$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2227a38b-abd0-3d6c-9187-4baf103ecc8d.roa File: 2227a38b-abd0-3d6c-9187-4baf103ecc8d.roa (raw, json) Hash identifier: +1FXYiYHNzKfkCjYUraPu8YA3VWe9v+5FUhrX/dmMWE= Subject key identifier: 2E:E8:C6:D2:97:EC:40:17:5F:DD:E5:D7:7A:03:24:4F:BA:90:B5:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC7784D1E0C1C9B098B1F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2227a38b-abd0-3d6c-9187-4baf103ecc8d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397203 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:4d:1e:0c:1c:9b:09:8b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=d8b43529-3678-4071-84d5-0c45d697af0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:e0:89:85:0b:ca:f3:fa:4e:f4:8d:4a:29: de:09:2e:7e:fb:90:3f:0c:55:66:a0:e8:6a:c0:a0: 0b:17:4e:5f:8a:93:f2:6d:1f:97:10:e9:f2:74:0d: b3:91:73:8d:2d:c4:0a:20:f6:2c:ca:25:d4:48:bf: f8:97:45:0a:7e:78:b8:1b:ca:7a:c6:3c:7f:98:0f: 14:bb:59:19:7a:3c:38:c7:80:40:a9:f6:99:6f:91: 64:5a:ba:03:7e:c5:ee:3a:67:75:25:f2:c5:3d:a8: fa:a5:f0:84:08:42:89:a4:d9:0b:b5:6b:12:cc:3f: 39:2e:50:84:7a:ef:0d:23:de:45:50:df:5b:25:63: 00:c7:16:72:e6:86:87:03:77:da:5e:2e:30:ed:9d: 65:51:6b:4b:4b:23:e6:96:66:4c:ac:81:6f:66:4e: b3:d3:70:38:19:53:05:c2:3f:4f:9e:b2:b9:4f:aa: 8f:5e:2d:eb:72:6c:a2:57:a5:a1:37:39:37:64:9a: 9d:0d:23:05:f6:e4:cd:20:6b:f4:72:05:33:b4:e9: 0f:99:cf:d7:df:d0:d1:0d:51:c5:db:5a:a5:ba:c0: 74:81:5e:64:ce:2e:25:a8:b8:4f:78:99:0c:68:fb: 32:e6:9a:93:a9:be:90:e5:df:75:08:d6:c6:ab:88: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:C6:D2:97:EC:40:17:5F:DD:E5:D7:7A:03:24:4F:BA:90:B5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2227a38b-abd0-3d6c-9187-4baf103ecc8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bb:33:e9:10:e5:cb:04:6c:24:a5:20:bf:e1:a0:2a:8f:09: 51:2b:cc:57:f7:bd:64:fb:dd:7e:e9:0a:9f:e8:fd:c6:4d:2d: fc:71:9e:fb:44:16:41:aa:b1:a6:35:9e:6e:55:3f:3b:2c:3d: 16:28:bd:30:25:54:fa:7c:41:70:b9:f1:f7:8d:d1:ea:6e:db: 37:fe:fb:ec:05:5e:05:ca:cb:9d:23:49:75:f2:c4:e5:dc:33: 7f:f7:af:ef:b4:d6:d8:38:38:f4:50:5d:68:22:4c:ae:f7:44: ac:66:c7:ef:b6:cf:c0:67:e2:92:6b:71:36:fd:9c:51:19:86: d7:3a:ca:b5:35:58:c4:89:66:fc:a9:14:5e:d6:2b:db:1e:0a: f0:08:73:df:74:9c:30:78:1d:a9:d9:8a:e2:1d:d3:47:dc:02: 51:36:20:b3:f1:cf:81:49:c0:72:0d:f6:05:d1:55:df:1b:ad: 1a:eb:38:71:ec:52:5c:62:7e:c3:15:8b:e5:ea:d9:00:96:ec: f6:87:7a:3e:c9:61:a0:cf:6e:64:e4:60:f2:9c:c6:88:1f:f5: d4:33:53:a4:1b:bd:1e:50:c6:ed:2b:58:b6:e7:15:96:7e:b5: 55:a6:79:90:87:c7:78:6a:14:32:3e:bd:ef:2a:56:49:bd:c7: 7c:95:9c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3hNHgwcmwmLHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZDhiNDM1MjktMzY3OC00MDcxLTg0ZDUtMGM0NWQ2OTdhZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l7giYULyvP6TvSNSineCS5++5A/DFVmoOhq wKALF05fipPybR+XEOnydA2zkXONLcQKIPYsyiXUSL/4l0UKfni4G8p6xjx/mA8U u1kZejw4x4BAqfaZb5FkWroDfsXuOmd1JfLFPaj6pfCECEKJpNkLtWsSzD85LlCE eu8NI95FUN9bJWMAxxZy5oaHA3faXi4w7Z1lUWtLSyPmlmZMrIFvZk6z03A4GVMF wj9PnrK5T6qPXi3rcmyiV6WhNzk3ZJqdDSMF9uTNIGv0cgUztOkPmc/X39DRDVHF 21qlusB0gV5kzi4lqLhPeJkMaPsy5pqTqb6Q5d91CNbGq4j7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7oxtKX7EAXX93l13oDJE+6kLXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIyN2EzOGItYWJkMC0z ZDZjLTkxODctNGJhZjEwM2VjYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq7M+kQ5csEbCSlIL/hoCqPCVErzFf3vWT73X7pCp/o/cZNLfxxnvtE FkGqsaY1nm5VPzssPRYovTAlVPp8QXC58feN0epu2zf+++wFXgXKy50jSXXyxOXc M3/3r++01tg4OPRQXWgiTK73RKxmx++2z8Bn4pJrcTb9nFEZhtc6yrU1WMSJZvyp FF7WK9seCvAIc990nDB4HanZiuId00fcAlE2ILPxz4FJwHIN9gXRVd8brRrrOHHs UlxifsMVi+Xq2QCW7PaHej7JYaDPbmTkYPKcxogf9dQzU6QbvR5Qxu0rWLbnFZZ+ tVWmeZCHx3hqFDI+ve8qVkm9x3yVnIo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:29 2025 by rpki-client