$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa File: 34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa (raw, json) Hash identifier: QpJiXh/FZF0ywVQg8uBox3AZ79+IEV6Yv1TJ59l8H1k= Subject key identifier: BA:67:D1:76:55:87:F1:3A:DD:58:42:2F:C2:DB:D0:2B:F8:E1:A9:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC778CA50C5FD679D855F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 22547 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:ca:50:c5:fd:67:9d:85:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=d860d46e-5bf1-4e5e-ab82-575007bab261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:a1:c8:3d:17:12:ef:28:54:46:53:e1:89: 3b:78:a1:5e:66:f0:e2:d4:a5:cf:cf:0b:fa:64:70: f1:a1:17:1a:cf:1e:4f:bb:4f:be:5d:b1:9d:de:28: 10:48:78:ec:e0:ee:57:e4:aa:f3:e8:25:7b:85:29: b8:5b:62:5a:8b:f8:ca:59:fd:fa:9b:9a:5c:ef:95: bc:3f:c6:8c:5b:eb:bb:8b:89:31:db:76:f5:22:c8: d3:60:cf:fa:52:1a:25:16:cb:b1:ce:4f:70:0f:01: 35:3d:d0:1d:89:ea:09:57:4e:3e:e5:76:5f:e5:a8: df:98:04:35:3a:df:61:13:16:df:4f:ca:43:ad:55: f9:ca:98:be:0f:23:82:bb:85:9d:72:cb:23:89:fa: d0:67:03:68:fd:f9:93:33:ca:8f:c7:70:ea:82:51: 02:a3:82:74:69:82:35:65:f1:c0:35:be:d0:b1:5e: c4:24:61:33:84:77:86:cb:82:51:e6:ff:4b:df:25: ca:a5:b4:c1:39:9d:cd:87:5e:20:95:ff:1c:01:61: 90:5b:f5:54:df:b5:22:c1:94:ef:15:d6:42:dc:db: f4:49:5d:fb:1d:d0:74:78:14:24:40:ed:48:13:86: 34:0d:dd:8a:81:24:5a:41:ef:0b:2c:26:29:14:b2: e8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:D1:76:55:87:F1:3A:DD:58:42:2F:C2:DB:D0:2B:F8:E1:A9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34b33b2b-1d4c-330d-9d90-8cbe021e9e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:41:fa:58:dd:ec:35:d3:69:dc:71:1e:2d:52:27:b7:1d:ce: e2:59:1d:49:43:9c:ac:78:86:0c:78:7b:e2:bf:be:de:35:09: 02:a6:99:0d:f4:d2:ea:b1:5e:e2:fa:4d:80:1a:e8:95:26:d6: de:f9:d3:db:2c:e1:cf:9c:e5:49:d5:5c:fc:3f:dd:2a:77:47: 7d:1b:aa:ee:1f:ac:7b:c2:88:c9:78:87:2f:dd:80:29:13:45: 3a:6a:ff:21:d6:5c:41:4b:d9:06:9d:94:9b:14:50:2c:92:c3: c4:39:9a:79:2b:bb:19:3e:dd:73:c5:f2:af:b2:e5:0a:98:80: 23:66:59:ab:18:be:ae:e0:de:2c:7f:11:0e:3f:f7:b4:67:9e: ef:62:5b:d4:02:1c:d5:2c:0e:96:0e:6e:e7:57:28:84:63:91: 6b:90:13:7a:f7:5f:8a:67:53:17:51:17:60:2f:1a:4a:17:61: dd:83:e4:a7:43:bc:2e:a5:87:07:a2:2d:be:ce:36:36:34:49: 66:41:b8:58:15:40:63:18:03:56:74:63:cb:ad:cf:bd:47:55: 18:7e:c8:33:3b:08:ac:94:f9:70:f6:39:85:9c:2a:ec:f1:35: 7f:6b:c3:4a:3d:18:77:e8:5b:d7:ac:00:7d:d6:86:4e:95:11: c9:2c:57:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3jKUMX9Z52FX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZDg2MGQ0NmUtNWJmMS00ZTVlLWFiODItNTc1MDA3YmFiMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnROhyD0XEu8oVEZT4Yk7eKFeZvDi1KXPzwv6 ZHDxoRcazx5Pu0++XbGd3igQSHjs4O5X5Krz6CV7hSm4W2Jai/jKWf36m5pc75W8 P8aMW+u7i4kx23b1IsjTYM/6UholFsuxzk9wDwE1PdAdieoJV04+5XZf5ajfmAQ1 Ot9hExbfT8pDrVX5ypi+DyOCu4WdcssjifrQZwNo/fmTM8qPx3DqglECo4J0aYI1 ZfHANb7QsV7EJGEzhHeGy4JR5v9L3yXKpbTBOZ3Nh14glf8cAWGQW/VU37UiwZTv FdZC3Nv0SV37HdB0eBQkQO1IE4Y0Dd2KgSRaQe8LLCYpFLLouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpn0XZVh/E63VhCL8Lb0Cv44akGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzRiMzNiMmItMWQ0Yy0z MzBkLTlkOTAtOGNiZTAyMWU5ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRB+ljd7DXTadxxHi1SJ7cdzuJZHUlDnKx4hgx4e+K/vt41CQKmmQ30 0uqxXuL6TYAa6JUm1t7509ss4c+c5UnVXPw/3Sp3R30bqu4frHvCiMl4hy/dgCkT RTpq/yHWXEFL2QadlJsUUCySw8Q5mnkruxk+3XPF8q+y5QqYgCNmWasYvq7g3ix/ EQ4/97Rnnu9iW9QCHNUsDpYObudXKIRjkWuQE3r3X4pnUxdRF2AvGkoXYd2D5KdD vC6lhweiLb7ONjY0SWZBuFgVQGMYA1Z0Y8utz71HVRh+yDM7CKyU+XD2OYWcKuzx NX9rw0o9GHfoW9esAH3Whk6VEcksV7o= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:15 2025 by rpki-client