$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa File: da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa (raw, json) Hash identifier: RtaJrt1d/RwF2QozRhaqCy9FOqJdhO8u/68ilQxZtgk= Subject key identifier: 5E:75:25:CD:49:05:5F:E5:5E:3B:9C:09:D5:59:66:F1:2D:0F:93:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77AAAA1C1FB2DAB32C700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396573 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:aa:a1:c1:fb:2d:ab:32:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=d5f6652f-a837-482e-8964-362e1c14f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:e2:f8:ce:53:e5:86:d0:e8:29:2a:9a:d6: 69:75:d1:77:22:d1:1a:14:af:e6:47:5e:f9:34:99: 4a:32:91:40:a1:98:2c:6d:45:b7:cc:ae:d5:63:54: 31:b2:03:9b:17:85:09:f1:9d:de:40:27:20:8f:37: 6c:29:84:41:ce:5b:7b:76:c9:5a:bc:bb:86:8d:6a: 2a:18:d1:a4:87:50:fe:7f:10:34:80:5a:2b:46:df: 65:77:c3:ad:e0:8b:eb:f9:4f:aa:02:30:bb:81:40: 74:94:d2:ff:ad:69:21:c5:47:c3:4a:6b:a7:3f:cc: 1e:fa:1d:fd:0a:24:83:d7:8d:8f:13:24:2b:ec:5a: 23:f3:d8:91:32:16:8f:92:92:e5:ac:f2:5c:57:fb: 25:a2:c3:43:08:2a:d1:8c:49:de:db:48:72:4c:55: 45:28:3e:ac:f4:eb:0f:8a:84:5c:40:d4:29:d6:a2: a5:86:39:64:43:da:e6:16:e2:4c:44:67:9c:f7:42: de:a6:58:b7:1e:45:18:96:bb:cc:9c:6f:0e:cb:0c: 8b:55:9d:aa:4f:0f:b2:60:77:fb:9b:0b:40:76:7c: 13:94:2a:a8:ec:ea:74:f1:9d:5d:d0:02:58:ab:70: 85:6e:a4:9f:99:07:43:c5:57:5c:1d:63:3e:2e:2b: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:75:25:CD:49:05:5F:E5:5E:3B:9C:09:D5:59:66:F1:2D:0F:93:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ee:67:3a:43:18:48:b0:ad:a3:0c:98:73:24:1c:20:2a:26: 29:76:ab:f6:11:67:95:ba:68:21:dd:6b:3f:81:28:2b:4c:00: 32:16:15:54:07:ba:10:7b:df:f0:93:72:bc:d4:97:00:28:80: 70:39:2d:a8:be:44:84:83:fc:8f:28:b0:ba:12:8a:e2:d6:65: 85:38:dd:6c:cf:fa:e4:b8:b0:33:64:c5:43:1b:b2:f7:c2:e7: 28:d4:e0:47:be:a6:45:7a:4b:9a:44:fb:4e:92:1d:de:02:b4: d1:74:cb:91:9a:d1:0c:57:ab:1c:ed:b3:e8:1f:c8:3a:73:96: 14:4f:4f:55:82:f5:53:1f:37:1a:97:56:ba:2d:4d:00:16:63: b4:c4:14:ef:b7:c6:76:96:c1:1f:04:65:6a:b6:2f:17:cb:df: ee:8d:c2:ee:42:27:84:50:db:a4:fc:73:66:c2:1f:a6:63:0a: 5f:bf:f8:88:53:b1:9b:54:fa:4a:55:b0:18:16:74:ff:65:a1: 40:46:95:75:26:2a:92:46:e2:99:e1:05:9d:88:1d:fa:80:05: 74:71:b6:da:2b:72:05:33:3a:b1:0e:ad:a1:18:97:f2:e3:96: e8:1d:9e:82:f0:07:eb:a0:2d:52:a7:28:77:96:6f:8d:a0:64: 13:0c:4e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3qqocH7LasyxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZDVmNjY1MmYtYTgzNy00ODJlLTg5NjQtMzYyZTFjMTRmNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMzi+M5T5YbQ6CkqmtZpddF3ItEaFK/mR175 NJlKMpFAoZgsbUW3zK7VY1QxsgObF4UJ8Z3eQCcgjzdsKYRBzlt7dslavLuGjWoq GNGkh1D+fxA0gForRt9ld8Ot4Ivr+U+qAjC7gUB0lNL/rWkhxUfDSmunP8we+h39 CiSD142PEyQr7Foj89iRMhaPkpLlrPJcV/slosNDCCrRjEne20hyTFVFKD6s9OsP ioRcQNQp1qKlhjlkQ9rmFuJMRGec90Lepli3HkUYlrvMnG8OywyLVZ2qTw+yYHf7 mwtAdnwTlCqo7Op08Z1d0AJYq3CFbqSfmQdDxVdcHWM+LivtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF51Jc1JBV/lXjucCdVZZvEtD5PoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGExNjhmMGMtMmI5Zi0z NzI1LThiNWQtOGIwNzEwYWJmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPuZzpDGEiwraMMmHMkHCAqJil2q/YRZ5W6aCHdaz+BKCtMADIWFVQH uhB73/CTcrzUlwAogHA5Lai+RISD/I8osLoSiuLWZYU43WzP+uS4sDNkxUMbsvfC 5yjU4Ee+pkV6S5pE+06SHd4CtNF0y5Ga0QxXqxzts+gfyDpzlhRPT1WC9VMfNxqX VrotTQAWY7TEFO+3xnaWwR8EZWq2LxfL3+6Nwu5CJ4RQ26T8c2bCH6ZjCl+/+IhT sZtU+kpVsBgWdP9loUBGlXUmKpJG4pnhBZ2IHfqABXRxttorcgUzOrEOraEYl/Lj lugdnoLwB+ugLVKnKHeWb42gZBMMTgs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:18 2025 by rpki-client