$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa File: 20f86231-c14f-3af7-a26e-6c0968214399.roa (raw, json) Hash identifier: slfdK/pYnH+jjBgOUX5kKIp8PSSS44dsn5IogEJ9Ns4= Subject key identifier: 45:7F:77:3A:C1:14:95:F6:7C:DC:1C:B3:7F:10:EC:0A:E8:26:3A:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC779748DB80F342059F280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397198 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:74:8d:b8:0f:34:20:59:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f92623c5-e3af-43d6-b3c5-5f1e5cb2dd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:8a:38:40:ad:79:a5:16:64:93:47:6b:cb: 60:a8:0e:0a:dd:d9:44:84:cd:f1:4b:37:6c:7e:c6: 24:1e:0b:f7:4c:af:30:60:a7:ae:50:13:6f:dc:46: 04:63:54:ae:90:b6:e4:9e:0a:be:14:74:22:c1:dc: 22:5c:8d:5e:6c:3a:02:67:5c:9a:e2:bc:38:ca:9b: 2d:1e:2e:14:58:42:11:ed:cb:6c:12:31:0d:17:39: b8:81:68:10:13:92:76:62:0e:ce:40:9f:6d:19:82: d9:9a:00:43:b9:9f:98:de:a8:10:c4:b2:af:cc:69: 1b:15:ec:d8:e7:96:92:a7:4f:0b:ae:3f:fc:8e:bd: 8a:59:32:67:b8:9b:af:c2:53:3b:ac:31:9d:4a:79: fd:12:a1:db:18:0a:42:ea:ff:2d:67:2a:82:00:7d: c6:da:2e:62:07:8a:56:23:f2:31:e1:e6:bd:d4:51: c6:9e:fa:a0:9a:fd:76:1a:d5:a1:5f:78:a8:5c:de: c2:20:46:3f:0e:0a:1c:26:ca:fa:ad:7c:ff:4c:ef: fd:a1:62:4a:fd:96:9d:06:4c:21:3e:8d:03:20:6b: e9:03:28:30:e1:71:c7:13:18:62:d1:16:48:50:50: 09:8f:7f:65:fc:3a:62:24:7f:5c:53:55:ee:65:d9: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:77:3A:C1:14:95:F6:7C:DC:1C:B3:7F:10:EC:0A:E8:26:3A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:31:dd:ed:7d:40:ad:38:41:91:18:b1:0a:dc:fe:42:6a:c6: a7:f7:15:9f:fb:15:53:5f:c6:24:7f:6d:88:a0:58:6a:30:07: 0f:f3:e8:34:87:5b:81:96:a1:cd:31:54:b4:7a:8d:a5:23:24: bf:20:19:e8:6f:7d:3a:c1:13:c5:25:9c:a5:3d:0c:c3:85:8b: 1e:53:b6:ce:76:30:45:5a:b1:b6:33:2f:77:4e:77:8d:8a:bb: fe:89:c8:35:54:e9:4d:22:b1:02:a0:6d:28:5a:e9:19:87:b2: aa:57:c3:fb:15:8c:84:72:73:0e:f9:42:7a:c6:ce:7f:82:a9: fc:99:30:f9:21:fd:a8:ae:e5:41:84:53:09:e0:eb:a1:33:75: be:ab:88:bb:c4:37:60:6f:d4:a6:5d:89:6f:52:13:9a:9f:5c: d7:17:68:34:69:85:fa:d8:83:df:f6:5d:81:48:c2:37:db:89: 1b:88:4c:d8:ad:ea:42:06:a2:13:62:10:fc:8c:40:1d:3e:b8: 97:2f:c9:c0:34:fe:b5:42:db:4c:f8:aa:00:25:8b:59:d8:0a: 85:71:4c:7a:18:97:20:c2:ec:df:18:70:ba:4e:59:a0:11:66: 3f:94:bc:c7:1f:52:4f:49:be:0d:62:d7:e2:eb:b6:5a:11:04: d4:ac:4d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3l0jbgPNCBZ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjkyNjIzYzUtZTNhZi00M2Q2LWIzYzUtNWYxZTVjYjJkZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AqKOECteaUWZJNHa8tgqA4K3dlEhM3xSzds fsYkHgv3TK8wYKeuUBNv3EYEY1SukLbkngq+FHQiwdwiXI1ebDoCZ1ya4rw4ypst Hi4UWEIR7ctsEjENFzm4gWgQE5J2Yg7OQJ9tGYLZmgBDuZ+Y3qgQxLKvzGkbFezY 55aSp08Lrj/8jr2KWTJnuJuvwlM7rDGdSnn9EqHbGApC6v8tZyqCAH3G2i5iB4pW I/Ix4ea91FHGnvqgmv12GtWhX3ioXN7CIEY/DgocJsr6rXz/TO/9oWJK/ZadBkwh Po0DIGvpAygw4XHHExhi0RZIUFAJj39l/DpiJH9cU1XuZdlJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV/dzrBFJX2fNwcs38Q7AroJjoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBmODYyMzEtYzE0Zi0z YWY3LWEyNmUtNmMwOTY4MjE0Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0x3e19QK04QZEYsQrc/kJqxqf3FZ/7FVNfxiR/bYigWGowBw/z6DSH W4GWoc0xVLR6jaUjJL8gGehvfTrBE8UlnKU9DMOFix5Tts52MEVasbYzL3dOd42K u/6JyDVU6U0isQKgbSha6RmHsqpXw/sVjIRycw75QnrGzn+CqfyZMPkh/aiu5UGE Uwng66Ezdb6riLvEN2Bv1KZdiW9SE5qfXNcXaDRphfrYg9/2XYFIwjfbiRuITNit 6kIGohNiEPyMQB0+uJcvycA0/rVC20z4qgAli1nYCoVxTHoYlyDC7N8YcLpOWaAR Zj+UvMcfUk9Jvg1i1+LrtloRBNSsTQE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:28 2025 by rpki-client