$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa File: 155b0e63-eb93-3d04-adee-d6347619e10b.roa (raw, json) Hash identifier: ZowMMeujFPD/lS1nKC39sIjDh8CcT0NYLeHtbxMLJ+0= Subject key identifier: AA:30:D1:ED:9A:33:5D:89:D1:58:AA:44:54:84:27:D3:2E:82:4F:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77936C590455112A39180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396550 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:36:c5:90:45:51:12:a3:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=1db49ab2-8270-4a80-847e-974e693245db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:b8:d7:85:4b:ac:05:f0:58:99:4f:be:50: 5b:e8:34:91:22:a6:88:49:db:51:e1:72:9f:48:26: 8a:ed:a3:df:f7:ce:93:9e:43:b2:32:98:d4:26:8c: 29:3c:39:86:b8:c7:e2:67:c0:34:2b:4c:11:85:1c: f8:11:eb:fb:10:12:26:a1:45:e9:cb:23:40:31:29: e4:48:a7:6f:95:8c:a1:1b:9d:a8:34:8b:ac:67:dd: 10:9e:1c:1c:7d:e9:aa:f7:a9:7e:23:ac:1a:07:0a: f4:9a:2b:fb:53:c6:2d:c8:c7:ad:38:75:85:52:84: 5e:a2:0b:ff:6b:3f:c3:d4:99:8d:05:74:7a:e0:f0: f0:4d:29:c1:5d:17:61:04:80:6d:85:97:c3:dd:d5: 7d:04:35:08:a8:ff:64:32:da:90:40:c5:7c:b3:04: c1:fd:f1:d0:e6:3f:dd:4e:95:92:e9:fb:82:ad:e7: bf:91:68:b7:6a:dc:d5:3d:55:4b:19:a8:b8:38:4c: 1c:ad:fa:9c:2b:59:e1:15:bb:46:7d:74:87:a9:32: c6:c6:df:69:d2:8c:29:8d:a0:a7:42:5d:28:ab:f5: 8f:c8:b3:d1:09:d7:46:42:36:30:20:4a:f3:14:92: df:6f:72:24:76:18:46:5b:0c:df:d5:ef:99:21:44: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:30:D1:ED:9A:33:5D:89:D1:58:AA:44:54:84:27:D3:2E:82:4F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:73:f5:09:9e:d6:d9:0b:13:9a:b3:bc:56:ef:ab:8a:a1:b8: 1e:f8:27:a2:5b:0c:d6:32:6f:d6:63:4c:ed:5b:7c:3d:0b:c0: a9:87:12:9e:99:5e:65:b7:fc:81:6b:cf:80:cc:29:cb:1d:74: b3:93:8b:cd:d4:ee:d9:9f:68:da:67:6f:69:5e:e2:e1:31:54: 69:81:ed:c7:c4:8a:11:5b:15:1c:d3:af:a4:e0:4a:be:35:8a: 8c:b6:bf:8f:0a:b8:ed:21:9e:fe:e0:17:1f:21:c3:ba:f2:4e: 1e:dd:68:f5:81:b0:59:42:fc:66:eb:4c:61:5b:e0:ab:bb:d0: da:91:d1:8d:7a:de:7f:80:0c:fa:6e:5a:39:3e:a9:a5:3e:20: cb:92:4e:e3:c6:54:b5:49:5b:3c:bb:0c:bb:7f:17:e6:d7:a9: a9:56:23:a4:b5:b7:98:f2:c0:c2:79:b6:4a:07:35:9c:75:79: 5e:d9:66:99:d3:b5:6a:3a:76:07:76:31:60:3c:b2:73:bc:e1: 5a:0a:ca:98:ca:a0:42:12:75:fe:c6:6f:34:52:14:11:fd:ea: d1:16:3e:71:48:9a:95:0a:69:f1:d9:7e:93:ca:7e:7f:6c:a9: d6:35:6c:fd:a5:b6:b2:76:b5:2d:fa:ab:1d:f0:39:1e:df:ff: b2:17:e0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3k2xZBFURKjkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MWRiNDlhYjItODI3MC00YTgwLTg0N2UtOTc0ZTY5MzI0NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBa414VLrAXwWJlPvlBb6DSRIqaISdtR4XKf SCaK7aPf986TnkOyMpjUJowpPDmGuMfiZ8A0K0wRhRz4Eev7EBImoUXpyyNAMSnk SKdvlYyhG52oNIusZ90Qnhwcfemq96l+I6waBwr0miv7U8YtyMetOHWFUoReogv/ az/D1JmNBXR64PDwTSnBXRdhBIBthZfD3dV9BDUIqP9kMtqQQMV8swTB/fHQ5j/d TpWS6fuCree/kWi3atzVPVVLGai4OEwcrfqcK1nhFbtGfXSHqTLGxt9p0owpjaCn Ql0oq/WPyLPRCddGQjYwIErzFJLfb3IkdhhGWwzf1e+ZIUTOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKow0e2aM12J0ViqRFSEJ9Mugk8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU1YjBlNjMtZWI5My0z ZDA0LWFkZWUtZDYzNDc2MTllMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhz9Qme1tkLE5qzvFbvq4qhuB74J6JbDNYyb9ZjTO1bfD0LwKmHEp6Z XmW3/IFrz4DMKcsddLOTi83U7tmfaNpnb2le4uExVGmB7cfEihFbFRzTr6TgSr41 ioy2v48KuO0hnv7gFx8hw7ryTh7daPWBsFlC/GbrTGFb4Ku70NqR0Y163n+ADPpu Wjk+qaU+IMuSTuPGVLVJWzy7DLt/F+bXqalWI6S1t5jywMJ5tkoHNZx1eV7ZZpnT tWo6dgd2MWA8snO84VoKypjKoEISdf7GbzRSFBH96tEWPnFImpUKafHZfpPKfn9s qdY1bP2ltrJ2tS36qx3wOR7f/7IX4Io= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:41 2025 by rpki-client