$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa File: b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa (raw, json) Hash identifier: f26jne1nlfP8mgS/HLq5F8UqxuL/lmUpPWY1WFvWhks= Subject key identifier: B8:C2:7A:4E:6B:E1:81:D2:C4:24:CB:AB:F7:B2:6E:BF:BC:44:73:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC7787CD063F94804D0E980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397205 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:7c:d0:63:f9:48:04:d0:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=71820274-f0d1-4176-accc-748bfe062766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9b:ed:3d:88:67:73:0b:b4:e0:36:95:3d:27: 9b:f0:85:4f:9b:1b:5f:b9:92:41:28:4b:87:5a:9a: a0:53:a0:3e:99:3f:42:4a:20:91:93:fc:11:99:d1: 89:80:5b:8a:4d:0c:2a:6d:c3:2f:0d:ff:86:54:9d: f7:96:eb:02:3e:23:f6:41:49:23:71:b2:87:c8:c9: d4:38:ca:31:c5:89:c7:fc:ff:c1:dd:b7:07:01:45: a9:65:e6:da:07:9d:18:86:a6:be:2e:d8:72:dc:97: 19:f8:97:d9:98:55:68:2b:b2:c7:4e:d6:a2:2f:c8: 99:81:b3:f3:db:66:df:4a:6a:23:8b:5f:2b:dc:c7: a7:f0:85:e4:77:7c:49:15:73:a6:5c:c8:e1:34:d9: c9:e8:5d:71:b7:00:03:12:bc:40:68:5c:6f:c7:5c: c5:88:e6:7e:90:c0:49:29:73:32:a7:b1:bf:29:47: 1e:5c:dd:05:a6:ba:c5:f7:0a:8c:af:c4:52:05:1d: 4d:e5:78:61:56:55:5a:46:53:2c:a6:b2:6c:71:90: 1f:b5:62:30:01:e9:1d:89:09:dd:e0:2b:93:33:78: 18:c3:eb:14:22:45:fb:fd:bd:25:dd:d3:0e:b8:cc: b6:8e:c1:ee:93:45:e1:b3:79:b1:7c:2f:b2:c7:4d: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C2:7A:4E:6B:E1:81:D2:C4:24:CB:AB:F7:B2:6E:BF:BC:44:73:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:45:93:04:0a:45:46:6d:ab:84:64:e0:f4:e8:5b:c9:3d:da: d9:0b:0e:71:fb:05:54:53:63:54:1e:0f:03:6f:b7:db:34:33: be:df:15:11:2d:60:35:ec:a4:ac:b2:d6:ee:6f:c9:52:01:60: 26:e9:f1:51:5b:61:1b:d0:e3:e0:9f:6a:b1:21:5e:cc:c0:bb: ea:4d:b9:65:51:a9:4f:80:a8:d6:6c:6f:dd:1e:b6:6c:ab:4b: f1:dc:d8:e1:76:98:0f:57:04:c3:7f:30:d3:ee:5e:23:d3:db: b3:fe:fe:a4:e5:74:3f:b2:f4:9a:2c:08:de:97:7f:a9:53:a7: 78:f7:e6:a2:02:2f:33:24:aa:b7:b7:f4:f1:ed:e5:28:ba:a6: 48:17:9e:e5:21:02:b3:96:41:27:30:b3:8c:95:19:6b:07:10: db:fd:c8:17:fa:30:90:4c:c0:64:e7:84:9e:d5:58:5c:ab:15: d5:4d:e4:c1:3f:f0:de:a6:1a:24:54:e4:44:d5:4d:39:2b:eb: 35:02:09:2f:12:11:69:62:51:23:9b:6f:56:b3:d2:9f:0d:d0: cc:70:f8:f0:44:f1:05:1a:a0:ea:de:6f:42:e3:75:99:66:d5: b0:87:09:6f:82:ba:1a:43:34:f9:ea:88:19:f0:1c:d3:4f:3e: f8:24:36:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3h80GP5SATQ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NzE4MjAyNzQtZjBkMS00MTc2LWFjY2MtNzQ4YmZlMDYyNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJvtPYhncwu04DaVPSeb8IVPmxtfuZJBKEuH WpqgU6A+mT9CSiCRk/wRmdGJgFuKTQwqbcMvDf+GVJ33lusCPiP2QUkjcbKHyMnU OMoxxYnH/P/B3bcHAUWpZebaB50Yhqa+Lthy3JcZ+JfZmFVoK7LHTtaiL8iZgbPz 22bfSmoji18r3Men8IXkd3xJFXOmXMjhNNnJ6F1xtwADErxAaFxvx1zFiOZ+kMBJ KXMyp7G/KUceXN0FprrF9wqMr8RSBR1N5XhhVlVaRlMsprJscZAftWIwAekdiQnd 4CuTM3gYw+sUIkX7/b0l3dMOuMy2jsHuk0Xhs3mxfC+yx00F7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjCek5r4YHSxCTLq/eybr+8RHP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkY2QwNzAtMTVlNS0z ZmI1LWI0ZmMtNzQxNmU1YTVmN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpFkwQKRUZtq4Rk4PToW8k92tkLDnH7BVRTY1QeDwNvt9s0M77fFREt YDXspKyy1u5vyVIBYCbp8VFbYRvQ4+CfarEhXszAu+pNuWVRqU+AqNZsb90etmyr S/Hc2OF2mA9XBMN/MNPuXiPT27P+/qTldD+y9JosCN6Xf6lTp3j35qICLzMkqre3 9PHt5Si6pkgXnuUhArOWQScws4yVGWsHENv9yBf6MJBMwGTnhJ7VWFyrFdVN5ME/ 8N6mGiRU5ETVTTkr6zUCCS8SEWliUSObb1az0p8N0Mxw+PBE8QUaoOreb0LjdZlm 1bCHCW+CuhpDNPnqiBnwHNNPPvgkNng= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:22 2025 by rpki-client