$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51de109f-4992-31cf-9959-960fe10e4df5.roa File: 51de109f-4992-31cf-9959-960fe10e4df5.roa (raw, json) Hash identifier: QWl/Vjse8iM1t20Eaa/OOOwomDZgSharlRr4al/0/oY= Subject key identifier: 54:07:42:95:A8:23:DF:22:42:A9:08:37:37:B3:F1:49:F2:9C:D0:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAF8A7AEEAF5166464E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51de109f-4992-31cf-9959-960fe10e4df5.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 36632 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:8a:7a:ee:af:51:66:46:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=a398b1a5-be92-4c97-9979-63531eeb28b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:3f:58:56:52:f8:7c:9b:7d:3b:d5:de:31: b0:3d:69:f8:a7:73:1f:e3:4d:b7:6c:3d:e3:be:02: 03:16:b8:a3:81:ae:2f:af:70:1c:79:a9:e4:2e:e2: 36:71:de:13:7a:50:4d:48:fd:41:f8:88:57:3b:db: ff:f1:a7:69:22:bd:d4:3c:6b:2e:61:52:26:ee:eb: a1:e4:d8:e1:5d:b1:32:e4:56:b0:6b:03:3e:3e:56: c9:5d:18:22:22:f5:f4:e2:d0:26:9c:7e:ca:21:ef: 88:1f:71:8d:8a:5c:5a:c7:6f:e6:7c:08:81:f4:59: 01:5a:3c:7b:01:e2:b6:f2:7e:4e:24:28:d2:ba:55: af:cf:fa:ee:64:6c:f9:89:47:a3:e8:cd:30:3f:52: f4:c7:cc:96:ba:6d:b2:c2:2a:7b:a5:05:68:5d:fe: 7b:34:11:57:e6:7c:f3:6b:ce:1b:6a:bf:12:c4:c5: 19:0b:81:f3:54:81:ca:32:a8:ad:52:d0:79:6d:f9: bc:cd:e6:86:21:02:e1:3a:40:88:16:08:1b:9b:1e: 57:39:86:be:a2:43:6c:a4:45:78:ba:2e:2f:b1:2a: 25:dc:33:f2:8e:40:4b:3a:06:9b:db:a0:11:50:42: 6d:d2:4e:8d:1c:7d:73:64:fe:ea:be:93:ed:cc:05: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:42:95:A8:23:DF:22:42:A9:08:37:37:B3:F1:49:F2:9C:D0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51de109f-4992-31cf-9959-960fe10e4df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9a:fa:47:7c:86:66:eb:89:b3:b0:0e:66:56:7e:7c:5d:66: 16:fa:54:27:fc:90:c2:c0:fc:b0:36:27:5c:1c:8f:e8:c6:34: 89:0f:f6:67:27:c0:b2:aa:26:71:64:56:88:27:16:40:51:19: 35:e8:f6:30:be:78:97:47:0d:7f:09:36:92:1d:36:34:9c:e7: 17:24:aa:61:19:62:e0:70:db:8e:ec:80:78:4d:13:35:71:1e: 56:46:e2:c1:b2:60:08:e2:59:5b:fa:e3:e6:9f:8a:9e:07:58: be:5e:da:df:c5:07:70:38:c8:10:55:8e:ba:d0:39:75:e4:bd: 61:75:2b:95:b5:c3:55:9c:89:64:23:c7:3d:b8:d0:b5:e4:9a: 01:3e:2e:f4:87:01:a7:c6:23:c5:29:a8:43:53:33:de:fd:01: 22:dd:bf:8b:70:4b:ec:95:d2:a8:32:51:72:f3:43:ac:08:40: 9c:29:c3:36:a6:cc:76:c4:27:87:95:93:c2:d5:45:d0:36:5f: 21:f4:03:0f:31:e9:5d:cd:a0:26:da:e5:95:9e:51:f7:90:92: 45:ff:52:5e:5c:a7:de:9f:c2:df:ca:e1:63:62:1c:32:31:3a: 8c:0d:e0:c6:6b:ae:d8:90:72:14:cc:ca:26:60:09:1c:36:d0: fc:12:ac:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK+Keu6vUWZGTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTM5OGIxYTUtYmU5Mi00Yzk3LTk5NzktNjM1MzFlZWIyOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrg/WFZS+HybfTvV3jGwPWn4p3Mf4023bD3j vgIDFrijga4vr3AceankLuI2cd4TelBNSP1B+IhXO9v/8adpIr3UPGsuYVIm7uuh 5NjhXbEy5FawawM+PlbJXRgiIvX04tAmnH7KIe+IH3GNilxax2/mfAiB9FkBWjx7 AeK28n5OJCjSulWvz/ruZGz5iUej6M0wP1L0x8yWum2ywip7pQVoXf57NBFX5nzz a84bar8SxMUZC4HzVIHKMqitUtB5bfm8zeaGIQLhOkCIFggbmx5XOYa+okNspEV4 ui4vsSol3DPyjkBLOgab26ARUEJt0k6NHH1zZP7qvpPtzAXD0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFQHQpWoI98iQqkINzez8UnynNA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFkZTEwOWYtNDk5Mi0z MWNmLTk5NTktOTYwZmUxMGU0ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMmvpHfIZm64mzsA5mVn58XWYW+lQn/JDCwPywNidcHI/oxjSJD/Zn J8CyqiZxZFaIJxZAURk16PYwvniXRw1/CTaSHTY0nOcXJKphGWLgcNuO7IB4TRM1 cR5WRuLBsmAI4llb+uPmn4qeB1i+XtrfxQdwOMgQVY660Dl15L1hdSuVtcNVnIlk I8c9uNC15JoBPi70hwGnxiPFKahDUzPe/QEi3b+LcEvsldKoMlFy80OsCECcKcM2 psx2xCeHlZPC1UXQNl8h9AMPMeldzaAm2uWVnlH3kJJF/1JeXKfen8LfyuFjYhwy MTqMDeDGa67YkHIUzMomYAkcNtD8Eqxd -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:30 2025 by rpki-client