$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56f9da8-7e65-36c6-8967-2ac59c08d9bf.roa File: a56f9da8-7e65-36c6-8967-2ac59c08d9bf.roa (raw, json) Hash identifier: qEwN4y3JP2xeEfgCGr/xwjT3LKHjO5Bm7ixnwtbI0GU= Subject key identifier: 1A:7F:5C:38:DB:21:F4:80:BB:C6:91:40:F8:F8:A0:E3:D6:39:6D:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77A8CD1DDEDC024D7F100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56f9da8-7e65-36c6-8967-2ac59c08d9bf.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397207 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:8c:d1:dd:ed:c0:24:d7:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=33648cc3-3c35-4f23-b684-f5e9db55ac12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:d8:3e:33:8d:e0:e0:20:e4:3c:a2:bc:54: 74:e2:5d:c7:95:bc:ba:13:c6:e1:a2:ea:75:d1:8b: 53:e9:a8:d7:9c:ec:89:ad:50:06:d0:0a:40:4e:ac: 17:9c:10:21:b0:1b:d2:84:7f:da:0f:54:87:44:51: b3:2c:c4:d7:62:93:3f:2d:fb:da:eb:07:8a:b6:05: b0:53:8f:be:c7:ba:0c:e6:de:3e:7a:9c:fe:86:63: 0c:00:aa:da:28:11:53:98:12:e5:82:6b:40:3b:68: d8:53:25:87:df:a5:0b:41:e5:45:c8:6f:76:69:cf: 94:72:92:5f:b6:d1:88:c1:a4:7e:5f:b1:ba:8d:bc: 9d:58:45:47:ad:47:77:83:2f:a6:3d:aa:27:1a:8e: d3:0f:a4:64:2f:fd:13:62:64:4a:6e:7c:ce:86:87: 40:d4:45:85:ba:fd:a9:24:f7:8f:2b:f6:89:b3:e8: 9c:7f:4c:42:3d:fc:05:cb:a7:51:75:5a:f5:46:47: 98:cb:bf:64:f1:2c:4a:2a:52:14:dd:3a:ba:73:a0: f3:35:b2:d8:66:b1:c2:0f:90:74:67:7b:08:38:fa: ae:d3:07:91:20:d5:01:d4:b8:f9:29:d9:c4:7a:95: fe:f1:dd:56:27:c3:cf:8e:eb:1c:5a:de:96:a8:4b: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:5C:38:DB:21:F4:80:BB:C6:91:40:F8:F8:A0:E3:D6:39:6D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56f9da8-7e65-36c6-8967-2ac59c08d9bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f0:21:84:12:e3:c5:f6:23:ae:94:af:34:e2:50:f1:69:3e: 4f:09:b4:4a:33:7c:86:5d:fc:de:0b:21:1f:89:16:4d:6f:1c: 76:9d:d8:f6:f1:e9:f3:79:ee:72:51:4b:78:23:98:32:7e:d6: c1:35:d9:a2:d1:9e:be:17:aa:12:78:0e:f4:ae:da:91:bb:89: 3f:a4:02:8a:28:7e:89:4c:27:27:80:cc:c5:a1:12:0b:03:23: 0d:52:0b:01:f9:4c:99:49:fd:e3:2d:2b:6b:f9:ef:a8:b7:cb: 52:3a:ee:a2:eb:b6:81:e8:0a:53:1e:4f:60:da:65:51:83:89: cc:4d:0f:0a:cf:42:1b:a6:60:d6:3b:59:92:7a:6d:18:7e:e7: 6b:e6:57:2e:b2:85:ec:f0:05:3d:46:21:2d:00:76:06:a6:ca: 1e:14:b7:b6:37:bc:c7:50:b1:16:1b:ce:7e:ff:e4:74:cb:13: 5b:a4:af:83:e0:af:e8:c0:6a:a4:c6:61:da:c2:b7:2c:c7:6c: 8a:59:ae:6b:29:f0:07:ed:5c:54:2d:e2:e8:f3:32:1c:73:b0: cd:b8:81:48:91:6c:5b:47:dc:06:23:5d:66:9f:4f:a6:b1:20: 18:8b:9c:75:f8:13:1b:33:87:3c:22:d7:77:5d:17:f0:dc:7b: 85:62:cd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3qM0d3twCTX8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MzM2NDhjYzMtM2MzNS00ZjIzLWI2ODQtZjVlOWRiNTVhYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmjYPjON4OAg5DyivFR04l3Hlby6E8bhoup1 0YtT6ajXnOyJrVAG0ApATqwXnBAhsBvShH/aD1SHRFGzLMTXYpM/Lfva6weKtgWw U4++x7oM5t4+epz+hmMMAKraKBFTmBLlgmtAO2jYUyWH36ULQeVFyG92ac+UcpJf ttGIwaR+X7G6jbydWEVHrUd3gy+mPaonGo7TD6RkL/0TYmRKbnzOhodA1EWFuv2p JPePK/aJs+icf0xCPfwFy6dRdVr1RkeYy79k8SxKKlIU3Tq6c6DzNbLYZrHCD5B0 Z3sIOPqu0weRINUB1Lj5KdnEepX+8d1WJ8PPjuscWt6WqEvtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp/XDjbIfSAu8aRQPj4oOPWOW0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU2ZjlkYTgtN2U2NS0z NmM2LTg5NjctMmFjNTljMDhkOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7wIYQS48X2I66UrzTiUPFpPk8JtEozfIZd/N4LIR+JFk1vHHad2Pbx 6fN57nJRS3gjmDJ+1sE12aLRnr4XqhJ4DvSu2pG7iT+kAooofolMJyeAzMWhEgsD Iw1SCwH5TJlJ/eMtK2v576i3y1I67qLrtoHoClMeT2DaZVGDicxNDwrPQhumYNY7 WZJ6bRh+52vmVy6yhezwBT1GIS0Adgamyh4Ut7Y3vMdQsRYbzn7/5HTLE1ukr4Pg r+jAaqTGYdrCtyzHbIpZrmsp8AftXFQt4ujzMhxzsM24gUiRbFtH3AYjXWafT6ax IBiLnHX4Exszhzwi13ddF/Dce4VizZA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:37 2025 by rpki-client