$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa File: d51efc8c-0e81-303a-8669-75bf3ad2e229.roa (raw, json) Hash identifier: 9DmTP50I9kJhxFy1uAQvVDHU6RNMnQMEY0LADNZu9XU= Subject key identifier: 97:62:C1:4E:C7:B2:0F:A4:6A:BF:6B:1F:96:B9:C0:D9:C1:C9:84:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB1DD2A056CF3691EFBC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396560 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:dd:2a:05:6c:f3:69:1e:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0ca9e2f0-3740-4393-b866-f87b55b5ef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:ec:c5:2a:a7:80:24:1e:c2:24:ad:a5:05: 3f:f5:05:11:6d:38:15:4a:15:ef:ad:91:47:c4:26: b3:1e:20:29:6d:0d:a7:3b:7e:67:a2:f0:75:66:fb: 36:bb:00:fa:ef:68:eb:38:33:00:31:b9:ac:64:ea: ae:c5:c0:e6:c7:e4:e1:de:4b:82:5f:7a:a4:3d:67: 91:cd:c6:53:02:0d:ec:65:15:b6:c3:3f:bf:52:33: 41:0a:30:23:5e:37:4d:c0:8e:59:49:45:e5:e4:f9: 1e:66:29:d0:7b:d1:9d:ae:64:b3:86:db:2f:8c:2e: 11:76:dc:d1:50:47:a0:b9:41:5a:d0:e8:71:2e:24: e2:ba:03:25:da:70:6f:8c:2a:fb:80:1c:2e:03:98: e6:63:d5:6b:9f:03:3f:cd:5c:c5:22:90:0a:0d:0c: 2a:79:e2:65:6b:42:9a:76:df:d0:7f:20:56:d2:de: 8e:a7:27:b4:69:0b:76:0b:8a:9c:a4:06:17:ce:00: 0e:f4:39:80:b1:4c:24:04:1e:7d:01:fb:e0:99:94: ad:a3:d7:d8:69:c6:d9:eb:33:b2:c1:03:92:eb:8b: fb:f1:87:03:43:b8:79:3f:8d:e5:c0:b6:63:ea:64: e2:6b:39:d4:0e:be:f4:ac:16:42:c7:1e:eb:c6:50: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:C1:4E:C7:B2:0F:A4:6A:BF:6B:1F:96:B9:C0:D9:C1:C9:84:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fe:c3:05:2c:49:cb:81:04:a2:2a:ee:9d:86:e0:72:d2:fe: 09:95:ca:2f:d4:34:8e:15:a7:27:d9:36:13:e8:74:e8:cb:57: a0:f9:de:f0:1f:2f:eb:49:d4:fa:c8:e1:fb:f1:94:5e:2a:fc: e7:39:d2:ae:6b:71:ad:7b:20:e6:9f:9a:fd:0a:8f:77:2e:e4: 0e:18:6c:1b:36:74:27:07:f9:67:55:ab:86:a2:62:57:f4:24: 3f:64:ad:41:7d:cc:ba:7c:0b:11:5c:ef:73:a7:d2:0b:18:27: e1:d9:f4:7c:66:38:bd:f9:b0:42:bb:7b:ae:33:5b:67:5a:f9: e4:bc:67:8b:02:31:0d:7c:9a:f2:24:f3:3d:92:b6:5e:c5:10: 4b:6f:2d:3d:14:8f:d8:de:3b:51:8c:2a:32:bf:94:35:7a:b5: cd:64:1a:5d:23:d9:2d:80:2d:79:9e:3a:d4:08:16:0a:30:d9: 1c:5a:17:4c:c8:9d:ee:a2:bf:37:a6:1b:1c:59:42:cb:b7:37: ef:aa:36:8a:2e:ce:24:f5:c0:a8:2a:e4:75:c2:24:8d:5c:21: 67:76:fb:44:01:8f:94:f5:e1:cf:44:4b:84:56:96:62:77:7c: fe:de:5a:49:7b:d2:4b:27:ca:23:3f:e6:d3:46:c8:ed:eb:c7: e1:a2:a3:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLHdKgVs82ke+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGNhOWUyZjAtMzc0MC00MzkzLWI4NjYtZjg3YjU1YjVlZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOrsxSqngCQewiStpQU/9QURbTgVShXvrZFH xCazHiApbQ2nO35novB1Zvs2uwD672jrODMAMbmsZOquxcDmx+Th3kuCX3qkPWeR zcZTAg3sZRW2wz+/UjNBCjAjXjdNwI5ZSUXl5PkeZinQe9GdrmSzhtsvjC4RdtzR UEeguUFa0OhxLiTiugMl2nBvjCr7gBwuA5jmY9VrnwM/zVzFIpAKDQwqeeJla0Ka dt/QfyBW0t6Opye0aQt2C4qcpAYXzgAO9DmAsUwkBB59AfvgmZSto9fYacbZ6zOy wQOS64v78YcDQ7h5P43lwLZj6mTiaznUDr70rBZCxx7rxlB9uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJdiwU7Hsg+kar9rH5a5wNnByYRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDUxZWZjOGMtMGU4MS0z MDNhLTg2NjktNzViZjNhZDJlMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3/sMFLEnLgQSiKu6dhuBy0v4Jlcov1DSOFacn2TYT6HToy1eg+d7w Hy/rSdT6yOH78ZReKvznOdKua3GteyDmn5r9Co93LuQOGGwbNnQnB/lnVauGomJX 9CQ/ZK1Bfcy6fAsRXO9zp9ILGCfh2fR8Zji9+bBCu3uuM1tnWvnkvGeLAjENfJry JPM9krZexRBLby09FI/Y3jtRjCoyv5Q1erXNZBpdI9ktgC15njrUCBYKMNkcWhdM yJ3uor83phscWULLtzfvqjaKLs4k9cCoKuR1wiSNXCFndvtEAY+U9eHPREuEVpZi d3z+3lpJe9JLJ8ojP+bTRsjt68fhoqMC -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:33 2025 by rpki-client