$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142fedaf-e3f9-3830-b8b1-5edf631c3964.roa File: 142fedaf-e3f9-3830-b8b1-5edf631c3964.roa (raw, json) Hash identifier: ytfwLi1Nn/37zj6oMwdfV9PskMC1+gSevACOBWEQ7DQ= Subject key identifier: AB:09:DE:2D:F7:D5:22:CE:DA:1B:D8:A6:52:52:12:3C:DB:25:C0:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC778EEA6ADE4220F5DE240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142fedaf-e3f9-3830-b8b1-5edf631c3964.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397211 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:ee:a6:ad:e4:22:0f:5d:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=18671ae7-04e9-40df-96cf-043f518a29c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:75:c8:6a:de:48:b9:2b:28:c9:f6:d8:7b: e5:8c:4e:f5:3b:04:c8:bb:33:4d:c8:11:1d:ee:fb: d4:dd:44:37:bd:e3:bf:89:c2:ee:0c:0b:a7:56:0f: 34:4c:a0:d6:74:d2:df:fc:29:5e:ec:03:7f:f4:0f: 81:62:58:3e:89:08:65:76:fa:1f:a6:ed:4b:e3:9a: 0c:d0:22:ce:25:26:ac:0e:d1:70:15:ab:0a:84:87: 65:f9:95:5d:4e:2a:84:14:6e:53:a6:8d:40:13:95: d0:13:d5:41:4b:0d:60:75:57:be:b7:3c:9b:24:0b: 49:05:c6:df:fb:15:2b:ed:0d:aa:41:aa:14:35:b0: 23:0f:e7:ac:6e:2b:f7:33:7e:ef:0d:24:af:26:f3: d7:2a:2f:ca:0d:d2:c9:bc:f5:c7:b0:c5:51:4f:12: 3c:81:f4:15:b2:41:f9:10:f2:bc:c3:d5:ee:aa:f7: ed:f6:34:2d:44:49:33:42:94:59:42:cf:3b:21:66: 6c:d4:2d:45:f2:8b:b6:cc:2d:f7:26:d9:2d:6a:83: ac:0a:60:9d:95:cc:2f:33:9f:84:18:5f:66:24:bb: 31:42:b7:e0:f4:7e:08:14:7f:7e:88:d2:b1:9a:6e: f3:5d:24:44:53:f3:6b:5e:fa:13:88:0c:55:50:f2: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:09:DE:2D:F7:D5:22:CE:DA:1B:D8:A6:52:52:12:3C:DB:25:C0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142fedaf-e3f9-3830-b8b1-5edf631c3964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5a:68:3b:63:c2:32:e6:0d:24:2c:0b:33:e6:5f:9c:87:db: 7c:3b:a6:88:e2:b4:54:3e:91:7a:24:b5:71:b9:d2:fa:75:e9: 87:2d:85:a8:75:15:98:80:8b:a4:ef:e9:06:66:36:49:b5:37: e6:8f:af:a9:53:ac:a6:2c:05:ce:04:e3:fd:7d:7e:47:8b:de: 18:ad:f5:d3:2e:bf:f3:ec:8a:7c:b0:cf:29:c8:44:c9:dd:5c: f8:08:6b:85:36:53:89:f2:14:60:62:ad:de:52:cc:bb:18:7a: a9:f5:e6:22:48:86:fe:6f:d2:34:d3:99:86:fe:3c:ee:e3:b5: 7b:37:60:7c:d7:e9:72:f5:b6:e5:47:91:70:f1:d2:2b:29:c6: 2c:7c:41:60:ed:90:00:49:82:a4:47:30:03:d6:fb:ff:7d:b3: 4f:ce:08:fe:d3:94:3c:3a:12:04:2a:c7:58:a6:b5:c9:93:ed: df:f2:b5:0d:de:47:dd:f2:54:d5:5e:c4:c9:d1:3d:63:50:cd: bd:31:9f:c8:60:6f:c1:3f:ce:6d:0f:2c:a7:1a:75:75:f6:89: 49:f1:e0:a2:13:26:64:0b:8d:45:6a:47:57:88:cb:e3:13:46: 3a:28:58:6a:4c:af:75:0a:a7:b2:08:7f:a8:b0:6d:41:9e:16: bb:1d:d6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3jupq3kIg9d4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTg2NzFhZTctMDRlOS00MGRmLTk2Y2YtMDQzZjUxOGEyOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucN1yGreSLkrKMn22HvljE71OwTIuzNNyBEd 7vvU3UQ3veO/icLuDAunVg80TKDWdNLf/Cle7AN/9A+BYlg+iQhldvofpu1L45oM 0CLOJSasDtFwFasKhIdl+ZVdTiqEFG5Tpo1AE5XQE9VBSw1gdVe+tzybJAtJBcbf +xUr7Q2qQaoUNbAjD+esbiv3M37vDSSvJvPXKi/KDdLJvPXHsMVRTxI8gfQVskH5 EPK8w9Xuqvft9jQtREkzQpRZQs87IWZs1C1F8ou2zC33JtktaoOsCmCdlcwvM5+E GF9mJLsxQrfg9H4IFH9+iNKxmm7zXSREU/NrXvoTiAxVUPK5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsJ3i331SLO2hvYplJSEjzbJcApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQyZmVkYWYtZTNmOS0z ODMwLWI4YjEtNWVkZjYzMWMzOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxaaDtjwjLmDSQsCzPmX5yH23w7pojitFQ+kXoktXG50vp16Ycthah1 FZiAi6Tv6QZmNkm1N+aPr6lTrKYsBc4E4/19fkeL3hit9dMuv/PsinywzynIRMnd XPgIa4U2U4nyFGBird5SzLsYeqn15iJIhv5v0jTTmYb+PO7jtXs3YHzX6XL1tuVH kXDx0ispxix8QWDtkABJgqRHMAPW+/99s0/OCP7TlDw6EgQqx1imtcmT7d/ytQ3e R93yVNVexMnRPWNQzb0xn8hgb8E/zm0PLKcadXX2iUnx4KITJmQLjUVqR1eIy+MT RjooWGpMr3UKp7IIf6iwbUGeFrsd1oI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:58 2025 by rpki-client