$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa File: 58cd867b-ae53-310e-947f-54ef858e3f7a.roa (raw, json) Hash identifier: wzcN7DI61zXfUdjDA3RwjuQdJjsnGTolKKMOxZxNq/E= Subject key identifier: 96:2E:3A:A1:21:7E:5C:77:75:E1:93:E8:E4:9D:73:15:9F:30:B3:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB000AC11E34D8AC56E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396589 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:00:ac:11:e3:4d:8a:c5:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=acbb0335-2fef-4998-a4e1-ca26e7660957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:a9:d0:f6:c4:6a:65:f4:1a:96:5d:16:04: 4f:6f:6a:cf:00:0f:39:be:86:dc:5d:cf:72:c3:c9: c3:d2:95:93:6c:91:42:43:21:3b:e0:76:d5:5e:04: 22:84:f7:bc:ae:b3:ea:98:51:d2:e3:b9:00:47:f2: a6:ed:74:9b:1d:fa:1b:2b:9e:0a:db:9c:96:c0:7c: 9f:8d:b8:31:a3:00:1f:14:20:ab:63:31:3f:ec:1e: e4:89:2b:c8:44:a6:66:83:24:72:d9:6d:eb:36:53: ba:34:5b:5f:d4:33:a4:a4:e1:3f:7c:dc:b9:5f:b9: 00:b9:d7:01:7d:a2:c5:11:f1:09:f7:6d:b6:c6:01: 4a:36:0f:21:73:72:11:e4:81:84:48:a2:7c:c6:72: 43:41:33:33:10:51:7e:37:d3:cf:39:8c:a9:99:be: b0:9b:74:76:ca:a5:00:0c:b6:d9:fb:74:ba:8b:8a: fb:5c:98:ed:ed:ce:51:f7:e4:6e:10:66:6f:e8:64: 3a:04:67:9a:d8:f0:bb:dd:8d:35:d0:4b:36:d9:0b: 49:b0:4b:02:f7:df:bc:f5:8c:b8:ef:38:8e:04:22: 17:90:96:40:f1:85:0a:69:25:4b:87:ef:51:45:f2: 04:43:7d:fa:ce:f3:a4:47:7c:92:36:e7:15:2b:8b: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2E:3A:A1:21:7E:5C:77:75:E1:93:E8:E4:9D:73:15:9F:30:B3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:28:aa:ca:1c:45:11:d8:e1:5e:12:58:18:f7:4c:31:b7:06: 2e:d8:3e:36:c2:76:11:b1:5f:15:92:d3:72:a3:0b:ca:94:16: a7:83:55:1b:4d:9a:ad:6d:76:d6:8d:6b:1a:13:3a:a2:ad:14: d2:cb:2d:9b:80:82:61:63:dc:a0:48:30:8a:bd:b8:3e:74:18: 05:7a:4c:63:b4:b7:b4:d0:38:62:1a:62:c0:bc:22:f3:21:76: 44:de:28:51:fc:fe:71:02:26:fe:91:e7:ef:ef:64:d1:1d:1c: 01:fd:c2:7f:67:0c:7f:f4:f0:c8:25:e9:d1:23:97:46:fc:8f: 75:89:15:3d:36:10:99:a1:d3:2b:72:be:52:dd:8a:69:6d:7a: 3c:3b:e0:b0:65:98:b8:0c:e8:2a:e3:70:03:7b:fa:a0:5e:6d: 08:4d:60:0e:0d:08:67:ac:f9:ab:dc:91:e0:50:23:6f:b7:ac: 5f:d5:cf:ee:2f:e1:d6:3f:47:db:b1:e6:36:0b:a8:df:54:9e: 73:60:35:1c:29:9b:9c:22:d8:94:a7:dd:5f:af:ff:c6:4c:19: 51:ef:e2:f5:e9:40:8b:56:79:74:87:b2:a8:c5:7f:45:ee:a7: c2:1e:e6:25:17:2e:b5:5c:34:3c:6f:2d:69:ea:96:15:2e:65: ae:c1:77:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLAArBHjTYrFboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWNiYjAzMzUtMmZlZi00OTk4LWE0ZTEtY2EyNmU3NjYwOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Cp0PbEamX0GpZdFgRPb2rPAA85vobcXc9y w8nD0pWTbJFCQyE74HbVXgQihPe8rrPqmFHS47kAR/Km7XSbHfobK54K25yWwHyf jbgxowAfFCCrYzE/7B7kiSvIRKZmgyRy2W3rNlO6NFtf1DOkpOE/fNy5X7kAudcB faLFEfEJ9222xgFKNg8hc3IR5IGESKJ8xnJDQTMzEFF+N9PPOYypmb6wm3R2yqUA DLbZ+3S6i4r7XJjt7c5R9+RuEGZv6GQ6BGea2PC73Y010Es22QtJsEsC99+89Yy4 7ziOBCIXkJZA8YUKaSVLh+9RRfIEQ336zvOkR3ySNucVK4v7HQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJYuOqEhflx3deGT6OSdcxWfMLNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThjZDg2N2ItYWU1My0z MTBlLTk0N2YtNTRlZjg1OGUzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0KKrKHEUR2OFeElgY90wxtwYu2D42wnYRsV8VktNyowvKlBang1Ub TZqtbXbWjWsaEzqirRTSyy2bgIJhY9ygSDCKvbg+dBgFekxjtLe00DhiGmLAvCLz IXZE3ihR/P5xAib+kefv72TRHRwB/cJ/Zwx/9PDIJenRI5dG/I91iRU9NhCZodMr cr5S3YppbXo8O+CwZZi4DOgq43ADe/qgXm0ITWAODQhnrPmr3JHgUCNvt6xf1c/u L+HWP0fbseY2C6jfVJ5zYDUcKZucItiUp91fr//GTBlR7+L16UCLVnl0h7KoxX9F 7qfCHuYlFy61XDQ8by1p6pYVLmWuwXdp -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:13 2025 by rpki-client