$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa File: a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa (raw, json) Hash identifier: 2l4ODtdHvqAcWltnwXmXsj4o1+mki2yMpdFMAAHcSm4= Subject key identifier: A5:C9:33:70:18:8B:C0:1C:B7:BD:4D:7A:EA:44:28:3D:46:25:2A:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77DF9ED1F5678B131ED80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396571 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:f9:ed:1f:56:78:b1:31:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=87207e52-ad40-4d54-8d0c-821fea903759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:91:ef:73:f7:fe:97:69:18:5c:6f:75:9c: 83:47:0e:1d:5b:c5:fd:98:62:73:5a:32:7d:c3:e9: 13:e5:33:37:c5:7a:13:49:f0:1c:17:2f:41:ce:bb: c6:1f:de:19:f8:60:14:15:6e:ab:fa:08:55:cf:ed: 73:be:91:7b:2c:39:83:04:f3:eb:c5:05:ac:60:72: 3d:a8:ac:4c:f9:f1:6e:1f:3e:87:65:dc:d9:95:b5: 61:58:30:64:4f:99:05:32:7e:c9:87:f1:c0:98:ad: 8e:bd:eb:a0:2a:ec:b2:8a:33:ec:9c:48:e4:f0:fb: 12:bd:36:ea:62:1a:7e:25:07:73:20:d3:db:bb:28: 58:27:b7:e2:02:06:b3:68:82:1c:83:73:70:dc:7b: fd:12:51:e4:50:ce:e3:b2:dc:fc:4a:ec:9d:44:e7: e8:b7:91:c9:e2:91:bf:07:c4:50:fd:31:ff:42:76: f5:7e:da:5a:f8:11:0a:3a:b5:f2:32:15:0e:75:bd: 8b:87:fb:fc:3a:d5:b2:40:b5:85:67:7a:96:fc:9a: fe:60:c6:79:f7:8c:28:f0:68:f7:d9:27:29:59:38: db:04:6c:7d:77:94:c7:df:68:09:be:a8:c6:77:1a: c8:14:5a:68:5d:b1:84:df:77:8b:81:2d:c9:29:b9: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:33:70:18:8B:C0:1C:B7:BD:4D:7A:EA:44:28:3D:46:25:2A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f9:ed:a8:e1:60:52:56:81:fa:66:40:0e:83:ba:df:0b:48: 95:bd:b6:db:92:d1:09:03:50:65:66:4c:89:8a:8f:8a:b5:22: 6c:7f:38:1b:df:7f:62:f4:19:13:e8:c6:f0:23:a2:d7:7d:00: 3f:d6:e5:1e:7c:f3:fa:df:fe:33:e6:f9:18:31:47:54:a8:17: b9:b5:86:c2:4a:66:b7:d1:68:15:b6:9d:da:74:b5:0e:b6:77: 3f:94:89:98:12:30:1a:ef:a9:b7:de:6e:5d:49:85:f0:75:08: b3:af:ce:4d:ea:92:18:46:9e:1d:96:87:91:f7:18:8f:ba:ac: b0:6a:43:55:91:2c:c9:71:04:f7:9a:c3:ee:8d:b0:b7:8e:a9: c8:b1:e9:dc:8e:df:27:4b:0c:a0:74:6c:e1:87:18:26:1c:5c: c8:19:2b:77:f5:ff:db:0c:b1:5e:6e:8b:b4:85:19:31:53:a4: 73:96:99:1f:7d:85:a1:43:e4:e0:ea:f7:34:9a:55:68:ae:c7: 9a:00:ec:76:56:25:ab:52:c6:46:95:25:c0:5f:89:e2:e2:87: 70:06:6f:db:34:7e:97:e0:a3:b0:31:72:b1:7f:d1:55:61:14: 9f:c5:13:cb:e4:53:56:29:15:1c:c6:86:17:e0:7c:11:38:0f: 2c:24:1a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3357R9WeLEx7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ODcyMDdlNTItYWQ0MC00ZDU0LThkMGMtODIxZmVhOTAzNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljiR73P3/pdpGFxvdZyDRw4dW8X9mGJzWjJ9 w+kT5TM3xXoTSfAcFy9BzrvGH94Z+GAUFW6r+ghVz+1zvpF7LDmDBPPrxQWsYHI9 qKxM+fFuHz6HZdzZlbVhWDBkT5kFMn7Jh/HAmK2OveugKuyyijPsnEjk8PsSvTbq Yhp+JQdzINPbuyhYJ7fiAgazaIIcg3Nw3Hv9ElHkUM7jstz8SuydROfot5HJ4pG/ B8RQ/TH/Qnb1ftpa+BEKOrXyMhUOdb2Lh/v8OtWyQLWFZ3qW/Jr+YMZ594wo8Gj3 2ScpWTjbBGx9d5TH32gJvqjGdxrIFFpoXbGE33eLgS3JKbmVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXJM3AYi8Act71NeupEKD1GJSooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBiZmQ5MTgtNTZkNi0z ZTExLWEzYzAtNDNkYjMyYzZlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI757ajhYFJWgfpmQA6Dut8LSJW9ttuS0QkDUGVmTImKj4q1Imx/OBvf f2L0GRPoxvAjotd9AD/W5R588/rf/jPm+RgxR1SoF7m1hsJKZrfRaBW2ndp0tQ62 dz+UiZgSMBrvqbfebl1JhfB1CLOvzk3qkhhGnh2Wh5H3GI+6rLBqQ1WRLMlxBPea w+6NsLeOqcix6dyO3ydLDKB0bOGHGCYcXMgZK3f1/9sMsV5ui7SFGTFTpHOWmR99 haFD5ODq9zSaVWiux5oA7HZWJatSxkaVJcBfieLih3AGb9s0fpfgo7AxcrF/0VVh FJ/FE8vkU1YpFRzGhhfgfBE4DywkGs4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:29 2025 by rpki-client