$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa File: dd455da0-bdef-3129-8691-c9920dae59f1.roa (raw, json) Hash identifier: L/on+RsQ5P8Uc88w39JbUSVyuJL1AXRnPoNl5ciQYCs= Subject key identifier: 45:8D:15:02:3A:23:05:0E:99:D8:8E:4E:0B:AE:52:8F:10:F3:BC:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77B7C6CCCB94A216B1F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397194 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:7c:6c:cc:b9:4a:21:6b:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=7b7219c6-fa17-40ac-8cac-5b5c10268c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:61:0c:20:37:85:a0:d6:f1:41:a2:21:d8: c6:a8:c6:1e:ab:8d:75:95:5c:ac:1b:aa:35:03:6c: db:6d:50:88:34:76:9b:d8:95:e1:c3:0a:a0:dc:b7: ce:d1:9d:a9:6c:29:f9:4a:2e:7f:16:1f:6c:5e:5d: ac:12:2d:47:ac:f2:ed:08:75:72:2b:5f:8e:e0:27: 61:19:c5:f7:91:90:1d:38:f6:51:40:96:b5:44:27: e7:a1:ed:9e:5b:54:8f:06:fb:3e:77:97:ec:d5:04: 7d:c6:82:c1:8c:55:07:cf:0d:21:3c:ec:76:b4:ce: 72:00:8d:bd:a4:22:48:30:35:5c:71:27:b7:65:57: 36:c9:37:56:5b:a1:d4:ba:62:c9:08:86:af:45:f6: b6:9f:52:15:bb:27:f6:c1:07:66:77:72:2f:84:75: 25:fd:1f:aa:8a:a0:3b:7d:92:a5:7a:35:e4:ae:45: cf:64:ae:31:73:a0:1a:9c:97:74:0b:c3:96:c3:c3: 39:aa:d5:02:60:01:6b:6e:a7:79:34:66:89:cf:6f: 7e:1a:2f:fa:af:c3:97:d7:a3:03:de:13:d9:72:59: 86:2f:5d:e5:d6:82:15:a8:f5:2c:07:26:77:84:ea: 59:e8:f9:3e:e2:77:23:e8:9c:ad:0a:53:32:61:de: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8D:15:02:3A:23:05:0E:99:D8:8E:4E:0B:AE:52:8F:10:F3:BC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:6f:af:51:3d:3e:54:ee:38:62:b7:5f:24:63:24:58:34: 14:c8:43:95:6f:fa:81:fd:3a:1f:e4:43:16:54:66:a3:b5:f3: 96:00:c8:41:98:67:b8:ee:61:48:58:2b:34:ec:56:5c:8b:a4: b4:c6:6c:71:4d:c8:ee:5d:66:45:d6:fc:6c:10:5c:8e:94:9f: d6:05:55:1d:06:2f:b5:19:b8:8f:a0:21:f7:26:b9:09:81:22: 26:c9:99:f7:e9:98:dc:7c:33:ba:33:93:7b:f8:0a:fb:72:64: 28:62:70:80:50:a5:46:72:d8:b4:dc:55:6b:97:eb:93:41:7d: f6:7b:26:16:ee:da:48:22:6a:bb:44:7d:46:11:6e:a0:f1:fa: 36:72:8d:1c:e3:81:c4:bb:39:ec:e6:ba:8d:c8:f0:ef:65:e8: db:5b:54:94:1a:8b:3d:36:a9:c1:40:7e:1b:d9:2d:a9:b2:fa: e9:f5:71:c5:62:53:fc:d1:27:04:ad:1c:71:e6:01:6a:f5:3e: 4f:5d:a6:db:14:e7:ed:c1:af:f8:6e:45:b4:2f:52:cb:6c:af: 83:42:08:f1:cb:01:dd:b9:60:36:59:d8:10:27:27:c1:e9:66: da:c3:7c:26:e5:90:8e:26:82:fe:6b:15:d8:0d:5a:63:7e:ab: c9:3c:0a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3t8bMy5SiFrH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk N2I3MjE5YzYtZmExNy00MGFjLThjYWMtNWI1YzEwMjY4YzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkphDCA3haDW8UGiIdjGqMYeq411lVysG6o1 A2zbbVCINHab2JXhwwqg3LfO0Z2pbCn5Si5/Fh9sXl2sEi1HrPLtCHVyK1+O4Cdh GcX3kZAdOPZRQJa1RCfnoe2eW1SPBvs+d5fs1QR9xoLBjFUHzw0hPOx2tM5yAI29 pCJIMDVccSe3ZVc2yTdWW6HUumLJCIavRfa2n1IVuyf2wQdmd3IvhHUl/R+qiqA7 fZKlejXkrkXPZK4xc6AanJd0C8OWw8M5qtUCYAFrbqd5NGaJz29+Gi/6r8OX16MD 3hPZclmGL13l1oIVqPUsByZ3hOpZ6Pk+4ncj6JytClMyYd48UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWNFQI6IwUOmdiOTguuUo8Q87x+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ0NTVkYTAtYmRlZi0z MTI5LTg2OTEtYzk5MjBkYWU1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgkb69RPT5U7jhit18kYyRYNBTIQ5Vv+oH9Oh/kQxZUZqO185YAyEGY Z7juYUhYKzTsVlyLpLTGbHFNyO5dZkXW/GwQXI6Un9YFVR0GL7UZuI+gIfcmuQmB IibJmffpmNx8M7ozk3v4CvtyZChicIBQpUZy2LTcVWuX65NBffZ7Jhbu2kgiartE fUYRbqDx+jZyjRzjgcS7Oezmuo3I8O9l6NtbVJQaiz02qcFAfhvZLamy+un1ccVi U/zRJwStHHHmAWr1Pk9dptsU5+3Br/huRbQvUstsr4NCCPHLAd25YDZZ2BAnJ8Hp ZtrDfCblkI4mgv5rFdgNWmN+q8k8CqU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:39 2025 by rpki-client