$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa File: 3452058a-98d8-35f5-9181-437d017e7520.roa (raw, json) Hash identifier: i6H7KkexT2abPUg9a7e6NXMEOemJUGpBNWVBTMmwOVA= Subject key identifier: 1F:47:29:28:BF:B9:90:E9:F8:DF:83:29:DC:F2:C9:0E:7A:36:1E:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77EF3D29D85235473E9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396613 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7e:f3:d2:9d:85:23:54:73:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=98209e63-f8f8-4fd6-9dbc-9dda2f18a356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:27:1a:6e:3d:6f:ac:af:a9:d7:4b:8c:18: f4:55:1e:56:d2:ad:a7:02:7d:70:52:7b:60:80:46: c3:bd:8c:38:2e:dd:76:26:f5:38:fb:69:73:fa:0a: e0:70:31:89:d9:67:4f:5f:ba:4b:e2:8a:b4:cb:15: 45:97:1d:f2:7d:3d:ca:d1:28:28:65:6e:32:5f:1b: 92:d9:0a:26:d0:26:a1:50:c5:ae:0b:bf:0c:1e:59: 33:7c:ea:b2:73:09:73:88:11:b9:7b:53:0e:f1:cb: fd:20:55:11:cf:e7:99:db:d3:7d:fe:a1:9b:41:e4: 02:39:ae:07:0d:07:9a:0c:b3:52:03:8e:27:b4:60: 09:84:eb:5e:d3:28:be:06:31:9c:7a:a2:b1:fe:81: 1c:f9:75:aa:70:e7:93:5a:f9:2e:16:b3:6d:d3:ee: ca:b3:5a:4b:90:83:da:ae:74:04:3c:3c:cc:4d:78: 14:a1:03:91:9c:1d:7f:bc:53:31:15:2a:a6:9c:fc: e2:c8:06:5a:ce:31:13:97:b0:8c:01:5f:77:3b:f3: af:25:96:8a:77:b0:a4:c6:b4:b7:ad:7a:80:40:7e: 2c:c9:75:16:dd:dc:23:5d:22:43:2b:be:e8:bf:07: 23:4b:4f:75:1f:e1:a5:13:f9:b4:51:d5:ea:bb:85: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:29:28:BF:B9:90:E9:F8:DF:83:29:DC:F2:C9:0E:7A:36:1E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fd:97:0d:47:16:97:fe:ae:a0:51:20:2a:d7:d4:5a:27:2c: 47:6b:68:99:24:8b:91:4f:12:fa:c1:56:3f:15:81:cb:70:ed: 45:14:a1:42:a5:d4:5f:81:98:fe:63:7a:47:5f:52:a8:df:79: 8b:27:79:17:6a:8d:1d:4b:25:4f:6a:d2:91:52:53:1a:18:18: 6a:38:4b:a3:0a:1a:49:a2:87:05:be:59:a7:fe:28:df:59:a0: d1:6d:f8:42:98:24:c2:8a:10:c1:98:d9:d2:1c:dd:00:ff:b7: 81:26:34:33:f9:1f:0e:15:25:be:b0:4f:43:eb:83:7d:f1:63: e1:3a:a8:94:f3:c8:fa:9c:31:d6:88:b1:d4:aa:86:5a:25:0b: b6:a5:8e:15:fe:1a:cc:12:c3:ea:cb:62:47:45:47:4d:2d:16: 5e:17:8a:4b:79:82:63:00:b4:71:80:65:98:fd:2b:2e:fb:94: 99:69:c4:cb:e2:41:68:f9:22:ec:d1:dc:ba:fd:e1:17:6e:67: b5:b5:28:c4:24:aa:30:ee:5b:bf:7f:fc:5e:a0:59:ce:2e:7a: c9:e2:6a:2f:63:bc:a1:d1:cf:ba:ba:dd:51:2d:64:dc:5e:a3: 5d:22:44:e4:95:67:e2:56:a7:9f:3d:a4:5d:94:2b:a9:34:d7: 45:5d:87:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx37z0p2FI1Rz6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OTgyMDllNjMtZjhmOC00ZmQ2LTlkYmMtOWRkYTJmMThhMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZEnGm49b6yvqddLjBj0VR5W0q2nAn1wUntg gEbDvYw4Lt12JvU4+2lz+grgcDGJ2WdPX7pL4oq0yxVFlx3yfT3K0SgoZW4yXxuS 2Qom0CahUMWuC78MHlkzfOqycwlziBG5e1MO8cv9IFURz+eZ29N9/qGbQeQCOa4H DQeaDLNSA44ntGAJhOte0yi+BjGceqKx/oEc+XWqcOeTWvkuFrNt0+7Ks1pLkIPa rnQEPDzMTXgUoQORnB1/vFMxFSqmnPziyAZazjETl7CMAV93O/OvJZaKd7CkxrS3 rXqAQH4syXUW3dwjXSJDK77ovwcjS091H+GlE/m0UdXqu4VvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9HKSi/uZDp+N+DKdzyyQ56Nh4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1MjA1OGEtOThkOC0z NWY1LTkxODEtNDM3ZDAxN2U3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv9lw1HFpf+rqBRICrX1FonLEdraJkki5FPEvrBVj8Vgctw7UUUoUKl 1F+BmP5jekdfUqjfeYsneRdqjR1LJU9q0pFSUxoYGGo4S6MKGkmihwW+Waf+KN9Z oNFt+EKYJMKKEMGY2dIc3QD/t4EmNDP5Hw4VJb6wT0Prg33xY+E6qJTzyPqcMdaI sdSqhlolC7aljhX+GswSw+rLYkdFR00tFl4Xikt5gmMAtHGAZZj9Ky77lJlpxMvi QWj5IuzR3Lr94RduZ7W1KMQkqjDuW79//F6gWc4uesniai9jvKHRz7q63VEtZNxe o10iROSVZ+JWp589pF2UK6k010Vdhzk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:56 2025 by rpki-client