$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa File: 79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa (raw, json) Hash identifier: 7JlR/3JY1IgBPyKZgghN1S1U25lrzwy6fiaA47I09RY= Subject key identifier: AA:9D:09:06:DB:DD:23:4E:D8:E5:CF:FF:BF:00:0B:84:EB:F0:5B:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB41BD0CAE52EC2910480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397195 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:1b:d0:ca:e5:2e:c2:91:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=322623ab-e5c6-48ea-9d0a-4b6e8608a73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:f9:55:0d:fb:16:f0:df:ef:c4:80:b2:75: 81:c4:89:89:54:21:78:6b:44:6a:6c:07:2c:29:b7: 2d:05:e8:24:63:b6:60:e6:09:e4:fd:e7:6e:86:60: 83:f8:d7:a9:39:b2:40:b1:8f:36:92:75:15:2c:29: b6:b0:65:a6:30:40:f8:fb:03:bf:43:ba:a1:84:35: 9d:ed:1d:da:64:f4:8c:ff:8a:da:1c:e8:35:3b:49: eb:95:d5:8f:7e:36:55:ab:88:d1:b5:32:36:12:d7: 42:4d:e7:7b:25:9a:04:28:e1:79:46:9b:de:1b:e9: dd:51:68:31:47:84:7d:5a:3b:9d:e8:2b:40:64:38: c4:58:b8:fb:18:f0:93:d5:c3:90:a9:62:62:66:28: ac:59:86:96:8a:28:cd:5e:eb:c0:31:78:e1:8d:6b: 90:da:19:c5:82:ff:8a:74:18:95:46:50:9a:1c:49: e4:9c:de:a5:9d:bd:1b:b8:ec:68:c2:ed:07:39:bc: 68:a3:be:cc:51:1a:2c:79:aa:6b:5d:c9:e8:ce:f3: 99:df:9d:cf:0b:34:7a:16:f0:22:6f:4a:be:21:61: 07:34:0b:3b:2f:db:fa:df:76:15:63:3a:a5:51:25: 4d:2d:2b:2d:0c:f2:84:66:4d:32:c0:a6:67:47:b4: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9D:09:06:DB:DD:23:4E:D8:E5:CF:FF:BF:00:0B:84:EB:F0:5B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f3:d4:b2:da:bb:d0:4e:7c:83:34:cb:3d:df:80:c2:24:8d: c4:65:85:9a:e7:cd:76:11:b7:e8:49:93:37:48:31:46:7a:27: 70:41:8f:f0:ba:dc:83:21:3f:f0:ca:4e:ca:ef:09:82:c0:d4: 0f:de:95:40:af:de:7c:0a:20:1a:3c:b1:28:fe:64:07:bc:35: b1:36:21:b2:4a:10:c4:05:28:f0:f8:e9:79:9e:5c:22:fe:02: c1:d4:50:a8:06:87:f0:dc:d6:06:72:6e:54:ee:85:ee:72:ce: 43:6e:88:0b:c8:0b:a2:d0:8c:63:b3:47:2d:28:67:96:12:0f: f6:b6:cc:75:21:6b:84:82:a4:47:4f:82:21:4b:54:3c:06:18: e3:79:2e:e6:b4:01:78:57:92:b5:f3:49:e4:0a:d2:ab:b2:2d: 08:06:c5:a4:78:f8:e5:a7:76:d0:f9:6b:3f:ee:2d:f8:8b:aa: 03:c9:02:cd:a3:fa:18:09:13:de:5c:9c:27:b1:44:0d:2d:4b: c8:d7:be:36:f6:2e:c3:d9:61:28:a5:d8:3f:58:56:8f:6c:5f: d9:dd:e7:2d:a8:f4:8d:54:51:e3:07:ea:c9:09:c5:d0:ec:b9: ac:f6:51:8f:a5:2e:cd:67:53:12:cd:ea:6b:b7:7d:c5:28:fa: 2a:10:8f:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLQb0MrlLsKRBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzIyNjIzYWItZTVjNi00OGVhLTlkMGEtNGI2ZTg2MDhhNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcX5VQ37FvDf78SAsnWBxImJVCF4a0RqbAcs KbctBegkY7Zg5gnk/eduhmCD+NepObJAsY82knUVLCm2sGWmMED4+wO/Q7qhhDWd 7R3aZPSM/4raHOg1O0nrldWPfjZVq4jRtTI2EtdCTed7JZoEKOF5RpveG+ndUWgx R4R9Wjud6CtAZDjEWLj7GPCT1cOQqWJiZiisWYaWiijNXuvAMXjhjWuQ2hnFgv+K dBiVRlCaHEnknN6lnb0buOxowu0HObxoo77MURoseaprXcnozvOZ353PCzR6FvAi b0q+IWEHNAs7L9v633YVYzqlUSVNLSstDPKEZk0ywKZnR7TR0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKqdCQbb3SNO2OXP/78AC4Tr8Fu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzlmZmY2NGEtNDRiNy0z ZmRkLWFhOGMtMzk4YTUzOWY2ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCF89Sy2rvQTnyDNMs934DCJI3EZYWa5812EbfoSZM3SDFGeidwQY/w utyDIT/wyk7K7wmCwNQP3pVAr958CiAaPLEo/mQHvDWxNiGyShDEBSjw+Ol5nlwi /gLB1FCoBofw3NYGcm5U7oXucs5DbogLyAui0Ixjs0ctKGeWEg/2tsx1IWuEgqRH T4IhS1Q8BhjjeS7mtAF4V5K180nkCtKrsi0IBsWkePjlp3bQ+Ws/7i34i6oDyQLN o/oYCRPeXJwnsUQNLUvI17429i7D2WEopdg/WFaPbF/Z3ectqPSNVFHjB+rJCcXQ 7Lms9lGPpS7NZ1MSzeprt33FKPoqEI+n -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:05 2025 by rpki-client