$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa File: 29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa (raw, json) Hash identifier: c56/MJqkaTSVYVoB3UpHQQseeacmvToc0wQaABV0bUI= Subject key identifier: 48:74:34:A6:62:8D:80:72:2F:95:28:67:19:1E:84:9D:DB:1B:1C:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB4FC331E1CF14235BEF8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396583 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:fc:33:1e:1c:f1:42:35:be:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=38c443dd-d0ec-4f79-a4e6-a3e6762875c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:60:d6:db:9e:cb:4a:c5:8b:e7:c7:e6:8d: 02:30:fa:4f:c2:b8:40:37:e3:dd:5e:0d:bc:30:7b: eb:f3:46:48:bb:b0:98:64:9b:6b:09:1b:a8:06:2b: 4e:e8:66:43:c6:88:f6:f0:81:76:cf:ca:b1:f7:53: d4:af:9f:a2:88:74:29:3c:71:0d:c4:35:07:d0:d0: e2:9e:a3:46:1f:68:e6:5b:33:e0:7b:33:d4:60:c5: 18:5f:72:25:36:b8:4f:b7:78:07:75:54:93:e5:84: 55:67:12:9d:11:12:67:8c:e6:9d:33:e5:e8:8d:a2: 87:09:02:bf:ed:cf:ea:6d:5e:84:2a:a6:a4:0f:fa: 13:07:e8:1c:f2:10:01:52:79:e3:70:d9:1e:aa:37: c0:4b:99:b4:ce:82:60:bb:15:ba:1c:89:85:9a:5b: 00:4f:18:16:f5:90:61:17:4a:33:00:d3:ed:1b:bc: 50:89:6b:e9:d6:af:be:db:5b:92:62:66:e8:5d:86: 4a:70:b0:a1:e9:5c:9c:8f:4a:25:0e:83:7f:99:1c: 2b:b5:91:6a:45:5e:57:6d:87:48:6b:29:6f:79:cd: b0:17:12:3d:b4:6e:64:ef:c2:97:78:33:8e:ec:f5: 65:3b:fd:8a:0d:1f:e8:f2:c4:08:af:67:2d:66:d5: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:74:34:A6:62:8D:80:72:2F:95:28:67:19:1E:84:9D:DB:1B:1C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e9:ba:c6:dc:37:f7:bc:54:69:66:15:3a:90:7d:e5:dc:02: 39:1e:04:f3:3b:41:74:71:3d:76:82:f9:fb:62:5f:c6:cc:02: 20:2c:6f:3e:96:81:5c:d0:08:a5:97:30:34:be:47:20:1a:27: 7c:ab:00:76:cb:f2:b2:5a:8f:48:d1:ef:25:d7:c0:47:7d:51: 76:e0:f2:c0:8d:c7:70:e7:5a:07:9d:00:27:fc:00:38:2f:d0: 40:97:7e:a3:1f:ae:e9:4d:ab:f8:d4:9d:3a:9c:37:83:db:9c: 98:e3:8f:6b:de:64:65:ab:75:88:3a:ad:0e:7b:b5:47:64:dd: 53:6d:29:51:af:f5:51:c0:08:5a:e3:fd:66:8b:24:c0:41:db: 62:da:76:fe:34:46:ed:27:9c:fd:24:b7:28:08:55:58:c4:2b: 0b:53:d4:2a:bd:55:ad:e9:f3:0b:d7:f0:67:3a:2c:ea:f3:95: 02:93:b1:94:30:88:19:62:ea:a0:83:a6:6d:6a:64:57:d3:92: c8:bd:6d:7b:33:18:8c:25:e0:8f:17:bb:0e:6b:e1:54:b0:01: e7:a9:2d:de:65:78:ec:b0:3b:19:33:a3:5a:93:55:f8:34:3e: f2:7b:61:29:a8:84:ca:85:fa:51:ce:31:16:0f:7b:e1:d1:f3: 94:01:03:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLT8Mx4c8UI1vvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzhjNDQzZGQtZDBlYy00Zjc5LWE0ZTYtYTNlNjc2Mjg3NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Ng1tuey0rFi+fH5o0CMPpPwrhAN+PdXg28 MHvr80ZIu7CYZJtrCRuoBitO6GZDxoj28IF2z8qx91PUr5+iiHQpPHENxDUH0NDi nqNGH2jmWzPgezPUYMUYX3IlNrhPt3gHdVST5YRVZxKdERJnjOadM+XojaKHCQK/ 7c/qbV6EKqakD/oTB+gc8hABUnnjcNkeqjfAS5m0zoJguxW6HImFmlsATxgW9ZBh F0ozANPtG7xQiWvp1q++21uSYmboXYZKcLCh6Vycj0olDoN/mRwrtZFqRV5XbYdI aylvec2wFxI9tG5k78KXeDOO7PVlO/2KDR/o8sQIr2ctZtUJ2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEh0NKZijYByL5UoZxkehJ3bGxy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjliZjJhNGQtM2I3Ny0z MGYzLWIyN2EtZDJhMTRhMGZlZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA6brG3Df3vFRpZhU6kH3l3AI5HgTzO0F0cT12gvn7Yl/GzAIgLG8+ loFc0AillzA0vkcgGid8qwB2y/KyWo9I0e8l18BHfVF24PLAjcdw51oHnQAn/AA4 L9BAl36jH67pTav41J06nDeD25yY449r3mRlq3WIOq0Oe7VHZN1TbSlRr/VRwAha 4/1miyTAQdti2nb+NEbtJ5z9JLcoCFVYxCsLU9QqvVWt6fML1/BnOizq85UCk7GU MIgZYuqgg6ZtamRX05LIvW17MxiMJeCPF7sOa+FUsAHnqS3eZXjssDsZM6Nak1X4 ND7ye2EpqITKhfpRzjEWD3vh0fOUAQOg -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:23 2025 by rpki-client