$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa File: 98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa (raw, json) Hash identifier: JL2QF/YhQX427uyOvGZNDZr82HilN0lOygN7cji+ixU= Subject key identifier: 34:18:DB:4C:45:B7:B2:E0:6D:BD:69:74:DA:86:53:DD:EA:0B:F3:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77DD3739F4DFE2BB7DA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396608 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:d3:73:9f:4d:fe:2b:b7:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=2407b665-2392-4f94-abb1-bb853fd013e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:06:23:24:c4:2b:14:1c:e8:ef:f8:43:84: 88:d6:e5:44:ec:fd:cc:b9:4c:9f:67:47:86:73:0e: 68:72:c5:79:7e:8f:95:9a:9c:c2:be:82:b7:55:43: 63:35:e3:dc:16:27:29:01:ca:91:3c:30:24:fc:0e: f0:f7:64:50:5e:e8:fc:6c:83:58:8a:e8:9c:be:1e: de:4a:57:4a:30:6c:0e:19:5b:d4:3a:74:5b:5b:43: 61:dc:2d:98:c6:a7:6c:38:29:b4:09:0e:b0:de:24: a3:40:49:8f:87:9e:d8:6e:cf:6d:5b:17:16:12:f4: 10:3d:e2:dd:b3:c7:3f:f5:f0:c5:82:02:32:45:77: ef:3c:a7:ec:9e:d3:9c:b4:78:4c:7d:fc:4c:bb:ee: e2:fe:3c:46:62:58:03:27:19:72:1e:f8:bf:c1:19: 9d:33:ab:22:c2:06:c8:d3:29:c9:fb:92:b4:61:60: 9e:94:0a:99:7a:f3:f8:53:89:53:a2:a2:71:96:79: 8d:ba:b9:c2:cc:93:73:c7:df:10:b8:61:bc:fd:9a: 4e:38:5f:a7:23:02:46:51:df:5a:b7:d8:16:d4:ac: 40:fe:6c:19:8c:45:fa:9f:e1:41:a7:76:46:8b:fd: ee:d2:b7:8b:ed:ad:46:88:68:48:33:ae:1c:d1:f7: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:18:DB:4C:45:B7:B2:E0:6D:BD:69:74:DA:86:53:DD:EA:0B:F3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b6:84:ec:7d:ca:db:c9:13:ef:13:cf:6f:d6:6a:78:99:47: fd:72:de:83:7d:6a:7a:03:1d:89:13:1d:b1:c0:4e:44:d3:12: 74:43:c3:15:45:fe:ea:8b:88:b3:73:09:0f:2c:1a:4b:2c:bb: a1:64:58:aa:37:52:a3:ce:b0:34:c4:1e:fe:c7:2a:47:1c:13: 36:a9:30:e5:9d:89:07:b2:2c:d2:2a:24:5e:09:e1:73:b2:1e: 39:e2:af:de:7f:06:62:f0:f5:eb:5c:99:78:e6:f5:6e:47:ab: cc:d2:6d:5a:ad:aa:94:e8:b4:06:91:23:4f:ec:c4:3b:3b:41: 12:11:c4:e6:d8:3a:05:d6:b3:04:54:e2:3a:97:42:ad:9d:4a: 38:33:d8:87:a7:c1:17:00:f8:e7:b1:52:ab:c1:71:ed:de:0b: 80:f4:2a:94:f5:7f:65:64:0e:35:c0:82:dc:5f:5e:1c:93:32: df:81:65:f6:5c:1c:e6:53:1d:9c:71:b5:47:0a:6b:ea:c6:be: 3f:a3:c2:87:ce:1c:8d:ed:b1:cf:f4:ea:d3:72:fe:10:67:82: f8:bc:de:12:14:f4:8d:60:a0:c6:fb:3b:92:4f:fb:0d:21:ba: 29:23:84:51:8c:ab:7b:a0:82:e0:2e:27:02:fb:5a:e2:f0:32: dc:34:95:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx33Tc59N/iu32gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjQwN2I2NjUtMjM5Mi00Zjk0LWFiYjEtYmI4NTNmZDAxM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rMGIyTEKxQc6O/4Q4SI1uVE7P3MuUyfZ0eG cw5ocsV5fo+VmpzCvoK3VUNjNePcFicpAcqRPDAk/A7w92RQXuj8bINYiuicvh7e SldKMGwOGVvUOnRbW0Nh3C2YxqdsOCm0CQ6w3iSjQEmPh57Ybs9tWxcWEvQQPeLd s8c/9fDFggIyRXfvPKfsntOctHhMffxMu+7i/jxGYlgDJxlyHvi/wRmdM6siwgbI 0ynJ+5K0YWCelAqZevP4U4lToqJxlnmNurnCzJNzx98QuGG8/ZpOOF+nIwJGUd9a t9gW1KxA/mwZjEX6n+FBp3ZGi/3u0reL7a1GiGhIM64c0fcRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQY20xFt7Lgbb1pdNqGU93qC/M5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOThjYjAwYzMtNTA5ZC0z MDA0LWI5ZDMtNjk4NGEwZTViMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC2hOx9ytvJE+8Tz2/WaniZR/1y3oN9anoDHYkTHbHATkTTEnRDwxVF /uqLiLNzCQ8sGkssu6FkWKo3UqPOsDTEHv7HKkccEzapMOWdiQeyLNIqJF4J4XOy Hjnir95/BmLw9etcmXjm9W5Hq8zSbVqtqpTotAaRI0/sxDs7QRIRxObYOgXWswRU 4jqXQq2dSjgz2IenwRcA+OexUqvBce3eC4D0KpT1f2VkDjXAgtxfXhyTMt+BZfZc HOZTHZxxtUcKa+rGvj+jwofOHI3tsc/06tNy/hBngvi83hIU9I1goMb7O5JP+w0h uikjhFGMq3ugguAuJwL7WuLwMtw0lYY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:36 2025 by rpki-client