3ryt5/P7ObgDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZmFiZTEzN2ItMTkzZi00YzM1LTk0MDUtYjI5NjQ4ZDZiOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5tM9oa74DRY1qYVRj2Ui4b+uriH/5viCBvy gqPgRWSQTGgKKS2l2vWw12lpKoHnnT30V8po55x21T4FNIsJ/FCP0dKaDLujTq8I xjE5K2/dmvA8EvH+S6SJga5Kzwsy9rueafvdAHAYlcQljPzBSWvriHtXtoeaVH0Y 5LwDxDBxEVhmoYxtlzOXa5DnJPEtQ548NnrnWIm3QakQ2IxBaeUU5JtSUkeC57di Z/7fnTpqFvcoc0BbsdAnAlsy/WAC66piqzutvVQLNkmL3tF6tcw27g5BYuez2B11 M4BLKEXpOWgNgPG+JzvQXJVlHmMR+2sWjE6qOHS4UeUatVOB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv461DRix9mezYTk0g+VyU7k/VYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAyY2UwMjEtODYxMi0z Yjg1LWI3NGUtNWEyZWMyZjllMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcGRRCSIXUgw2ingP6p+JjhiKtqrfonRUppjprnTLyRlmOHo2HfSMY+ o8vS0WIXH5Y/KZ9lwX/ujVzxs+yGNQ+/GWg1fTIUjC+QK7PvCKogDWUhsclAM5cB pHZzKvn7nUw7GchoW4xTw484MFxr4z6CcrLhHT001Yy/i2jv3RG0XDANqFBoMViS vvRLQ9cDFuxLRaXk5plpgQtDFW4gyRY8AQ6HjT2+q/gztDo6TPfbGpcnWxa1IM/h ZnPBosKvbpChZQOOYE2QgnP2RC1HAoeEjGqG0DOMUNmSxor5EM9ElugLPvcGstJl QpuOf5FrJjwu9gkP3FRZ74TmkDf/F+w= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:01 2025 by rpki-client