$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa File: 14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa (raw, json) Hash identifier: OwcrHgF+iqif9vOywQ2VUSuIkV+jkH2zlxIOb/LYKO4= Subject key identifier: E9:09:64:0A:51:C8:E9:DE:CB:58:6E:B2:F4:A2:ED:68:BD:88:4A:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB04A6737A42149465880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 27544 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:4a:67:37:a4:21:49:46:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=9de63855-6430-48cd-90a4-933d122bbae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:95:c3:25:99:97:87:5e:ae:54:5f:13:0b: ed:94:57:78:58:69:1b:76:bf:95:1e:aa:b6:ea:da: e0:ee:40:a9:f6:b6:44:95:be:e4:43:bb:34:8a:fe: 3e:10:4a:c6:a5:78:a2:89:e6:d3:29:28:83:50:cc: 5a:95:30:0c:df:d8:b1:23:09:77:f7:ae:40:ab:cb: c3:2c:1b:3d:21:d7:a8:77:70:b4:38:c0:bf:5d:96: 61:77:44:a7:90:66:83:f9:41:a7:f6:7b:07:54:05: d9:7e:c6:05:66:40:17:5d:2d:cd:38:34:a1:21:c5: 5f:e0:a2:8b:15:d0:79:42:ee:9e:74:b2:cf:4e:f3: 7d:36:bb:e5:11:5e:24:12:02:70:9b:8e:2a:15:05: b7:77:79:89:b3:ef:47:16:c6:cc:87:14:66:d6:85: 8c:ec:a1:86:f3:eb:59:b4:d2:ca:6c:42:6b:5a:20: 48:1e:e0:56:ba:2d:4c:83:42:45:47:8c:f3:79:f3: c1:b8:97:e0:7f:87:ea:d0:f3:29:24:58:75:76:57: 40:ec:de:9f:f8:46:ef:f6:00:21:00:08:3d:50:7f: 4e:24:96:de:19:ea:2b:1f:a0:3f:97:2d:83:e1:30: c7:c6:3b:16:2b:6e:7d:32:8b:26:a4:aa:2e:a4:91: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:64:0A:51:C8:E9:DE:CB:58:6E:B2:F4:A2:ED:68:BD:88:4A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a6e50a-1274-39a1-b359-e8c8f20bfc96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a5:a6:75:63:15:0d:3e:e2:57:18:ef:a2:dc:13:df:3f:80: f8:04:05:c2:a9:4f:d3:fa:e3:97:9f:9f:1b:95:9f:b9:71:fb: ff:92:8a:ad:04:b5:df:c4:e2:d1:e0:4c:ca:5e:a9:9c:43:b1: 3a:28:5f:e2:dc:c4:9a:14:17:4d:fd:7b:cd:2e:fd:56:89:93: 79:0c:27:8a:04:de:8c:6b:b2:86:96:30:85:95:ba:89:7b:d3: 3b:d5:58:d8:ca:66:2d:d1:bd:4f:4d:cc:52:4e:69:f6:1e:6d: 68:b1:28:cc:0b:2d:00:29:cf:74:aa:4a:6d:9e:95:c3:b2:f9: df:51:92:2e:06:cc:b2:bd:9a:d4:24:81:22:1b:8a:ab:cd:58: e7:65:75:bb:d8:44:c0:f1:7b:f6:e4:c5:f3:be:d7:13:69:16: b6:c9:e4:dd:ee:2c:64:d3:cc:70:84:3c:f0:c0:c3:d7:67:a5: a0:ed:2c:63:61:b5:de:01:97:32:cb:56:f5:92:93:8c:c0:8f: 9d:d7:28:dd:72:12:c7:97:5d:3b:e0:a7:3f:ed:a8:bc:8d:2c: 04:35:27:f1:2f:5f:9f:1d:83:99:6f:5f:3e:e7:2f:8a:46:99: 37:ab:ba:f3:87:db:ac:9f:63:bf:18:c0:a4:83:c5:86:59:27: 5a:8e:a2:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLBKZzekIUlGWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OWRlNjM4NTUtNjQzMC00OGNkLTkwYTQtOTMzZDEyMmJiYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8qVwyWZl4derlRfEwvtlFd4WGkbdr+VHqq2 6trg7kCp9rZElb7kQ7s0iv4+EErGpXiiiebTKSiDUMxalTAM39ixIwl3965Aq8vD LBs9Ideod3C0OMC/XZZhd0SnkGaD+UGn9nsHVAXZfsYFZkAXXS3NODShIcVf4KKL FdB5Qu6edLLPTvN9NrvlEV4kEgJwm44qFQW3d3mJs+9HFsbMhxRm1oWM7KGG8+tZ tNLKbEJrWiBIHuBWui1Mg0JFR4zzefPBuJfgf4fq0PMpJFh1dldA7N6f+Ebv9gAh AAg9UH9OJJbeGeorH6A/ly2D4TDHxjsWK259MosmpKoupJFkjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOkJZApRyOney1husvSi7Wi9iEpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTRhNmU1MGEtMTI3NC0z OWExLWIzNTktZThjOGYyMGJmYzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+paZ1YxUNPuJXGO+i3BPfP4D4BAXCqU/T+uOXn58blZ+5cfv/koqt BLXfxOLR4EzKXqmcQ7E6KF/i3MSaFBdN/XvNLv1WiZN5DCeKBN6Ma7KGljCFlbqJ e9M71VjYymYt0b1PTcxSTmn2Hm1osSjMCy0AKc90qkptnpXDsvnfUZIuBsyyvZrU JIEiG4qrzVjnZXW72ETA8Xv25MXzvtcTaRa2yeTd7ixk08xwhDzwwMPXZ6Wg7Sxj YbXeAZcyy1b1kpOMwI+d1yjdchLHl1074Kc/7ai8jSwENSfxL1+fHYOZb18+5y+K Rpk3q7rzh9usn2O/GMCkg8WGWSdajqJY -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:24 2025 by rpki-client