$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa File: 3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa (raw, json) Hash identifier: 7u5ZMu2Uf3rFl1rDnMSdRFvKb7P56onU8Iv3MBo6IF0= Subject key identifier: FD:53:65:26:57:7C:84:E3:34:91:98:76:5E:9D:35:E1:F2:B6:A8:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77CD1F420282D41053300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396552 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:d1:f4:20:28:2d:41:05:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=afab2d5f-b2c9-4eed-bbad-c752fb76e183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:ba:a5:ca:7a:36:e6:da:6c:1a:d4:d5:d8: 35:5c:68:74:1d:d2:2b:21:12:42:fc:b8:34:81:53: 61:c0:40:07:7b:95:39:da:4e:f3:4e:de:a4:ae:1b: 85:38:1e:28:cb:c3:dc:97:41:78:6f:3c:38:58:56: 9c:1a:9a:ec:84:e3:dc:e2:b7:75:a1:95:f0:ef:87: 2a:21:70:6c:49:1b:a2:03:3a:b0:08:bf:69:5e:a2: f1:48:8d:83:b9:cf:f9:59:c0:82:59:8a:09:b9:43: af:30:ac:df:70:0e:db:e3:84:1d:2e:d7:e9:3c:a1: 9d:b6:82:05:c0:26:c8:5c:3f:50:16:21:9a:0d:76: 5e:01:f1:e1:77:e5:45:24:f1:6d:51:4c:ff:a4:44: 6f:30:71:9a:e5:5f:6b:1c:e6:d5:56:24:47:8e:f3: 3e:ea:3d:48:8f:76:18:61:22:18:ea:09:4d:ab:73: bf:05:3e:f6:5f:77:44:95:0c:cb:7b:d8:0b:4f:1e: a2:f0:8d:96:21:bf:55:94:51:d4:a4:29:32:35:ca: db:42:91:ae:3a:82:58:f1:59:77:22:1f:56:67:eb: 99:1b:94:09:6f:e0:4e:b0:69:1a:01:86:fa:e2:77: c7:57:6e:1d:50:2c:cb:dc:9a:e3:59:23:a7:c6:02: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:65:26:57:7C:84:E3:34:91:98:76:5E:9D:35:E1:F2:B6:A8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:aa:5f:3e:b7:7b:74:ce:1d:53:5a:58:7e:e6:b2:16:3a:84: 76:04:c0:d5:ae:9e:3b:1b:48:ea:2f:74:5e:a0:e8:26:7b:c6: e8:bd:a5:a6:28:9c:1b:fa:5d:1f:87:ab:3f:81:69:06:44:e4: 53:4a:67:81:15:23:17:06:c9:d8:84:16:b4:d7:08:3d:10:64: cc:7c:f6:1b:48:4c:23:1c:9a:59:5e:8b:d8:c8:07:52:6e:3a: 55:6c:ad:13:14:6f:62:ab:5e:c0:2b:7d:46:9b:4c:ea:51:0a: 4f:98:33:31:85:df:18:20:9f:ca:b5:58:4c:70:13:22:7d:f0: 80:1e:bb:2e:ff:ef:c5:2d:1d:8e:f5:13:b7:26:3d:a8:7c:1f: ee:f8:5f:dc:6b:d5:64:26:c3:a0:94:3b:48:62:e3:68:a2:8d: 9b:06:25:76:06:af:f9:ed:ff:7d:2b:0d:80:3d:01:19:82:15: bf:be:06:f7:78:85:33:0c:b7:72:08:f0:f6:aa:83:2c:24:df: 99:73:97:b8:5a:5f:21:1d:f8:82:a5:f1:39:44:97:a8:55:01: c5:62:36:7a:a4:7b:39:87:d7:f6:34:2a:3d:81:e6:5e:09:de: d5:33:01:02:17:a5:c3:c9:d8:4e:b8:a1:35:18:c1:c1:ff:0d: 63:96:3f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3zR9CAoLUEFMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWZhYjJkNWYtYjJjOS00ZWVkLWJiYWQtYzc1MmZiNzZlMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXy6pcp6NubabBrU1dg1XGh0HdIrIRJC/Lg0 gVNhwEAHe5U52k7zTt6krhuFOB4oy8Pcl0F4bzw4WFacGprshOPc4rd1oZXw74cq IXBsSRuiAzqwCL9pXqLxSI2Duc/5WcCCWYoJuUOvMKzfcA7b44QdLtfpPKGdtoIF wCbIXD9QFiGaDXZeAfHhd+VFJPFtUUz/pERvMHGa5V9rHObVViRHjvM+6j1Ij3YY YSIY6glNq3O/BT72X3dElQzLe9gLTx6i8I2WIb9VlFHUpCkyNcrbQpGuOoJY8Vl3 Ih9WZ+uZG5QJb+BOsGkaAYb64nfHV24dUCzL3JrjWSOnxgLy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1TZSZXfITjNJGYdl6dNeHytqjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I4YTdkNzUtOWNhMS0z ZDI3LWIyYTktOWFmODg3OTk2ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmqXz63e3TOHVNaWH7mshY6hHYEwNWunjsbSOovdF6g6CZ7xui9paYo nBv6XR+Hqz+BaQZE5FNKZ4EVIxcGydiEFrTXCD0QZMx89htITCMcmllei9jIB1Ju OlVsrRMUb2KrXsArfUabTOpRCk+YMzGF3xggn8q1WExwEyJ98IAeuy7/78UtHY71 E7cmPah8H+74X9xr1WQmw6CUO0hi42iijZsGJXYGr/nt/30rDYA9ARmCFb++Bvd4 hTMMt3II8Paqgywk35lzl7haXyEd+IKl8TlEl6hVAcViNnqkezmH1/Y0Kj2B5l4J 3tUzAQIXpcPJ2E64oTUYwcH/DWOWP1g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:21 2025 by rpki-client