$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa File: c9abc068-7edc-39ad-ba76-b94baf924d42.roa (raw, json) Hash identifier: CSwO8tYmTRPmtNCqwz6q8uW6qapUtlzUd3zM0GdKRSs= Subject key identifier: 9F:2F:DC:AF:04:07:79:06:26:21:7C:5F:A8:E6:8A:59:A5:29:89:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77C57FB8EC77684A03F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397202 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:57:fb:8e:c7:76:84:a0:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=150c56af-ba24-4339-8570-8704d0ada8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:90:e0:ab:06:14:5f:10:08:44:47:82:f9: 50:6a:97:2a:3c:23:38:16:06:23:0f:f2:85:0e:11: 34:ce:8c:2e:fa:b1:26:05:7d:f4:f0:37:88:bb:09: 75:a7:78:30:63:a3:96:7f:8b:cc:f0:ec:30:e2:4a: 94:d0:ee:33:44:ae:12:5d:df:2d:af:c0:be:82:ba: 2b:45:1c:7c:eb:ee:ae:5a:23:50:83:eb:5d:68:4d: d4:27:9e:c0:5d:23:35:88:b0:f3:08:b1:1f:97:28: 2a:20:35:94:9e:3b:a8:d2:5b:34:60:9f:1a:58:d5: 2d:ff:36:55:ca:c4:50:30:49:f1:64:32:94:d2:b1: 1f:60:e0:df:0d:c5:d3:6d:0b:f9:8e:8a:7e:0f:23: 91:73:58:60:cf:f6:d5:56:4d:a3:4c:42:4b:30:c8: b4:e6:0a:62:ad:24:53:8f:cb:3d:30:0e:8f:d8:92: 1e:a6:51:e8:19:c3:24:e7:4a:fe:4f:ec:6e:e6:47: d8:30:6e:9f:72:a2:14:10:35:19:c6:c2:b4:ae:91: f8:d6:7c:3d:19:03:d5:23:e0:dd:42:6f:8e:3b:ba: 2f:c5:55:7c:5a:fd:7f:70:23:e7:7f:31:16:d3:42: 43:7d:b8:96:1b:80:e5:1f:3d:b9:dd:49:22:98:be: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:DC:AF:04:07:79:06:26:21:7C:5F:A8:E6:8A:59:A5:29:89:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:50:f9:44:3b:f9:a6:21:88:3d:ff:ac:91:f2:87:b6:63:ea: 6c:3d:72:dc:48:c1:04:61:54:95:4c:77:7a:d0:4a:77:ed:bf: f6:cc:5f:ce:23:c5:a2:bf:1b:d7:8c:e5:5d:64:7a:bb:83:82: f4:35:d5:e1:7c:50:4d:db:d8:ae:10:f6:fd:f8:73:9d:db:24: 6a:34:45:85:33:ac:17:02:2c:5d:47:d3:63:de:c3:7f:47:a2: aa:10:32:5c:ec:77:49:8f:9b:d1:2e:93:a2:b9:b3:3f:86:09: ed:00:82:a7:eb:3b:8f:8e:74:38:ae:69:90:fb:f4:c0:9f:95: ba:c7:83:43:39:6c:9b:16:26:18:88:a2:27:7c:b7:5f:69:87: 2c:e3:62:b1:21:e0:4c:47:bc:07:cb:1a:8d:e5:d3:51:03:e0: 6d:b7:fb:a5:ea:7c:e5:be:36:25:a3:a6:20:a6:8c:7d:f0:fe: c8:c6:b7:94:5b:4d:54:d9:55:a5:4e:0d:23:59:42:60:3f:0c: 05:f0:5e:b8:2e:54:b3:44:2f:55:b1:b2:9d:6d:e0:24:f2:b7: 82:88:79:08:88:c3:d4:aa:11:bc:97:56:1f:a6:4c:dd:79:7f: f9:9c:bd:c0:86:76:67:94:12:dc:07:8d:47:02:cc:60:f2:f2: a2:da:e3:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3xX+47HdoSgPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTUwYzU2YWYtYmEyNC00MzM5LTg1NzAtODcwNGQwYWRhOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/GQ4KsGFF8QCERHgvlQapcqPCM4FgYjD/KF DhE0zowu+rEmBX308DeIuwl1p3gwY6OWf4vM8Oww4kqU0O4zRK4SXd8tr8C+gror RRx86+6uWiNQg+tdaE3UJ57AXSM1iLDzCLEflygqIDWUnjuo0ls0YJ8aWNUt/zZV ysRQMEnxZDKU0rEfYODfDcXTbQv5jop+DyORc1hgz/bVVk2jTEJLMMi05gpirSRT j8s9MA6P2JIeplHoGcMk50r+T+xu5kfYMG6fcqIUEDUZxsK0rpH41nw9GQPVI+Dd Qm+OO7ovxVV8Wv1/cCPnfzEW00JDfbiWG4DlHz253UkimL717QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8v3K8EB3kGJiF8X6jmilmlKYlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzlhYmMwNjgtN2VkYy0z OWFkLWJhNzYtYjk0YmFmOTI0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxQ+UQ7+aYhiD3/rJHyh7Zj6mw9ctxIwQRhVJVMd3rQSnftv/bMX84j xaK/G9eM5V1keruDgvQ11eF8UE3b2K4Q9v34c53bJGo0RYUzrBcCLF1H02Pew39H oqoQMlzsd0mPm9Euk6K5sz+GCe0AgqfrO4+OdDiuaZD79MCflbrHg0M5bJsWJhiI oid8t19phyzjYrEh4ExHvAfLGo3l01ED4G23+6XqfOW+NiWjpiCmjH3w/sjGt5Rb TVTZVaVODSNZQmA/DAXwXrguVLNEL1Wxsp1t4CTyt4KIeQiIw9SqEbyXVh+mTN15 f/mcvcCGdmeUEtwHjUcCzGDy8qLa4zA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:17 2025 by rpki-client