$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bd53078-6cf9-3bb6-9c7e-92fc1d6c2402.roa File: 3bd53078-6cf9-3bb6-9c7e-92fc1d6c2402.roa (raw, json) Hash identifier: FDWcEbL0jM7wCYjUnq74rUkFcMR2EP9ETymIE8UOM8Y= Subject key identifier: 85:8A:B9:27:24:AB:4E:03:FD:74:A7:65:C9:DA:66:07:4A:B4:F5:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB037F4762BC368C16140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bd53078-6cf9-3bb6-9c7e-92fc1d6c2402.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396549 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:37:f4:76:2b:c3:68:c1:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=d2909b69-3c3c-4540-8368-623ee826f469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:2d:c8:f0:33:a8:db:9f:40:58:db:03:68: 2b:26:cd:dd:06:a3:71:91:34:35:57:b1:04:41:71: ae:ce:5f:14:49:8e:0f:1f:c0:60:00:fc:19:37:b5: e2:49:1d:47:d2:3a:dc:a7:81:5b:9f:ab:48:cf:d6: c1:c1:ab:70:1c:0d:dd:66:bf:38:ba:b6:03:92:8b: 26:1d:de:b1:e5:45:1e:5d:c3:96:ff:ca:a7:00:7e: c2:50:b4:35:de:5c:2d:80:a8:8a:17:f3:40:78:f9: eb:e8:cc:19:24:c3:53:6e:ae:b6:8d:36:46:66:bb: fd:c3:92:6e:dd:0c:89:02:52:c4:b5:06:2d:d1:e6: 12:40:34:6a:d6:f0:0f:90:95:c5:ad:76:49:36:db: 4e:61:b7:a3:9e:7d:01:cf:b0:08:c6:27:20:b8:3a: cc:db:8f:de:ee:a3:4f:ca:b6:b5:d4:9d:c2:ca:b2: 5c:33:9d:07:35:3f:07:a4:83:10:7e:ca:01:80:7c: 8b:b8:58:2d:09:12:73:37:84:65:15:6d:dd:e9:78: ba:63:ec:ed:e7:3e:12:98:b9:73:4d:bd:3c:3b:68: c2:89:a2:19:ce:b4:55:f9:f8:ce:31:f7:03:59:58: dd:aa:05:70:f4:6f:2f:e9:38:f7:8a:f3:9d:51:df: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:B9:27:24:AB:4E:03:FD:74:A7:65:C9:DA:66:07:4A:B4:F5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bd53078-6cf9-3bb6-9c7e-92fc1d6c2402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f8:59:63:22:e9:9c:92:da:b6:21:83:f3:2e:50:5b:96:6f: db:4d:d8:55:da:0b:71:23:ea:fa:d6:15:70:cd:03:cf:47:b9: 4a:d6:13:6c:1b:26:53:9c:50:30:e5:19:ed:9c:e9:f6:7c:a5: 4d:87:6d:53:c6:cb:82:12:c5:48:67:cc:9b:45:c3:53:15:4b: c7:d0:ab:8f:76:a6:bc:57:bd:06:24:76:a1:30:31:e8:2c:e6: 15:2d:a4:ea:31:4a:35:57:95:25:28:f5:9a:72:f8:f4:00:f1: a3:90:08:04:cc:5b:36:87:dc:87:ed:e5:5d:25:de:73:79:d8: 34:f5:ea:31:6f:8a:25:26:9c:d8:71:17:c2:3c:f0:d1:a1:f7: 1b:c5:27:04:72:23:05:33:5c:74:61:aa:f0:87:ba:f4:4b:b4: 2c:d4:c7:bc:a4:39:8b:4c:0a:e0:a7:7c:98:d9:93:dc:a0:af: 3c:4f:3b:5e:6d:21:2e:03:02:82:f7:cf:53:5d:35:ee:60:37: 50:72:3c:ff:0f:82:7e:11:1d:f0:6e:66:88:e6:6d:42:36:ac: 91:b3:bb:b9:92:ad:6e:7c:1c:28:90:a3:5e:36:88:03:f2:ee: 43:c8:07:23:4f:f5:d1:fe:fb:fd:6d:7c:91:b8:81:3d:a9:9f: 99:54:11:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLA39HYrw2jBYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDI5MDliNjktM2MzYy00NTQwLTgzNjgtNjIzZWU4MjZmNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC0tyPAzqNufQFjbA2grJs3dBqNxkTQ1V7EE QXGuzl8USY4PH8BgAPwZN7XiSR1H0jrcp4Fbn6tIz9bBwatwHA3dZr84urYDkosm Hd6x5UUeXcOW/8qnAH7CULQ13lwtgKiKF/NAePnr6MwZJMNTbq62jTZGZrv9w5Ju 3QyJAlLEtQYt0eYSQDRq1vAPkJXFrXZJNttOYbejnn0Bz7AIxicguDrM24/e7qNP yra11J3CyrJcM50HNT8HpIMQfsoBgHyLuFgtCRJzN4RlFW3d6Xi6Y+zt5z4SmLlz Tb08O2jCiaIZzrRV+fjOMfcDWVjdqgVw9G8v6Tj3ivOdUd8TVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIWKuSckq04D/XSnZcnaZgdKtPUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2JkNTMwNzgtNmNmOS0z YmI2LTljN2UtOTJmYzFkNmMyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBB+FljIumcktq2IYPzLlBblm/bTdhV2gtxI+r61hVwzQPPR7lK1hNs GyZTnFAw5RntnOn2fKVNh21TxsuCEsVIZ8ybRcNTFUvH0KuPdqa8V70GJHahMDHo LOYVLaTqMUo1V5UlKPWacvj0APGjkAgEzFs2h9yH7eVdJd5zedg09eoxb4olJpzY cRfCPPDRofcbxScEciMFM1x0Yarwh7r0S7Qs1Me8pDmLTArgp3yY2ZPcoK88Tzte bSEuAwKC989TXTXuYDdQcjz/D4J+ER3wbmaI5m1CNqyRs7u5kq1ufBwokKNeNogD 8u5DyAcjT/XR/vv9bXyRuIE9qZ+ZVBHW -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:05 2025 by rpki-client