$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e70ff374-fd5c-3338-bb82-2c1d6da51105.roa File: e70ff374-fd5c-3338-bb82-2c1d6da51105.roa (raw, json) Hash identifier: QvaHfQtLTWr0QurZ8Hy96Vv59pF1pO8NSyaIuEBHXIs= Subject key identifier: 4A:E9:59:45:77:89:1D:CE:74:98:AA:DE:A7:B0:2E:B5:40:86:2E:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC7786C0123BC9C8B7D62C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e70ff374-fd5c-3338-bb82-2c1d6da51105.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 36628 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:6c:01:23:bc:9c:8b:7d:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=3db8bc9e-3d14-44ed-9b53-685995c22a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:92:19:b5:3e:8a:aa:f1:c6:84:ec:40:40: f8:eb:91:ca:d5:70:04:08:87:13:b4:74:a7:c5:ea: 59:71:9a:f8:e5:8e:5c:36:fd:9f:7b:20:14:86:cd: 64:12:28:b3:3a:9c:b8:42:2e:48:2f:e4:59:71:38: e6:d8:1d:bf:7c:53:9d:34:53:76:87:dc:06:cd:d5: 53:c6:8a:ae:63:79:ee:05:f4:a4:15:7f:31:93:08: cc:8e:eb:2e:93:0a:7b:7c:22:26:8e:3e:96:59:05: 27:94:6b:33:41:24:91:48:cd:58:99:40:9e:80:e5: 8f:ed:33:8b:52:ca:ce:36:2b:ab:49:65:f8:1e:46: e0:5c:a4:21:50:02:69:f5:55:0c:91:7f:b1:21:9c: 44:cb:3e:3a:e8:56:03:38:45:3c:b0:b9:a8:cd:4a: e8:b2:33:f2:63:56:6e:dc:a9:b3:a9:cf:17:ae:63: 2e:27:0c:ce:27:33:c5:9f:90:2a:68:0b:7f:16:ba: 4e:35:4a:2a:01:64:e8:0f:65:e6:96:f6:28:00:68: 03:13:6e:cc:41:94:31:9f:dd:da:8d:4d:c3:a8:49: 6b:17:bd:ea:28:ae:e9:ea:7e:2f:fd:6b:01:37:c2: 91:59:c6:c6:65:ca:40:21:dc:21:25:e5:fc:4f:7c: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:59:45:77:89:1D:CE:74:98:AA:DE:A7:B0:2E:B5:40:86:2E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e70ff374-fd5c-3338-bb82-2c1d6da51105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b4:d7:be:d8:95:f3:4b:43:d9:56:6c:39:7c:47:50:4f:39: 74:e8:25:0b:95:6c:03:fd:c3:81:a3:f7:eb:17:e9:98:9f:1e: 2c:54:1f:5f:19:15:f4:90:a2:da:98:6a:0a:7d:b2:0f:d5:23: 5d:3f:5d:81:58:e6:f9:ac:bb:fa:5f:25:d8:69:93:36:7d:69: 2c:5e:39:de:8c:37:d7:cf:ec:7f:0d:a2:ff:b7:b5:56:b6:10: 43:35:55:98:02:a8:f2:e6:15:ea:e4:20:4d:d0:bd:c6:b5:40: 0d:e4:ae:e3:c6:ad:4f:10:60:c7:8a:96:d1:43:30:c0:b0:17: 31:4d:f0:53:b5:5d:8c:88:0b:63:82:99:34:fa:80:d4:db:1e: 9a:3f:87:8c:b6:a1:de:5e:7b:22:be:63:f5:c2:66:58:75:ff: 29:db:f9:07:15:58:38:ba:ab:03:6a:98:ef:d8:bb:44:04:d4: e6:31:4c:b7:7d:d2:0e:5a:fe:f1:5f:fd:f4:d6:f5:2f:8f:0c: 89:ab:40:2b:95:7e:59:11:b1:a2:1d:64:6e:5b:ff:31:15:7c: f6:c0:d7:ee:3f:89:59:d4:f7:8f:44:8b:5a:31:b5:e5:f0:1a: 5c:bf:40:00:a2:dd:d5:fd:ec:47:47:9a:fb:e3:e9:4f:56:dc: 8e:aa:7e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3hsASO8nIt9YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk M2RiOGJjOWUtM2QxNC00NGVkLTliNTMtNjg1OTk1YzIyYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eSGbU+iqrxxoTsQED465HK1XAECIcTtHSn xepZcZr45Y5cNv2feyAUhs1kEiizOpy4Qi5IL+RZcTjm2B2/fFOdNFN2h9wGzdVT xoquY3nuBfSkFX8xkwjMjusukwp7fCImjj6WWQUnlGszQSSRSM1YmUCegOWP7TOL UsrONiurSWX4HkbgXKQhUAJp9VUMkX+xIZxEyz466FYDOEU8sLmozUrosjPyY1Zu 3Kmzqc8XrmMuJwzOJzPFn5AqaAt/FrpONUoqAWToD2XmlvYoAGgDE27MQZQxn93a jU3DqElrF73qKK7p6n4v/WsBN8KRWcbGZcpAIdwhJeX8T3yiCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErpWUV3iR3OdJiq3qewLrVAhi7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTcwZmYzNzQtZmQ1Yy0z MzM4LWJiODItMmMxZDZkYTUxMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC0177YlfNLQ9lWbDl8R1BPOXToJQuVbAP9w4Gj9+sX6ZifHixUH18Z FfSQotqYagp9sg/VI10/XYFY5vmsu/pfJdhpkzZ9aSxeOd6MN9fP7H8Nov+3tVa2 EEM1VZgCqPLmFerkIE3Qvca1QA3kruPGrU8QYMeKltFDMMCwFzFN8FO1XYyIC2OC mTT6gNTbHpo/h4y2od5eeyK+Y/XCZlh1/ynb+QcVWDi6qwNqmO/Yu0QE1OYxTLd9 0g5a/vFf/fTW9S+PDImrQCuVflkRsaIdZG5b/zEVfPbA1+4/iVnU949Ei1oxteXw Gly/QACi3dX97EdHmvvj6U9W3I6qfsE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:19 2025 by rpki-client