$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa File: 41328d87-851c-3912-8b20-d52c93ba2f95.roa (raw, json) Hash identifier: E849WJJ7hDPBdCu44A5qhpXhkQ+VyZPKcaQwx07yDVI= Subject key identifier: 54:1E:51:49:FD:02:53:41:87:59:7C:1B:1D:ED:AA:36:F6:D1:7D:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77B6FF7383B2C65CBA280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397197 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:6f:f7:38:3b:2c:65:cb:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=eff9634b-be60-4f6e-a5e2-b07664ae524d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:86:61:c9:c2:a5:c9:8b:3d:ee:ec:37:eb: d8:0a:5c:50:71:75:b4:19:eb:8d:4a:52:94:6d:d4: fb:aa:1d:63:49:62:06:0a:fa:5f:8c:76:45:1a:f6: 70:f3:70:68:3d:1f:9e:ad:8f:05:0c:62:76:66:8e: 5a:71:e8:44:32:00:ec:70:7b:7c:41:56:f3:f1:a5: 12:2b:d5:36:4f:3f:db:61:76:ba:5f:ee:2e:c0:1f: a1:fb:e4:d8:a9:7e:08:10:2a:32:90:02:e9:c0:51: e2:10:da:2a:2f:75:85:22:18:41:26:12:f2:1e:d4: f5:65:c4:82:13:ee:f2:4c:d1:09:bc:ed:29:4b:27: 92:c3:3f:47:67:71:37:db:21:9d:33:83:0c:e0:e0: 47:96:c2:50:79:5e:10:60:ca:da:cb:b7:18:07:74: b5:b8:30:ae:37:61:d6:ad:e1:bc:8f:4b:da:f3:4a: 42:a5:5c:44:c8:14:a5:02:16:32:ae:2e:f3:95:1a: 0e:6f:55:50:35:b3:af:81:95:71:2b:94:fc:5c:78: 3b:51:31:8f:96:7f:ad:ac:bf:ad:23:5a:b7:f2:46: 9e:2d:59:7e:22:d3:ec:c5:79:c4:e1:e5:9e:86:b3: 55:a0:2e:a6:c9:9f:51:0a:69:64:6e:b3:c5:92:00: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:51:49:FD:02:53:41:87:59:7C:1B:1D:ED:AA:36:F6:D1:7D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3a:69:4c:f5:1e:f7:cd:b5:7e:fc:48:5e:05:9a:1a:ea:1b: e6:2b:9b:c8:ee:5a:d0:50:04:34:c9:3a:da:db:17:16:ef:31: 4a:fe:47:2e:4b:08:26:58:c7:c0:7d:a7:1d:d2:67:1c:c1:c1: a7:1f:4d:cf:c7:84:27:28:75:64:ff:04:43:5a:60:2d:fa:72: 2f:70:81:0f:9a:fd:d8:65:25:0b:61:bb:e0:c2:c8:96:83:a1: 23:6d:fc:71:a7:eb:1a:b9:88:9d:46:40:bb:62:dc:b2:ff:90: d6:88:55:f6:08:78:f9:39:e1:5a:5e:19:d0:1c:e1:c4:18:ec: 2f:21:0e:f7:e8:4a:4f:92:9d:f5:67:49:82:dd:93:05:67:ff: dc:b7:5b:11:00:6a:0f:92:22:47:95:43:66:81:3a:b8:9d:dc: bc:f1:d2:54:f4:28:8f:c5:9a:44:a1:a9:40:ae:ca:3c:59:6c: b5:15:88:4a:a2:81:c9:1b:04:44:44:82:d6:71:65:84:b9:ec: db:80:9c:3c:fa:44:78:d0:d3:b4:a5:ce:a3:80:d1:bb:f4:e6: e6:79:2d:04:17:1b:26:37:59:c2:fa:73:b0:29:2c:25:0a:4d: 27:82:fd:75:77:7e:e9:06:0d:ed:e1:ff:b8:5f:11:19:0b:b0: e6:17:f4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3tv9zg7LGXLooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWZmOTYzNGItYmU2MC00ZjZlLWE1ZTItYjA3NjY0YWU1MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgiGYcnCpcmLPe7sN+vYClxQcXW0GeuNSlKU bdT7qh1jSWIGCvpfjHZFGvZw83BoPR+erY8FDGJ2Zo5acehEMgDscHt8QVbz8aUS K9U2Tz/bYXa6X+4uwB+h++TYqX4IECoykALpwFHiENoqL3WFIhhBJhLyHtT1ZcSC E+7yTNEJvO0pSyeSwz9HZ3E32yGdM4MM4OBHlsJQeV4QYMray7cYB3S1uDCuN2HW reG8j0va80pCpVxEyBSlAhYyri7zlRoOb1VQNbOvgZVxK5T8XHg7UTGPln+trL+t I1q38kaeLVl+ItPsxXnE4eWehrNVoC6myZ9RCmlkbrPFkgDvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQeUUn9AlNBh1l8Gx3tqjb20X1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDEzMjhkODctODUxYy0z OTEyLThiMjAtZDUyYzkzYmEyZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw6aUz1HvfNtX78SF4FmhrqG+Yrm8juWtBQBDTJOtrbFxbvMUr+Ry5L CCZYx8B9px3SZxzBwacfTc/HhCcodWT/BENaYC36ci9wgQ+a/dhlJQthu+DCyJaD oSNt/HGn6xq5iJ1GQLti3LL/kNaIVfYIePk54VpeGdAc4cQY7C8hDvfoSk+SnfVn SYLdkwVn/9y3WxEAag+SIkeVQ2aBOrid3Lzx0lT0KI/FmkShqUCuyjxZbLUViEqi gckbBEREgtZxZYS57NuAnDz6RHjQ07SlzqOA0bv05uZ5LQQXGyY3WcL6c7ApLCUK TSeC/XV3fukGDe3h/7hfERkLsOYX9Nc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:04 2025 by rpki-client