$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa File: bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa (raw, json) Hash identifier: qpWXDg0CDKKB/skTm1tXy2ImpfGdRJvxaLRbU/4p6tQ= Subject key identifier: 03:D2:D1:01:02:18:5B:AC:CC:12:74:50:CA:6C:3B:DD:C7:F7:9C:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB5A5E177B5B67E2F2980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 211369 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b5:a5:e1:77:b5:b6:7e:2f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0d8cd14f-a819-4602-a18f-5bddca6cbd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:6e:7c:0f:10:79:aa:52:97:59:d7:91:a5: a0:d8:16:24:fd:79:09:0e:fa:fc:27:e8:53:04:a4: 60:07:58:cd:c4:27:d6:a3:2c:41:d6:70:c0:80:69: fc:ca:f5:d4:57:35:f2:b6:be:10:ff:6b:b3:87:e0: f9:8f:70:6c:73:36:d9:ec:51:d3:aa:e9:f5:30:40: 27:06:fa:48:13:6e:7a:e9:e0:18:08:77:84:34:0f: 9d:06:01:59:05:46:9a:0d:ea:d4:83:ab:59:5a:56: 49:af:ad:72:49:fe:ec:b0:8b:d6:d5:5e:b4:7a:b4: bf:64:d1:ad:f5:bf:5e:a1:3e:99:53:61:ea:0a:31: ba:39:a8:6f:dc:ef:fc:ea:32:51:57:41:3d:64:60: bd:cc:09:13:88:ee:df:50:a1:b6:29:71:04:3d:47: f9:6d:86:e3:f9:d7:7a:ab:03:ec:a2:77:80:44:02: 92:1e:cb:a3:88:b4:2d:3e:a4:46:d0:a5:b4:c9:50: 92:c7:f3:84:ca:3c:97:99:a6:6b:fd:ba:76:f8:ed: 42:72:8f:f6:86:54:23:aa:d2:f5:0d:61:26:cb:47: ee:1e:cc:a9:50:22:cc:85:8e:8c:63:3c:4d:92:96: fc:44:0b:ee:d1:f3:e7:a8:52:22:dc:ea:80:ee:65: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D2:D1:01:02:18:5B:AC:CC:12:74:50:CA:6C:3B:DD:C7:F7:9C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:88:76:55:77:37:02:1d:54:8f:e0:2b:92:bc:fc:90:b1: 97:93:d9:5e:c9:24:85:36:46:6c:57:22:8e:4d:d9:8e:b3:d5: 5b:5d:26:26:47:4e:ab:90:ed:e4:8b:2d:17:e5:e5:7f:b6:1d: 71:11:1b:c8:67:b8:09:21:d8:14:8e:b7:0d:c1:02:bc:bb:7d: 67:6e:9d:1f:fd:d3:5c:c9:9d:93:cf:dc:c8:91:53:e9:fa:04: ef:aa:48:1b:06:7e:81:1a:16:b2:72:b3:c4:3a:1c:f3:29:d5: 8e:15:3c:6a:cd:53:53:f9:f7:5d:8a:ac:22:fb:9d:53:64:a9: f8:20:b1:14:38:b4:3a:49:69:d8:7c:50:bc:de:ec:a8:7f:de: 2a:81:52:d5:86:aa:d3:f4:8f:67:6b:e9:75:b5:c2:52:bb:6c: bc:21:f4:f5:14:9b:d2:98:5c:b4:09:39:4b:9a:8b:5d:27:aa: 36:42:46:27:a1:a4:fa:7a:ed:73:38:8c:8d:11:8f:6c:f1:31: e2:5d:1b:f3:fc:53:8a:28:af:12:c7:7e:51:fe:5e:32:92:52: 40:63:52:df:df:47:8c:46:1e:d3:e3:c4:6b:3d:d7:7b:a7:7d: dc:ca:52:69:c8:1d:e2:20:f8:0b:9c:10:29:21:96:6f:70:73: 4b:b0:48:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLWl4Xe1tn4vKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGQ4Y2QxNGYtYTgxOS00NjAyLWExOGYtNWJkZGNhNmNiZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgShufA8QeapSl1nXkaWg2BYk/XkJDvr8J+hT BKRgB1jNxCfWoyxB1nDAgGn8yvXUVzXytr4Q/2uzh+D5j3BsczbZ7FHTqun1MEAn BvpIE2566eAYCHeENA+dBgFZBUaaDerUg6tZWlZJr61ySf7ssIvW1V60erS/ZNGt 9b9eoT6ZU2HqCjG6Oahv3O/86jJRV0E9ZGC9zAkTiO7fUKG2KXEEPUf5bYbj+dd6 qwPsoneARAKSHsujiLQtPqRG0KW0yVCSx/OEyjyXmaZr/bp2+O1Cco/2hlQjqtL1 DWEmy0fuHsypUCLMhY6MYzxNkpb8RAvu0fPnqFIi3OqA7mX4JwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAPS0QECGFuszBJ0UMpsO93H95xJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM2Zjk2MjctMGM1ZC0z OTU3LThiMmEtNDkxMDY0YmIzYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwtIh2VXc3Ah1Uj+Arkrz8kLGXk9leySSFNkZsVyKOTdmOs9VbXSYm R06rkO3kiy0X5eV/th1xERvIZ7gJIdgUjrcNwQK8u31nbp0f/dNcyZ2Tz9zIkVPp +gTvqkgbBn6BGhaycrPEOhzzKdWOFTxqzVNT+fddiqwi+51TZKn4ILEUOLQ6SWnY fFC83uyof94qgVLVhqrT9I9na+l1tcJSu2y8IfT1FJvSmFy0CTlLmotdJ6o2QkYn oaT6eu1zOIyNEY9s8THiXRvz/FOKKK8Sx35R/l4yklJAY1Lf30eMRh7T48RrPdd7 p33cylJpyB3iIPgLnBApIZZvcHNLsEhP -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:35 2025 by rpki-client