$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55f82c9-ee9d-31c4-9f05-ce4273422511.roa File: d55f82c9-ee9d-31c4-9f05-ce4273422511.roa (raw, json) Hash identifier: Bgr76bWXqStjuL+Rt+wq0Qfyj1gfRIK3VIbgwWlwu/s= Subject key identifier: BA:41:B7:3E:C0:6E:C1:63:D2:97:E5:67:07:E3:F0:DA:0B:B8:4D:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77DE4CFDAF4555E46C280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55f82c9-ee9d-31c4-9f05-ce4273422511.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396603 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:e4:cf:da:f4:55:5e:46:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ec424fdb-a558-46f6-8973-9feb33026dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:44:b6:e2:a7:d4:62:19:c7:3a:bf:02:f4: 55:67:8e:5e:52:25:71:67:27:12:b4:12:0a:6e:fd: 9e:c6:80:ba:15:f2:8e:18:b0:20:5a:f0:5f:73:6b: 39:ab:9f:fa:91:f0:fa:47:cd:00:4e:81:f1:00:a9: 46:27:55:b2:18:2a:ea:68:56:03:b5:4c:58:5e:2f: e9:6e:07:b9:5a:7f:8a:3f:1a:52:9c:f3:c1:99:29: 79:53:ad:66:46:9f:07:a8:22:50:dc:8e:79:6f:39: 32:ad:d0:d1:ba:2d:8c:32:db:63:7e:72:c8:38:73: d8:d0:01:dc:69:25:07:02:03:65:56:b7:df:05:f2: b0:9f:54:74:03:60:9b:45:fb:21:74:c7:2f:67:08: 53:16:0a:3c:d8:16:13:f4:cc:3c:62:a9:94:07:76: 43:e9:31:97:59:59:40:54:93:fc:1f:c8:44:79:13: 51:4f:35:2b:eb:8e:5f:4b:63:02:be:e4:f3:a8:7c: 36:bc:25:c6:06:00:ee:c6:fc:82:7d:89:a7:92:c0: 1b:65:fa:1d:77:20:13:89:ae:2d:68:52:1e:6a:e4: fc:ec:48:3d:be:c4:28:b1:01:69:99:4a:15:fb:e8: 98:1f:a1:d4:16:65:95:08:a3:bf:d1:0e:e6:06:22: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:B7:3E:C0:6E:C1:63:D2:97:E5:67:07:E3:F0:DA:0B:B8:4D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55f82c9-ee9d-31c4-9f05-ce4273422511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:21:f4:3d:1c:a2:e0:ae:9b:b6:b7:ff:36:e0:25:7a:62:14: 4a:7b:e0:9f:d5:d4:75:da:b2:17:20:0c:55:ad:cc:d4:1b:7b: 97:4f:ac:65:ad:9f:ee:0d:5b:ff:c6:86:b0:bc:d1:19:1d:e1: b9:68:c8:4c:6f:07:3e:fe:54:05:74:04:02:95:cc:41:c1:11: 5b:3e:35:a3:f8:33:4c:56:60:17:76:16:a8:57:59:96:32:3e: 65:c4:4c:28:fb:e2:e3:08:e3:80:2f:28:f7:2e:44:bf:7b:f4: 53:cd:20:af:a2:14:89:f7:c1:b5:cc:81:e3:17:2b:32:96:86: 9b:22:91:95:81:dd:84:71:c8:d5:45:36:a1:a5:3d:98:f4:d5: d7:74:d0:dc:6b:e4:ea:fb:ce:dc:04:2b:15:96:98:f0:00:8d: c3:cb:ec:38:7a:71:a8:9c:80:e7:a6:a8:c7:4b:ed:e4:a7:30: ba:b3:ee:49:5a:05:22:73:c0:01:7a:80:32:74:e6:f9:29:49: 6f:28:bb:f7:8c:0a:d3:ed:8f:50:67:9a:ac:2a:ef:3d:c1:50: 44:51:e0:03:69:90:96:b8:8c:bc:ae:22:0e:29:bd:1a:d0:05: ba:f1:9c:85:0d:74:9f:7a:0b:cc:85:a3:65:7b:7f:07:87:df: a7:f3:7b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx33kz9r0VV5GwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWM0MjRmZGItYTU1OC00NmY2LTg5NzMtOWZlYjMzMDI2ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLpEtuKn1GIZxzq/AvRVZ45eUiVxZycStBIK bv2exoC6FfKOGLAgWvBfc2s5q5/6kfD6R80AToHxAKlGJ1WyGCrqaFYDtUxYXi/p bge5Wn+KPxpSnPPBmSl5U61mRp8HqCJQ3I55bzkyrdDRui2MMttjfnLIOHPY0AHc aSUHAgNlVrffBfKwn1R0A2CbRfshdMcvZwhTFgo82BYT9Mw8YqmUB3ZD6TGXWVlA VJP8H8hEeRNRTzUr645fS2MCvuTzqHw2vCXGBgDuxvyCfYmnksAbZfoddyATia4t aFIeauT87Eg9vsQosQFpmUoV++iYH6HUFmWVCKO/0Q7mBiKzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpBtz7AbsFj0pflZwfj8NoLuE33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDU1ZjgyYzktZWU5ZC0z MWM0LTlmMDUtY2U0MjczNDIyNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8h9D0couCum7a3/zbgJXpiFEp74J/V1HXashcgDFWtzNQbe5dPrGWt n+4NW//GhrC80Rkd4bloyExvBz7+VAV0BAKVzEHBEVs+NaP4M0xWYBd2FqhXWZYy PmXETCj74uMI44AvKPcuRL979FPNIK+iFIn3wbXMgeMXKzKWhpsikZWB3YRxyNVF NqGlPZj01dd00Nxr5Or7ztwEKxWWmPAAjcPL7Dh6caicgOemqMdL7eSnMLqz7kla BSJzwAF6gDJ05vkpSW8ou/eMCtPtj1Bnmqwq7z3BUERR4ANpkJa4jLyuIg4pvRrQ BbrxnIUNdJ96C8yFo2V7fweH36fze9I= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:41 2025 by rpki-client