$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e146392-3dbe-3ce0-8946-cb58760ebf77.roa File: 8e146392-3dbe-3ce0-8946-cb58760ebf77.roa (raw, json) Hash identifier: TORp+Tg3mhmiEK9caJIwNcH0p6Eyj0t/ISz/CWDlx4c= Subject key identifier: 82:23:56:74:32:E4:05:CE:99:69:B7:B1:91:8B:01:2F:F5:F7:FA:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77EAE71B74F8BC33731C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e146392-3dbe-3ce0-8946-cb58760ebf77.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396555 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7e:ae:71:b7:4f:8b:c3:37:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=59405ce3-1039-47a4-9058-5b62837d50f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:12:3b:66:24:23:97:5a:13:b4:81:16:4b: 59:7e:e8:80:f3:12:b2:3b:68:64:3a:6f:9a:d9:f2: 58:da:69:53:23:08:ac:f0:53:de:f0:4e:f2:08:c6: cb:6f:f4:98:8e:fb:0a:73:6b:c2:c7:7c:dc:d8:c5: 45:a6:94:bc:bc:48:0a:f1:c0:8c:07:8f:70:f0:f5: 3b:5a:78:35:89:6e:02:9f:52:38:6f:59:6f:e2:11: cc:47:65:15:c4:c9:48:c0:cd:18:25:3e:7b:e2:b4: fe:eb:f3:80:34:ec:e1:5b:c2:8c:b5:20:49:f2:43: 0a:0e:45:d4:d4:79:52:0a:15:24:2b:95:8b:c2:f1: e2:e2:01:db:44:b7:b8:01:74:21:7d:0a:97:92:65: 9a:ba:c2:bb:87:c3:cd:97:9c:98:d6:18:a9:f6:e3: ae:93:3a:18:10:0e:7c:61:7e:f3:4b:34:9b:84:f1: 10:83:f5:44:81:49:c0:09:06:e6:85:e9:cb:c0:88: d8:29:7c:bc:34:58:ee:3d:04:1b:e2:8c:f4:a5:b7: 94:e0:c4:ed:0e:57:18:85:77:c5:0f:f3:c9:87:7e: ac:3c:0d:07:84:6a:e8:6e:8d:36:83:47:85:5f:76: 0c:1c:c8:56:71:00:72:f1:6e:82:08:08:0f:5f:43: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:56:74:32:E4:05:CE:99:69:B7:B1:91:8B:01:2F:F5:F7:FA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e146392-3dbe-3ce0-8946-cb58760ebf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f6:d5:31:bc:99:1e:8a:2e:cb:8b:09:cc:ce:c4:5d:a6:87: 1b:35:cd:24:37:97:28:be:01:24:96:8e:ff:59:77:b9:69:ef: db:fc:e7:1b:5d:25:f3:39:18:4e:bb:a4:7f:6f:9e:c8:4e:69: 8c:36:d8:90:cf:47:73:d2:39:ed:05:77:4a:15:9f:c6:61:4f: ec:e5:6c:89:2d:ac:0e:42:c9:b9:08:6e:b3:64:b9:e3:b9:14: 96:ec:a9:a9:c7:ef:83:28:ae:38:cc:cf:e2:a3:a1:50:22:06: 09:0c:13:29:ba:79:a4:88:21:c2:98:b8:b1:93:c3:7c:6f:88: 39:ba:33:55:8f:05:e1:5b:8d:ab:ce:53:00:87:24:6b:1b:e1: 8b:8d:c1:fa:31:28:55:5d:dd:84:58:f5:c6:ae:7f:37:6c:97: 3a:f9:ce:ec:5a:f6:27:57:d2:d7:c6:a6:46:cf:40:aa:7b:2f: 41:0a:ea:dc:e4:17:3e:69:7f:d0:2c:cf:74:79:ab:3d:16:09: 5b:b7:1a:a2:6f:3f:02:27:a5:2b:4d:bb:c7:33:7a:bd:0c:07: 9d:b6:9a:bd:73:d7:3a:c5:f3:55:d5:2a:96:6e:58:e4:20:91: a9:70:a9:83:ba:30:38:33:4b:6d:8d:8e:0c:c1:f2:0c:f8:c3: ce:65:ad:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx36ucbdPi8M3McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTk0MDVjZTMtMTAzOS00N2E0LTkwNTgtNWI2MjgzN2Q1MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomYSO2YkI5daE7SBFktZfuiA8xKyO2hkOm+a 2fJY2mlTIwis8FPe8E7yCMbLb/SYjvsKc2vCx3zc2MVFppS8vEgK8cCMB49w8PU7 Wng1iW4Cn1I4b1lv4hHMR2UVxMlIwM0YJT574rT+6/OANOzhW8KMtSBJ8kMKDkXU 1HlSChUkK5WLwvHi4gHbRLe4AXQhfQqXkmWausK7h8PNl5yY1hip9uOukzoYEA58 YX7zSzSbhPEQg/VEgUnACQbmhenLwIjYKXy8NFjuPQQb4oz0pbeU4MTtDlcYhXfF D/PJh36sPA0HhGrobo02g0eFX3YMHMhWcQBy8W6CCAgPX0M8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIjVnQy5AXOmWm3sZGLAS/19/pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUxNDYzOTItM2RiZS0z Y2UwLTg5NDYtY2I1ODc2MGViZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/21TG8mR6KLsuLCczOxF2mhxs1zSQ3lyi+ASSWjv9Zd7lp79v85xtd JfM5GE67pH9vnshOaYw22JDPR3PSOe0Fd0oVn8ZhT+zlbIktrA5CybkIbrNkueO5 FJbsqanH74MorjjMz+KjoVAiBgkMEym6eaSIIcKYuLGTw3xviDm6M1WPBeFbjavO UwCHJGsb4YuNwfoxKFVd3YRY9caufzdslzr5zuxa9idX0tfGpkbPQKp7L0EK6tzk Fz5pf9Asz3R5qz0WCVu3GqJvPwInpStNu8czer0MB522mr1z1zrF81XVKpZuWOQg kalwqYO6MDgzS22NjgzB8gz4w85lrRc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:18 2025 by rpki-client