$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa File: 6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa (raw, json) Hash identifier: j+BpuFCdTBLWeO9w8gw2G+Se5ea7x+AIHW9R6vJ0SFM= Subject key identifier: C4:B8:D0:6D:14:84:AE:29:EF:40:A4:BE:AD:E0:FD:66:7B:B9:8D:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAECEE3B7D572051A3B62 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396597 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ae:ce:e3:b7:d5:72:05:1a:3b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=88b44d95-0923-4321-a290-7f5ba7ab02cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:a3:d8:4b:f7:78:f9:b3:70:0e:20:62:92: 96:fd:ec:4a:22:18:17:99:6c:2b:6a:37:b1:3a:25: 50:f2:26:a8:3e:03:85:a1:1e:2b:57:61:6d:e5:92: 81:a2:9b:23:d5:09:c2:24:ca:34:d3:06:b3:1e:d4: b0:80:08:6f:ae:23:cc:42:28:a5:3e:59:f3:4b:24: 13:c6:43:5d:95:ac:77:e4:59:eb:12:c1:9a:fb:be: 8c:16:96:96:fe:6a:82:d7:eb:a5:0c:d5:dc:01:ba: 2e:ad:de:50:b8:6a:64:17:67:9b:5e:a8:d6:5c:86: 4d:9e:0e:69:24:c9:88:7a:97:65:6f:d3:eb:1f:20: e8:d6:17:f8:c6:d5:aa:f5:1d:65:a2:cd:76:a0:df: e3:f5:63:04:c9:6b:10:a1:db:1a:9b:cf:be:bf:2b: fb:24:3c:0d:31:40:ef:bb:dc:4a:4d:c8:b4:4a:f8: e7:92:ae:14:08:f7:10:e9:a3:60:cb:67:ed:f8:d0: bf:51:97:83:44:6c:25:f9:1b:3b:3f:63:c1:fd:06: 21:db:25:3b:e6:7f:f0:e0:81:1e:c2:82:f5:1e:d6: d1:0c:f1:b6:e9:6c:3d:f3:55:7b:c0:ca:89:b0:da: d5:4b:b9:69:7b:66:3e:83:7b:fa:04:5a:9a:a3:5e: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:D0:6D:14:84:AE:29:EF:40:A4:BE:AD:E0:FD:66:7B:B9:8D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ac:fd:17:1e:e9:04:4f:61:d7:b6:58:81:b6:df:aa:b6:04: b5:6a:a2:bb:ae:ec:e4:0b:5a:df:1e:98:3a:9a:77:a2:ca:c3: c2:73:95:51:8e:0f:97:ad:b1:fe:d7:d5:db:03:ea:dd:58:64: 85:97:26:3b:9a:6f:1c:c5:0e:f8:21:bc:8f:93:fa:b7:59:50: 22:8a:9a:69:4a:e3:77:d2:b2:8e:47:20:9a:62:81:46:26:af: 49:76:b5:15:85:df:bb:30:2d:8d:89:15:d0:5a:2a:86:17:bb: 7a:71:74:df:bb:36:a0:e8:06:87:8d:8a:25:a5:9f:19:c5:6d: 1b:65:45:7f:57:eb:67:ff:00:e9:48:23:18:40:11:60:14:04: bf:89:fb:bf:4c:1d:72:94:a2:36:a3:ed:0b:10:c2:0b:b3:15: 22:a8:21:35:65:ae:04:eb:31:b9:a0:af:67:23:94:df:ff:83: dc:23:d3:ef:6b:11:b5:50:71:dc:17:9c:d0:3b:ec:11:f3:aa: f7:45:e3:cb:11:1d:c2:e1:89:c8:18:2f:ce:38:9d:b0:eb:ed: 9f:e3:cf:fd:22:25:e3:4a:89:67:37:24:f8:84:36:c4:05:6b: de:1b:14:79:ab:ff:ef:b5:43:99:84:42:8e:2f:c2:c2:26:48: d4:c6:cd:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK7O47fVcgUaO2IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODhiNDRkOTUtMDkyMy00MzIxLWEyOTAtN2Y1YmE3YWIwMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3qj2Ev3ePmzcA4gYpKW/exKIhgXmWwrajex OiVQ8iaoPgOFoR4rV2Ft5ZKBopsj1QnCJMo00wazHtSwgAhvriPMQiilPlnzSyQT xkNdlax35FnrEsGa+76MFpaW/mqC1+ulDNXcAbourd5QuGpkF2ebXqjWXIZNng5p JMmIepdlb9PrHyDo1hf4xtWq9R1los12oN/j9WMEyWsQodsam8++vyv7JDwNMUDv u9xKTci0Svjnkq4UCPcQ6aNgy2ft+NC/UZeDRGwl+Rs7P2PB/QYh2yU75n/w4IEe woL1HtbRDPG26Ww981V7wMqJsNrVS7lpe2Y+g3v6BFqao15wFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMS40G0UhK4p70Ckvq3g/WZ7uY0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI3MWQzMjItMDhiMS0z MmU4LWE4YjMtZGFiYzFhNGIzM2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOrP0XHukET2HXtliBtt+qtgS1aqK7ruzkC1rfHpg6mneiysPCc5VR jg+XrbH+19XbA+rdWGSFlyY7mm8cxQ74IbyPk/q3WVAiipppSuN30rKORyCaYoFG Jq9JdrUVhd+7MC2NiRXQWiqGF7t6cXTfuzag6AaHjYolpZ8ZxW0bZUV/V+tn/wDp SCMYQBFgFAS/ifu/TB1ylKI2o+0LEMILsxUiqCE1Za4E6zG5oK9nI5Tf/4PcI9Pv axG1UHHcF5zQO+wR86r3RePLER3C4YnIGC/OOJ2w6+2f48/9IiXjSolnNyT4hDbE BWveGxR5q//vtUOZhEKOL8LCJkjUxs2m -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:16 2025 by rpki-client