$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa File: d8d294fa-38aa-3b74-ac08-7094c84a655c.roa (raw, json) Hash identifier: VuGo1VZg8oXWkAj8mqqznHrH6Wv7gRTA51zYiXCZ0H4= Subject key identifier: 17:56:39:0A:75:93:83:FE:73:34:77:25:A5:E1:E4:3D:7A:17:05:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77B8CAC7D08EDF5893420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396586 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:8c:ac:7d:08:ed:f5:89:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=611be19a-bc31-4e24-9e22-9f8d21396f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:cb:ef:5c:88:70:66:a5:25:05:4a:ff:9f: 13:8e:c4:f9:87:72:18:4e:1c:dc:6e:9c:87:4e:a7: 30:53:12:7d:e7:93:72:cd:27:12:63:ac:b3:f4:1b: 91:5e:21:c0:46:6a:4b:4a:8b:02:bc:ca:dd:e7:47: 57:ca:72:a4:02:d3:05:6b:96:b9:5e:54:d9:56:01: 52:84:17:9f:ac:90:57:98:1c:7d:4e:f1:29:83:6b: 16:4c:25:ec:b3:2d:16:35:54:ea:ae:9e:95:a6:c6: 10:50:bb:b5:07:31:93:53:4a:45:7d:18:f3:55:17: 1b:f1:84:27:ef:fd:cc:e4:e6:27:d9:e1:47:f1:fb: 5e:47:23:3c:28:79:a9:00:cb:cb:79:73:9e:dc:58: fe:34:ad:18:c3:51:0f:8d:9e:27:d5:fb:7f:ee:04: e6:ec:f8:90:a3:5c:5d:c6:8f:48:19:a5:0d:f8:d0: 44:5f:cf:29:e7:a5:ac:ca:0c:cb:da:a9:3a:16:98: b6:94:e3:4b:e0:bd:dd:c3:e5:fe:0f:8d:39:14:77: fa:62:7c:2f:9a:ad:86:c0:e5:5a:76:d5:b0:40:7d: 46:2b:ad:d5:ae:8f:85:5e:ee:dc:43:c5:e7:55:bc: 02:9a:18:33:85:68:fe:1e:de:bf:2f:d3:33:53:4f: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:56:39:0A:75:93:83:FE:73:34:77:25:A5:E1:E4:3D:7A:17:05:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:89:de:27:99:90:89:f4:04:d5:43:60:a7:7c:93:de:7a:e7: dd:9d:a5:21:d9:59:38:6b:df:73:42:dd:07:b8:be:13:b7:89: a9:5b:11:d5:74:89:a1:b5:5c:46:64:73:2c:e0:30:ba:e9:17: 6c:6b:c2:1c:d1:2e:16:f8:a3:83:5c:e3:c5:6a:fd:2e:72:80: 8d:e2:0b:6a:73:04:4a:9b:c1:8c:2a:a8:53:95:eb:23:a9:e8: f1:31:d7:94:1b:0d:19:0a:ff:0e:5f:ce:70:9b:78:43:d7:ce: f6:ba:55:7f:0c:46:be:5f:2c:d5:b5:f9:01:61:cf:97:2e:95: 68:47:bf:ab:93:97:63:d1:36:2f:90:f1:de:93:39:d7:05:b4: 93:f9:9f:b3:cd:96:a1:d9:69:e5:a2:da:17:0c:19:65:92:b9: 77:71:a5:1a:73:a6:50:e3:9f:f2:e3:bb:7e:3a:1d:1d:28:9e: 2b:3a:45:28:b4:1d:58:9d:05:ff:c4:f9:42:53:7f:58:50:62: f7:1d:d3:bb:36:27:f9:94:2c:a7:6c:af:db:3e:8d:74:e1:aa: ab:e5:12:74:3e:f1:79:e6:45:ee:32:a2:e9:6d:78:70:82:cb: 24:5c:59:1e:35:31:5c:b7:f1:79:d4:dd:dd:8d:31:c0:e9:f0: 86:29:d3:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3uMrH0I7fWJNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjExYmUxOWEtYmMzMS00ZTI0LTllMjItOWY4ZDIxMzk2ZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhALL71yIcGalJQVK/58TjsT5h3IYThzcbpyH TqcwUxJ955NyzScSY6yz9BuRXiHARmpLSosCvMrd50dXynKkAtMFa5a5XlTZVgFS hBefrJBXmBx9TvEpg2sWTCXssy0WNVTqrp6VpsYQULu1BzGTU0pFfRjzVRcb8YQn 7/3M5OYn2eFH8fteRyM8KHmpAMvLeXOe3Fj+NK0Yw1EPjZ4n1ft/7gTm7PiQo1xd xo9IGaUN+NBEX88p56WsygzL2qk6Fpi2lONL4L3dw+X+D405FHf6Ynwvmq2GwOVa dtWwQH1GK63Vro+FXu7cQ8XnVbwCmhgzhWj+Ht6/L9MzU0/VaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdWOQp1k4P+czR3JaXh5D16FwVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhkMjk0ZmEtMzhhYS0z Yjc0LWFjMDgtNzA5NGM4NGE2NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmJ3ieZkIn0BNVDYKd8k956592dpSHZWThr33NC3Qe4vhO3ialbEdV0 iaG1XEZkcyzgMLrpF2xrwhzRLhb4o4Nc48Vq/S5ygI3iC2pzBEqbwYwqqFOV6yOp 6PEx15QbDRkK/w5fznCbeEPXzva6VX8MRr5fLNW1+QFhz5culWhHv6uTl2PRNi+Q 8d6TOdcFtJP5n7PNlqHZaeWi2hcMGWWSuXdxpRpzplDjn/Lju346HR0onis6RSi0 HVidBf/E+UJTf1hQYvcd07s2J/mULKdsr9s+jXThqqvlEnQ+8XnmRe4youlteHCC yyRcWR41MVy38XnU3d2NMcDp8IYp05A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:02 2025 by rpki-client