$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa File: 24a91ee2-c3ed-3ba1-9469-640cde946175.roa (raw, json) Hash identifier: nJYqLESHiJhOy9wsPl2f9p9YwFa+p8R1zm/F4ZuERdo= Subject key identifier: 6A:E9:CC:17:89:39:59:F4:E0:E0:E6:25:40:E3:A0:84:91:32:D1:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAEACC1B2BBFA847F6780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ae:ac:c1:b2:bb:fa:84:7f:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=7563f00d-b863-42e6-ba5d-2b002ab1376e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:00:5f:53:68:f6:ef:73:79:09:d1:4c:5b: 5a:98:d1:bb:6e:30:98:4e:07:f8:36:81:1c:89:32: 03:98:ca:0c:83:f3:06:48:3c:4b:86:8b:40:56:df: c4:71:cd:cb:e7:91:1e:fc:81:62:06:b9:ec:6b:18: af:13:e8:57:71:fa:9e:05:94:fb:22:5f:42:49:5e: 2a:29:c2:b9:e4:b3:18:c0:3a:73:2d:7a:f7:9c:58: 7d:48:fa:5f:65:9d:ae:79:11:3e:b3:41:b9:7b:3e: a0:af:bc:0c:e7:19:79:71:e0:3b:de:a9:99:05:6c: 98:ff:f8:5f:e7:22:28:05:1e:7d:a2:a4:65:14:9b: 7c:32:d5:de:4f:1a:b4:07:19:cb:cd:a0:f2:4c:d9: 7b:64:69:42:bc:de:76:65:dc:08:70:19:98:0d:4c: 45:13:d7:12:00:e4:66:1c:b5:bb:d0:6d:20:07:88: 1a:a3:60:eb:f8:87:5e:ca:a4:a8:0d:f2:ee:0d:70: 49:25:d4:78:03:b7:3a:d9:e8:92:cc:5d:65:cd:1a: 57:48:35:c5:7a:b2:72:9c:12:53:c3:fe:37:cf:6f: c8:65:3d:38:f3:8c:45:91:1a:8a:74:44:58:b1:55: 2a:fc:69:43:bc:55:de:3a:1c:af:aa:04:b6:83:93: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E9:CC:17:89:39:59:F4:E0:E0:E6:25:40:E3:A0:84:91:32:D1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:94:17:6d:40:2e:5a:2c:31:cf:6d:6d:9c:53:f2:f7:08:33: cc:db:d5:ef:c1:ab:07:6f:f3:5d:b7:7a:5c:cf:14:02:c7:e0: 3a:08:d3:05:44:9b:f9:52:78:3a:a0:9b:bd:16:2f:b2:19:d6: 66:fc:69:f9:54:6c:57:cb:cc:b5:c1:08:b6:53:ba:ff:b4:64: 30:91:6e:70:62:fc:ff:5c:f0:06:53:29:2e:cc:da:7a:22:ef: 35:d4:7c:48:4a:bd:5d:ba:83:69:05:3c:67:5b:0d:e6:d8:25: 75:39:79:d0:d1:52:42:56:93:26:e3:df:d8:6a:8f:b0:42:1c: 5c:b5:73:cc:60:c4:93:34:38:6f:ff:4d:b4:68:b6:08:68:94: c7:78:4f:92:46:33:f9:79:c1:f0:32:71:fb:d5:cd:d8:20:a5: b3:dc:05:50:fa:bf:11:8f:f5:cb:2d:18:34:ed:1a:b9:4f:19: be:3d:82:20:41:5c:a0:d3:25:f7:6c:78:80:e1:6b:b3:95:28: ed:df:f1:6b:db:dd:e4:f5:d3:ef:69:85:21:e1:39:7e:0e:cb: a9:5d:82:07:8a:4e:e8:73:86:77:cc:e5:f8:e8:6e:3b:c8:06: 14:ad:07:90:44:5b:d6:a3:a3:30:d3:31:ac:4c:37:1e:41:31: b5:7b:bb:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK6swbK7+oR/Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzU2M2YwMGQtYjg2My00MmU2LWJhNWQtMmIwMDJhYjEzNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdYAX1No9u9zeQnRTFtamNG7bjCYTgf4NoEc iTIDmMoMg/MGSDxLhotAVt/Ecc3L55Ee/IFiBrnsaxivE+hXcfqeBZT7Il9CSV4q KcK55LMYwDpzLXr3nFh9SPpfZZ2ueRE+s0G5ez6gr7wM5xl5ceA73qmZBWyY//hf 5yIoBR59oqRlFJt8MtXeTxq0BxnLzaDyTNl7ZGlCvN52ZdwIcBmYDUxFE9cSAORm HLW70G0gB4gao2Dr+IdeyqSoDfLuDXBJJdR4A7c62eiSzF1lzRpXSDXFerJynBJT w/43z2/IZT0484xFkRqKdERYsVUq/GlDvFXeOhyvqgS2g5OLbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGrpzBeJOVn04ODmJUDjoISRMtFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhOTFlZTItYzNlZC0z YmExLTk0NjktNjQwY2RlOTQ2MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhlBdtQC5aLDHPbW2cU/L3CDPM29XvwasHb/Ndt3pczxQCx+A6CNMF RJv5Ung6oJu9Fi+yGdZm/Gn5VGxXy8y1wQi2U7r/tGQwkW5wYvz/XPAGUykuzNp6 Iu811HxISr1duoNpBTxnWw3m2CV1OXnQ0VJCVpMm49/Yao+wQhxctXPMYMSTNDhv /020aLYIaJTHeE+SRjP5ecHwMnH71c3YIKWz3AVQ+r8Rj/XLLRg07Rq5Txm+PYIg QVyg0yX3bHiA4WuzlSjt3/Fr293k9dPvaYUh4Tl+DsupXYIHik7oc4Z3zOX46G47 yAYUrQeQRFvWo6Mw0zGsTDceQTG1e7tW -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:00 2025 by rpki-client