$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: kcw2tWm5t38UaYuqpW+y/Q+Dmzgs5IYird2NlmMv+/0= Subject key identifier: C4:B7:AE:4C:52:49:B8:B7:CF:34:5A:59:33:49:98:CD:FF:E2:13:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB2031F5E786CCD418900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b2:03:1f:5e:78:6c:cd:41:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=abe6a45d-4f69-4453-85db-5dbc7699ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:0c:67:5b:88:d2:54:81:0a:28:a8:e2:db: a9:6f:81:3e:0a:c2:f2:66:70:68:6c:0f:0a:33:db: 07:e5:2a:26:7d:13:a4:3c:49:0f:5b:13:50:da:ed: 25:02:a6:cd:a3:42:28:72:92:45:70:dd:10:e7:66: 28:ea:90:a8:6d:90:ff:92:d8:19:f7:41:8a:79:64: b6:55:01:ef:55:e8:36:ac:bc:8f:2f:55:66:47:79: 0b:90:2d:59:15:9d:40:0e:85:84:90:b9:fc:03:8c: 0c:5a:b2:a0:9e:33:24:05:7f:15:e3:2e:bd:04:12: f8:c5:42:ad:d6:71:d2:89:19:44:01:26:73:c0:63: 95:a8:39:13:1e:0b:cd:46:28:6e:e0:d7:4f:77:2f: 8a:d8:1d:e1:4f:e4:f3:79:dc:a7:5d:ad:23:2b:25: 27:7a:30:dd:1e:12:55:89:ac:e4:e1:2a:f8:82:19: 48:27:e3:e2:31:68:ec:ba:a7:b4:40:be:91:02:20: 89:d7:de:44:9c:17:07:f7:d1:62:e0:ca:95:c5:cf: 68:92:de:a5:91:00:f0:46:72:a0:ea:c7:80:cb:9e: 6a:e3:6a:d3:4f:30:c3:b9:71:c5:a4:10:48:e5:b5: 50:85:d3:b4:20:37:ce:57:74:58:6a:3f:57:3f:d6: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:AE:4C:52:49:B8:B7:CF:34:5A:59:33:49:98:CD:FF:E2:13:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a2:ce:a1:bc:8d:cf:0e:24:ed:9b:fa:a0:4a:5e:69:38:13: b1:52:ad:2a:90:b2:09:69:82:c1:cd:3f:55:c7:b8:21:ca:bb: c3:b5:cd:d1:b8:65:ae:f9:e6:5f:fd:c1:32:a2:c9:de:55:bb: af:4b:f9:88:71:be:2f:24:d8:37:b3:46:09:4a:f5:e5:c7:7e: 57:7d:62:3e:01:ef:a6:52:20:80:f4:b9:a2:bd:31:f4:11:38: cb:01:e7:ec:e9:da:4c:43:4b:b1:b9:ec:9e:de:81:b7:fe:f8: 7a:22:26:78:2b:ad:c2:6e:38:e3:0a:fb:d5:7d:12:15:a8:33: e4:36:94:0f:fc:d7:8f:5e:63:84:2a:47:97:64:02:47:8d:bf: 8f:e0:e5:40:3f:61:97:d4:db:28:36:cb:86:81:88:e0:e9:21: 87:ff:b6:5e:a1:da:15:b9:c9:91:e2:8c:7b:4e:e6:50:57:8e: 6c:f6:b5:ee:d9:3d:f2:d6:d5:3f:b6:00:09:66:7b:be:90:6d: 01:32:54:3c:1e:4b:82:55:d6:53:68:18:9e:63:56:42:2a:2c: f2:2b:f4:c8:a0:be:c5:f0:a0:78:63:6b:6c:c4:69:14:08:ff: cf:88:44:a3:08:e8:d7:fb:2b:c0:2f:8b:48:50:99:ce:d0:17: 8f:50:79:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLIDH154bM1BiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWJlNmE0NWQtNGY2OS00NDUzLTg1ZGItNWRiYzc2OTljYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBAMZ1uI0lSBCiio4tupb4E+CsLyZnBobA8K M9sH5SomfROkPEkPWxNQ2u0lAqbNo0IocpJFcN0Q52Yo6pCobZD/ktgZ90GKeWS2 VQHvVeg2rLyPL1VmR3kLkC1ZFZ1ADoWEkLn8A4wMWrKgnjMkBX8V4y69BBL4xUKt 1nHSiRlEASZzwGOVqDkTHgvNRihu4NdPdy+K2B3hT+TzedynXa0jKyUnejDdHhJV iazk4Sr4ghlIJ+PiMWjsuqe0QL6RAiCJ195EnBcH99Fi4MqVxc9okt6lkQDwRnKg 6seAy55q42rTTzDDuXHFpBBI5bVQhdO0IDfOV3RYaj9XP9ZLUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMS3rkxSSbi3zzRaWTNJmM3/4hP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMos6hvI3PDiTtm/qgSl5pOBOxUq0qkLIJaYLBzT9Vx7ghyrvDtc3R uGWu+eZf/cEyosneVbuvS/mIcb4vJNg3s0YJSvXlx35XfWI+Ae+mUiCA9LmivTH0 ETjLAefs6dpMQ0uxueye3oG3/vh6IiZ4K63CbjjjCvvVfRIVqDPkNpQP/NePXmOE KkeXZAJHjb+P4OVAP2GX1NsoNsuGgYjg6SGH/7ZeodoVucmR4ox7TuZQV45s9rXu 2T3y1tU/tgAJZnu+kG0BMlQ8HkuCVdZTaBieY1ZCKizyK/TIoL7F8KB4Y2tsxGkU CP/PiESjCOjX+yvAL4tIUJnO0BePUHn/ -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:24 2025 by rpki-client