$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa File: d3d0ed94-a94d-384b-a208-cd45356f874c.roa (raw, json) Hash identifier: 2D+0UBchL5HouyJRMrU2kGZODPapWtDU+R37PpWdunI= Subject key identifier: 4D:77:40:A8:67:97:17:38:2F:89:5E:1E:92:42:4F:B4:69:BB:67:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC777C13BEAAAAA30A64F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 36623 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:77:c1:3b:ea:aa:aa:30:a6:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=92d2d320-4b64-4aa3-b49e-5c888cff1059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:de:cb:9a:75:0d:eb:d6:c0:9e:20:81:2b: 65:9c:45:4b:14:38:d6:fa:c5:0a:ff:76:fd:d6:df: 48:55:5f:39:d4:93:fe:56:86:4a:ef:c9:50:73:c7: 84:c6:0f:36:af:1f:f8:e2:80:0f:72:d0:3c:d9:96: 71:e8:e2:b6:a7:bd:e6:06:55:8d:1d:81:42:8b:3e: 4e:85:a7:21:fa:ca:c9:27:46:35:98:f9:8f:e8:ff: 8c:1f:6d:f6:d9:cf:58:78:e1:a2:8c:4d:2b:19:b8: 7b:27:ed:8a:df:17:d1:39:6f:5a:f4:0c:82:81:63: c7:9c:14:31:3e:bd:d2:b3:9a:dc:df:da:92:62:35: fc:e0:69:4e:c1:9a:82:2e:b7:9a:5b:5a:42:6b:af: 10:d3:bd:11:eb:3a:25:99:a4:e9:c1:01:8b:5b:e3: 5f:60:8a:32:c8:97:96:28:b0:64:ba:00:f6:0e:91: c6:2b:e9:e2:ed:71:a3:c9:e5:f4:88:0a:37:ac:0b: 14:c1:c0:f4:47:80:bb:be:f5:8d:4b:8a:ed:7c:dc: 1f:50:4f:b1:2b:5b:ad:01:c2:64:a3:a3:c3:5c:63: 11:29:22:83:21:87:c1:f6:21:57:09:e1:d2:39:af: 7f:30:06:ea:cb:3b:36:c7:a0:75:ee:36:1b:4f:04: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:77:40:A8:67:97:17:38:2F:89:5E:1E:92:42:4F:B4:69:BB:67:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:39:8b:0a:3f:74:4b:db:87:70:bd:35:f7:74:10:35:62:64: 83:f3:8a:04:b8:d7:83:69:f8:32:34:52:ab:1d:5a:20:8e:19: f3:35:be:49:70:e6:79:ea:64:af:5e:3c:47:77:a7:c2:6e:3c: 93:d9:4a:a9:0f:2a:fc:4f:45:a9:51:50:1b:c4:f7:28:33:90: f4:c1:46:fc:dd:72:fb:06:18:7a:d3:3f:07:98:74:73:06:69: 7c:df:f0:1b:58:b1:f8:d5:b9:a5:8d:f6:d8:c5:9d:98:32:59: 74:c9:33:fe:82:ab:f2:f8:13:06:c3:8a:a4:aa:c8:3b:c9:f7: f7:2f:0b:5d:9f:d2:8f:89:b5:d2:18:3a:03:55:3b:12:28:1c: 7b:c3:3a:18:22:a2:6c:38:81:2f:36:53:6c:4d:66:fc:cf:b3: 9a:58:16:07:84:18:9a:d9:2b:92:72:ae:bb:e1:a5:02:a6:59: b4:ee:e7:73:cb:56:98:b2:87:a9:79:47:b4:16:57:eb:5e:4d: c2:8e:7b:7a:1b:53:8c:e7:90:80:4f:29:dd:f8:39:df:6d:a7: ea:d2:b7:07:2e:45:ab:43:07:e2:18:da:f1:fa:dd:22:68:51: 56:b5:65:a1:a5:8d:54:65:c2:59:1e:9f:b4:fd:40:6d:94:68: 75:d9:22:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3fBO+qqqjCmT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OTJkMmQzMjAtNGI2NC00YWEzLWI0OWUtNWM4ODhjZmYxMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvHey5p1DevWwJ4ggStlnEVLFDjW+sUK/3b9 1t9IVV851JP+VoZK78lQc8eExg82rx/44oAPctA82ZZx6OK2p73mBlWNHYFCiz5O hach+srJJ0Y1mPmP6P+MH2322c9YeOGijE0rGbh7J+2K3xfROW9a9AyCgWPHnBQx Pr3Ss5rc39qSYjX84GlOwZqCLreaW1pCa68Q070R6zolmaTpwQGLW+NfYIoyyJeW KLBkugD2DpHGK+ni7XGjyeX0iAo3rAsUwcD0R4C7vvWNS4rtfNwfUE+xK1utAcJk o6PDXGMRKSKDIYfB9iFXCeHSOa9/MAbqyzs2x6B17jYbTwTLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE13QKhnlxc4L4leHpJCT7Rpu2ekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkMGVkOTQtYTk0ZC0z ODRiLWEyMDgtY2Q0NTM1NmY4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM5iwo/dEvbh3C9Nfd0EDViZIPzigS414Np+DI0UqsdWiCOGfM1vklw 5nnqZK9ePEd3p8JuPJPZSqkPKvxPRalRUBvE9ygzkPTBRvzdcvsGGHrTPweYdHMG aXzf8BtYsfjVuaWN9tjFnZgyWXTJM/6Cq/L4EwbDiqSqyDvJ9/cvC12f0o+JtdIY OgNVOxIoHHvDOhgiomw4gS82U2xNZvzPs5pYFgeEGJrZK5JyrrvhpQKmWbTu53PL Vpiyh6l5R7QWV+teTcKOe3obU4znkIBPKd34Od9tp+rStwcuRatDB+IY2vH63SJo UVa1ZaGljVRlwlken7T9QG2UaHXZIjs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:59 2025 by rpki-client