$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa File: 5976b022-9a0f-3266-b2d2-0c6408056bad.roa (raw, json) Hash identifier: w5yHHFpo6H+seyL9cPo4iv5gSQKwUQh7ZqwVrsblKGE= Subject key identifier: BD:5B:09:48:CE:66:8D:D3:5D:07:85:DF:28:1D:5C:81:2E:67:E5:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAD39675E21DA41EA0290 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396545 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ad:39:67:5e:21:da:41:ea:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=b2079605-b234-4bc5-a1cf-1d5a73705a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:90:fc:d0:e6:5e:cb:64:a9:a2:81:f1:a9: b4:a9:52:74:41:ba:80:41:ff:2e:cb:65:f0:1e:a3: 50:83:32:d0:2d:3e:62:82:47:e2:77:db:4e:dc:da: 25:d0:6e:e1:26:27:23:9a:bb:cb:75:ca:8b:1c:2a: 2f:03:34:19:b6:59:aa:e9:ba:9d:24:45:8d:63:72: f0:a9:c9:ef:af:42:6c:b4:7b:58:eb:af:49:bc:dd: 5e:9d:cc:62:f3:f8:01:89:ac:d7:76:e8:a0:03:bd: c2:cd:ce:5d:67:42:2e:79:e1:79:0f:cc:97:b7:00: 4e:f2:d5:7d:6f:5d:5c:2d:b4:c2:22:58:41:67:26: 65:be:70:ab:dd:7e:64:95:7c:b4:0e:3d:e3:43:1b: e1:ff:46:0d:50:0f:c8:36:b9:41:e9:77:40:c5:b6: 8f:f9:b5:fd:47:8c:42:7a:fd:fd:d5:f9:d2:e1:bd: 02:bc:06:82:e6:e4:a8:4a:31:1c:5e:76:23:ac:f5: d5:6e:54:b2:11:a3:15:bc:3e:6e:30:b2:2a:d6:6e: 8e:28:fa:d9:4a:08:70:90:09:12:61:c4:12:cd:cf: bd:78:4e:af:f7:34:22:e0:c2:90:77:db:2d:25:c9: 02:b0:8a:67:35:91:ec:6c:4c:f8:69:c6:26:1b:d9: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:09:48:CE:66:8D:D3:5D:07:85:DF:28:1D:5C:81:2E:67:E5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5976b022-9a0f-3266-b2d2-0c6408056bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:40:f7:d7:08:c7:5c:4f:9f:3d:fa:57:e1:65:a1:73:2d: ef:fd:2e:82:f8:22:fe:2d:84:9c:9a:e3:17:de:23:c7:bb:07: cb:57:b7:e4:f3:81:58:ed:31:eb:c9:5d:b8:1a:5c:96:63:ec: 11:b3:7d:aa:a6:5d:ec:4a:a3:35:03:c4:64:2e:f9:84:1f:ce: a9:09:c0:7a:76:b7:bc:17:b2:f3:49:bb:5d:a4:a6:5d:4f:ef: 2c:96:0a:42:1b:64:57:f7:71:0c:cb:06:a1:91:eb:59:6f:a4: 40:37:fb:33:fc:64:1a:c4:c0:d7:d4:ba:3b:b1:d1:47:d0:27: 1d:ba:1a:4f:2b:0d:9a:6c:7c:1d:3f:66:ef:3f:b4:e2:63:19: a5:bb:05:46:e0:c3:3d:f4:cf:d2:42:e8:d3:b3:34:f7:cf:d6: 45:49:22:0f:3d:e3:9e:b4:73:b3:df:30:a2:47:11:1a:86:4b: 2b:fd:f4:b5:05:15:10:bd:97:c4:9c:ef:e9:51:ea:d4:55:01: a8:ce:dd:f3:d3:b1:54:6a:8d:92:94:4c:42:20:a3:f1:4e:e8: 31:04:f9:dd:ad:fa:7c:fb:de:ed:96:08:fe:71:cb:2a:5c:0f: 7b:2e:6c:53:e5:05:1d:b4:6d:d3:fd:49:e3:94:0d:71:b1:93: 9c:ad:30:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK05Z14h2kHqApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjIwNzk2MDUtYjIzNC00YmM1LWExY2YtMWQ1YTczNzA1YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO+Q/NDmXstkqaKB8am0qVJ0QbqAQf8uy2Xw HqNQgzLQLT5igkfid9tO3Nol0G7hJicjmrvLdcqLHCovAzQZtlmq6bqdJEWNY3Lw qcnvr0JstHtY669JvN1encxi8/gBiazXduigA73Czc5dZ0IueeF5D8yXtwBO8tV9 b11cLbTCIlhBZyZlvnCr3X5klXy0Dj3jQxvh/0YNUA/INrlB6XdAxbaP+bX9R4xC ev391fnS4b0CvAaC5uSoSjEcXnYjrPXVblSyEaMVvD5uMLIq1m6OKPrZSghwkAkS YcQSzc+9eE6v9zQi4MKQd9stJckCsIpnNZHsbEz4acYmG9nMoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL1bCUjOZo3TXQeF3ygdXIEuZ+U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk3NmIwMjItOWEwZi0z MjY2LWIyZDItMGM2NDA4MDU2YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN3ED31wjHXE+fPfpX4WWhcy3v/S6C+CL+LYScmuMX3iPHuwfLV7fk 84FY7THryV24GlyWY+wRs32qpl3sSqM1A8RkLvmEH86pCcB6dre8F7LzSbtdpKZd T+8slgpCG2RX93EMywahketZb6RAN/sz/GQaxMDX1Lo7sdFH0CcduhpPKw2abHwd P2bvP7TiYxmluwVG4MM99M/SQujTszT3z9ZFSSIPPeOetHOz3zCiRxEahksr/fS1 BRUQvZfEnO/pUerUVQGozt3z07FUao2SlExCIKPxTugxBPndrfp8+97tlgj+ccsq XA97LmxT5QUdtG3T/UnjlA1xsZOcrTBM -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:45 2025 by rpki-client