$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa File: 44e848d0-8fb6-313a-a967-66bcb530b0d4.roa (raw, json) Hash identifier: 578urLWQn2UEykzYicWqdCdwoCxDGEZOpE4SuLNHmpQ= Subject key identifier: A7:5E:45:48:4E:83:67:D2:74:93:8D:94:71:7E:9F:2C:88:C2:9E:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB10B64878DDA00441680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396577 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:0b:64:87:8d:da:00:44:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=83306d40-f330-44b1-b1f6-a6c586345c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:a8:0a:14:c8:16:f3:b2:df:78:47:21:d1: 60:ca:0e:3a:3c:59:50:51:d5:56:b7:8b:76:b7:ad: 7a:6c:41:24:db:c2:1a:e7:06:7c:08:5e:da:30:7f: b0:48:0f:53:ed:0e:cd:1e:cb:ec:47:f1:2e:06:f5: 36:41:6b:42:04:98:eb:68:c4:f6:9b:a6:f8:ab:e2: 38:8b:f9:ea:9e:41:46:62:a4:59:6e:2d:53:65:3c: 7e:8e:3a:a9:16:7c:bd:58:1c:9e:1d:31:7c:e3:a9: 34:36:62:24:20:af:0d:a7:9a:2d:32:05:b0:7a:9a: 24:3b:1b:1f:fa:54:88:7b:5a:82:f3:55:98:14:25: 06:8e:27:be:1c:ed:f8:49:33:7c:cb:52:f8:d7:09: 34:b3:af:8b:0a:86:5a:73:76:81:a8:85:26:68:c6: 99:ee:b5:d8:1d:6b:65:bc:fe:8e:b1:21:e0:ee:71: 3e:a0:76:d4:d5:8e:e0:17:2b:65:67:84:2c:0f:fd: 2b:34:a5:4a:a0:b5:45:1b:0f:3c:62:c1:74:c1:fb: 41:f5:13:89:2d:f6:b6:58:2e:bf:b1:c5:7c:07:f9: 8a:0b:61:4d:c7:8a:b8:d8:9f:6e:56:f6:15:57:60: 5b:ac:2c:b7:3f:11:56:fa:a1:17:00:e5:4a:2e:3d: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:45:48:4E:83:67:D2:74:93:8D:94:71:7E:9F:2C:88:C2:9E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:10:d7:5a:c5:a6:76:26:2c:ef:b3:c4:77:8e:2f:cd:7b:2c: d5:f7:1e:ec:fe:45:18:28:f1:c0:12:c8:d9:6e:a7:38:5c:c6: e9:3a:91:b8:b4:ad:4b:29:76:bd:6e:e3:d1:13:ed:4b:1a:35: 75:7a:86:9e:f2:cb:2d:56:e4:2e:c5:b2:1c:20:b4:74:b1:50: c8:b6:26:b3:39:e8:bf:e9:df:20:c2:a6:06:ab:c9:c9:97:60: 1f:b5:2b:c8:41:87:16:ca:3b:6a:4a:ae:65:83:92:5e:f0:57: 95:13:47:d3:34:a4:96:e9:21:a1:0d:13:1b:b2:93:80:4e:00: 47:87:17:1b:e5:3f:6a:25:1e:81:3b:71:4f:ef:71:88:89:70: fc:66:d5:29:c0:73:42:2c:17:db:69:e6:db:40:1c:a3:1b:7c: 37:7b:33:9d:80:48:36:4b:89:d6:93:f7:94:40:5d:9d:38:01: e0:24:cc:e6:dc:77:a1:6a:cc:b6:b6:c9:5f:73:56:2f:11:6a: fa:c9:57:58:35:1c:b8:d8:65:ed:4e:2e:ec:ab:f9:cb:78:32: 6e:2a:fc:b6:74:f9:6e:28:5f:0e:3b:44:1a:92:d1:08:b4:ab: 5a:52:84:50:48:a8:a9:6b:04:08:bc:b1:e9:ba:cf:e2:6c:02: 65:6a:2e:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLELZIeN2gBEFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODMzMDZkNDAtZjMzMC00NGIxLWIxZjYtYTZjNTg2MzQ1Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX6oChTIFvOy33hHIdFgyg46PFlQUdVWt4t2 t616bEEk28Ia5wZ8CF7aMH+wSA9T7Q7NHsvsR/EuBvU2QWtCBJjraMT2m6b4q+I4 i/nqnkFGYqRZbi1TZTx+jjqpFny9WByeHTF846k0NmIkIK8Np5otMgWwepokOxsf +lSIe1qC81WYFCUGjie+HO34STN8y1L41wk0s6+LCoZac3aBqIUmaMaZ7rXYHWtl vP6OsSHg7nE+oHbU1Y7gFytlZ4QsD/0rNKVKoLVFGw88YsF0wftB9ROJLfa2WC6/ scV8B/mKC2FNx4q42J9uVvYVV2BbrCy3PxFW+qEXAOVKLj0rywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKdeRUhOg2fSdJONlHF+nyyIwp7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDRlODQ4ZDAtOGZiNi0z MTNhLWE5NjctNjZiY2I1MzBiMGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsENdaxaZ2Jizvs8R3ji/NeyzV9x7s/kUYKPHAEsjZbqc4XMbpOpG4 tK1LKXa9buPRE+1LGjV1eoae8sstVuQuxbIcILR0sVDItiazOei/6d8gwqYGq8nJ l2AftSvIQYcWyjtqSq5lg5Je8FeVE0fTNKSW6SGhDRMbspOATgBHhxcb5T9qJR6B O3FP73GIiXD8ZtUpwHNCLBfbaebbQByjG3w3ezOdgEg2S4nWk/eUQF2dOAHgJMzm 3Hehasy2tslfc1YvEWr6yVdYNRy42GXtTi7sq/nLeDJuKvy2dPluKF8OO0QaktEI tKtaUoRQSKipawQIvLHpus/ibAJlai7X -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:12 2025 by rpki-client