$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa File: da6da85c-d240-3bb3-8248-3a8de9713ce4.roa (raw, json) Hash identifier: UKRSZwhLanFOdFUPisLM5n74lXI+hQFsXbtyls5fqNk= Subject key identifier: FD:85:FC:A7:E1:BB:64:3D:F5:95:FB:FE:20:FC:C1:4E:31:21:DD:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77D96BCC69C4440F0ED80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 25485 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:96:bc:c6:9c:44:40:f0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=677c45ae-c0fb-4bd8-b74f-0c33bad08c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7d:5d:96:01:fa:6e:74:fb:8d:f8:72:5e:6e: 6b:52:f0:b8:67:1c:50:51:37:b6:20:4a:23:b9:5a: 2c:f4:1c:57:c8:64:1e:fd:9b:a1:24:02:2a:3a:52: 5d:d9:03:9c:fc:e3:08:1c:58:d3:aa:7d:fe:ac:ac: a0:93:2e:cf:f7:2f:29:8f:ae:80:90:c0:87:f3:ef: 38:8d:e9:c6:8d:66:b5:31:24:8f:69:76:0d:51:2f: 96:45:ee:3a:eb:9a:1c:aa:11:73:c4:53:e9:34:3c: ba:35:d6:d4:1e:09:99:c7:f6:e6:71:4e:3f:b7:f0: d9:aa:0f:9f:be:e7:ec:94:2d:f7:1c:37:7e:ea:46: 53:f1:ad:42:6e:a6:77:20:b6:f9:7d:b9:08:dc:fd: d2:11:99:2d:55:5f:41:92:ba:9f:c4:45:8e:a1:03: 5f:24:f3:69:6e:db:04:cf:7a:a9:c0:29:5b:31:d6: 66:a7:11:8e:22:2a:24:e2:85:3b:cf:12:20:0c:34: 7f:3d:77:0c:01:b2:f1:d5:48:63:1a:ad:d0:9c:a5: 48:19:9a:0e:b8:2c:27:b2:06:71:f8:82:b2:82:67: de:75:1d:af:b6:b9:17:9c:36:d6:53:d0:a8:3a:58: e1:51:74:28:9d:65:94:2d:32:25:90:86:2d:29:18: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:85:FC:A7:E1:BB:64:3D:F5:95:FB:FE:20:FC:C1:4E:31:21:DD:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:19:35:5b:fb:4b:a6:2e:56:74:66:6c:ad:a4:63:4a:2e:3e: 13:b8:8e:a4:e8:3f:32:27:e6:81:bd:1d:e8:7c:23:95:69:21: 68:15:e8:a9:92:1e:d6:fb:b5:78:bb:54:08:bb:cf:d3:12:f9: b3:c7:a3:36:d2:62:3f:a0:c0:55:22:ce:ea:bb:2f:ee:0a:d4: eb:62:a6:fe:34:36:1a:00:97:69:c4:0a:23:83:63:ab:8e:a1: cf:a1:a9:63:ce:f4:3f:ba:41:74:82:da:f9:9a:89:75:f6:a6: f1:a0:fd:5e:5e:a7:15:d4:d5:14:64:9b:99:e9:d4:a1:61:85: ad:42:a8:ce:f4:ae:a1:68:84:39:ee:67:e8:61:cb:b4:c0:75: dd:df:5a:17:21:4c:21:c0:1a:c1:52:17:f0:a3:48:56:84:91: 21:df:4a:2f:60:c5:7d:d3:36:2e:02:a5:73:15:2b:6b:2e:5a: ca:6c:18:4b:97:e1:5e:eb:6d:b9:93:d2:c5:13:88:77:4f:38: d8:a3:e8:e7:29:a7:8a:aa:09:73:82:c9:56:1b:e7:0c:45:e5: 9c:fc:24:7e:96:7f:7b:83:59:2f:56:31:63:d4:24:13:a2:5f: 50:a0:a6:47:8f:97:c9:33:c7:db:ad:85:9f:e6:23:2d:17:84: b0:bb:62:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx32WvMacREDw7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Njc3YzQ1YWUtYzBmYi00YmQ4LWI3NGYtMGMzM2JhZDA4YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+X1dlgH6bnT7jfhyXm5rUvC4ZxxQUTe2IEoj uVos9BxXyGQe/ZuhJAIqOlJd2QOc/OMIHFjTqn3+rKygky7P9y8pj66AkMCH8+84 jenGjWa1MSSPaXYNUS+WRe4665ocqhFzxFPpNDy6NdbUHgmZx/bmcU4/t/DZqg+f vufslC33HDd+6kZT8a1CbqZ3ILb5fbkI3P3SEZktVV9BkrqfxEWOoQNfJPNpbtsE z3qpwClbMdZmpxGOIiok4oU7zxIgDDR/PXcMAbLx1UhjGq3QnKVIGZoOuCwnsgZx +IKygmfedR2vtrkXnDbWU9CoOljhUXQonWWULTIlkIYtKRgzNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2F/Kfhu2Q99ZX7/iD8wU4xId32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2ZGE4NWMtZDI0MC0z YmIzLTgyNDgtM2E4ZGU5NzEzY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoZNVv7S6YuVnRmbK2kY0ouPhO4jqToPzIn5oG9Heh8I5VpIWgV6KmS Htb7tXi7VAi7z9MS+bPHozbSYj+gwFUizuq7L+4K1Otipv40NhoAl2nECiODY6uO oc+hqWPO9D+6QXSC2vmaiXX2pvGg/V5epxXU1RRkm5np1KFhha1CqM70rqFohDnu Z+hhy7TAdd3fWhchTCHAGsFSF/CjSFaEkSHfSi9gxX3TNi4CpXMVK2suWspsGEuX 4V7rbbmT0sUTiHdPONij6Ocpp4qqCXOCyVYb5wxF5Zz8JH6Wf3uDWS9WMWPUJBOi X1CgpkePl8kzx9uthZ/mIy0XhLC7Ygs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:40 2025 by rpki-client