$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa File: 33b86f0f-9676-3652-945f-0423095a5069.roa (raw, json) Hash identifier: 2+njv01VhralSgE2eSkYt9FVLuIYWI+7GhEbsHVwipw= Subject key identifier: 4C:6E:1A:91:26:59:55:21:5C:A3:88:83:76:86:7B:93:09:9D:35:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB56E0B47C4B85A32D7D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 25485 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b5:6e:0b:47:c4:b8:5a:32:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=3be7c9b2-5e58-472e-bd2e-d6b63ef93dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:4a:c7:04:44:65:00:65:7f:d2:30:78:15: 54:d0:ae:ae:a4:4d:98:92:f3:8a:d0:2e:e4:c0:6b: 34:13:4e:ee:93:99:65:bc:db:d5:4c:db:21:59:93: 2c:d6:0a:1f:64:61:20:68:3b:30:01:04:de:69:74: 2a:d8:0f:07:09:53:9e:6b:8d:29:18:d6:b8:b6:29: c6:e4:50:90:28:b4:93:7f:e5:5d:8f:59:f6:63:8d: 2e:b0:0e:9f:f3:33:c1:b3:3a:23:2c:fa:2c:b9:03: a9:83:d7:0c:c7:a8:53:9e:3c:63:5b:98:a0:d8:9a: 5a:6a:f0:0c:26:51:8a:65:90:9a:3e:b5:48:23:aa: a0:4e:58:ac:cb:ed:f6:5c:f8:15:d4:ae:86:d0:08: 94:ba:7d:d8:43:de:8d:dc:20:d4:0f:45:50:ac:e0: 4c:94:e1:e1:b8:f1:cd:21:bb:cb:ab:a2:e4:d7:29: 31:af:90:70:28:8a:90:f8:2d:c7:bf:b5:65:e7:69: 8a:88:b5:36:cf:70:ec:c7:bb:03:40:5a:d8:e5:cd: 9c:81:87:d7:22:8e:28:b4:49:66:40:f3:41:27:57: cd:93:f8:bf:15:df:3f:55:5b:69:a0:e0:95:4d:f6: e9:86:d4:ec:d0:52:5b:a4:99:95:79:45:f4:82:a0: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6E:1A:91:26:59:55:21:5C:A3:88:83:76:86:7B:93:09:9D:35:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:96:7b:30:59:34:70:45:6c:87:66:72:90:0d:cd:fc:a8:0e: 3e:f1:0c:75:ab:df:9d:d2:e3:41:d9:3b:98:66:32:56:9a:8a: fd:da:aa:79:80:02:62:e1:84:c0:32:9d:7d:b2:2c:ba:ff:fe: d3:ad:8c:16:ee:51:45:ec:60:28:4b:43:41:13:c4:27:ea:14: 86:df:b9:f9:5b:8a:2e:18:9e:1f:a3:08:4f:88:ed:66:2d:df: ad:cd:2b:fb:25:15:9a:f3:eb:ae:fb:d7:4b:09:23:35:a8:53: df:cb:b4:f6:b8:ae:55:20:dd:02:0c:08:91:0f:db:1c:31:76: 33:a6:cd:50:ea:18:6e:9b:ae:a6:cd:2f:e1:4b:ba:bc:a0:3e: f6:45:02:f3:cf:8a:04:b3:1a:76:1a:e7:99:1d:ca:9c:0b:a2: 0d:e8:a9:af:e0:1f:61:9d:f7:99:de:3f:9a:91:58:f9:dd:86: b4:f7:1d:49:ac:70:98:13:d8:56:2a:06:af:8b:84:1c:10:71: 43:7f:16:53:5b:cb:7c:9e:2a:4c:ac:b8:d0:98:8d:ee:71:a7: f1:72:29:75:e1:7f:24:82:9f:51:ec:d6:69:d0:f1:6a:a3:f1: b2:32:7a:95:f9:90:49:d8:f0:6d:90:9a:4c:5f:57:3c:ec:b3: 42:86:e4:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLVuC0fEuFoy19AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2JlN2M5YjItNWU1OC00NzJlLWJkMmUtZDZiNjNlZjkzZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxylKxwREZQBlf9IweBVU0K6upE2YkvOK0C7k wGs0E07uk5llvNvVTNshWZMs1gofZGEgaDswAQTeaXQq2A8HCVOea40pGNa4tinG 5FCQKLSTf+Vdj1n2Y40usA6f8zPBszojLPosuQOpg9cMx6hTnjxjW5ig2JpaavAM JlGKZZCaPrVII6qgTlisy+32XPgV1K6G0AiUun3YQ96N3CDUD0VQrOBMlOHhuPHN IbvLq6Lk1ykxr5BwKIqQ+C3Hv7Vl52mKiLU2z3Dsx7sDQFrY5c2cgYfXIo4otElm QPNBJ1fNk/i/Fd8/VVtpoOCVTfbphtTs0FJbpJmVeUX0gqAnnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFExuGpEmWVUhXKOIg3aGe5MJnTWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNiODZmMGYtOTY3Ni0z NjUyLTk0NWYtMDQyMzA5NWE1MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANlnswWTRwRWyHZnKQDc38qA4+8Qx1q9+d0uNB2TuYZjJWmor92qp5 gAJi4YTAMp19siy6//7TrYwW7lFF7GAoS0NBE8Qn6hSG37n5W4ouGJ4fowhPiO1m Ld+tzSv7JRWa8+uu+9dLCSM1qFPfy7T2uK5VIN0CDAiRD9scMXYzps1Q6hhum66m zS/hS7q8oD72RQLzz4oEsxp2GueZHcqcC6IN6Kmv4B9hnfeZ3j+akVj53Ya09x1J rHCYE9hWKgavi4QcEHFDfxZTW8t8nipMrLjQmI3ucafxcil14X8kgp9R7NZp0PFq o/GyMnqV+ZBJ2PBtkJpMX1c87LNChuRh -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:07 2025 by rpki-client