$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9564f59-f17c-3840-9cfb-136772ce852f.roa File: e9564f59-f17c-3840-9cfb-136772ce852f.roa (raw, json) Hash identifier: FbkUKG1l8Z92JXOGbxpRoYhnxxLuVWUK/KaOJyY7DXk= Subject key identifier: 83:81:6A:7F:78:9D:98:50:86:C4:CF:BA:58:7B:71:86:A4:EA:4F:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB4B28455727B12865380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9564f59-f17c-3840-9cfb-136772ce852f.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396542 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:b2:84:55:72:7b:12:86:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=d0342b8a-82cb-47c6-83ea-f860d7639737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:bc:cd:cf:a4:05:76:68:d8:69:81:d9:76: 67:87:de:8f:fb:74:5a:03:eb:cd:23:cb:6d:4a:5c: c2:2a:ed:50:80:3b:3e:a4:e0:4f:77:45:16:36:e5: 70:bb:7e:c0:c2:e2:a8:11:67:8d:a6:67:08:96:76: ca:e8:5d:87:22:57:8c:c2:60:14:39:bd:87:3e:af: cc:e2:5b:fc:60:bc:71:6c:56:3a:72:12:ab:55:fe: 2e:7d:45:96:c6:4b:66:06:8c:09:20:4f:c5:b2:0b: f4:c2:d8:57:b0:ab:dd:39:54:57:95:13:1c:42:09: 0b:b1:4b:e4:b0:dc:bd:80:85:9e:51:44:8d:89:a9: 28:99:a5:7b:ad:56:57:9c:1f:ed:92:5d:e4:5e:38: 9d:67:26:13:6c:7d:45:f2:8c:cc:82:97:26:af:8a: b1:4a:28:5a:0a:bf:88:46:76:fb:42:86:7d:cd:eb: a8:81:f1:0b:87:eb:d8:99:b9:d7:70:23:21:69:00: b6:fb:08:82:df:41:fb:3d:cb:78:d8:e7:9f:39:b4: 5b:79:4c:1d:ac:69:92:02:cb:42:0a:48:f5:ee:9f: fb:85:25:3d:19:45:8d:1a:81:20:cb:c7:cf:91:df: 69:0b:e3:a8:2a:a8:8d:f4:07:2a:8c:34:72:dc:fa: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:6A:7F:78:9D:98:50:86:C4:CF:BA:58:7B:71:86:A4:EA:4F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9564f59-f17c-3840-9cfb-136772ce852f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6d:0e:da:f4:93:a9:d1:51:d1:cd:29:57:d0:b7:92:0f:0f: 9e:1a:18:4a:8b:bb:f3:d7:08:2b:21:f3:ea:82:2c:99:d9:83: 22:e6:1f:d2:a9:c2:eb:7c:00:cb:8f:71:d2:4b:b6:3a:02:4b: e4:57:da:05:cc:04:90:e9:ee:ed:11:fc:07:80:58:9b:a4:d8: 5b:f9:41:3d:80:46:65:3e:84:a2:ac:d6:1e:75:e9:64:ae:c1: 27:36:20:28:ba:b8:e5:6d:9d:c3:db:3e:95:71:a8:38:bb:d6: 7c:25:aa:83:30:b6:5a:62:86:7c:82:2f:45:1d:fa:33:51:ae: 0a:d5:e3:54:16:f2:eb:9b:5b:f4:09:9d:9a:af:0c:1b:f9:1c: fb:f3:2a:9e:81:aa:bd:99:3b:8b:00:e3:68:cf:da:4e:a2:27: d7:a9:7e:26:a5:1d:82:dc:f6:4e:10:f1:70:79:40:f8:b1:4e: 8e:25:cb:01:2a:42:e5:44:cc:a6:86:af:72:a8:57:d1:45:a6: ee:cd:3b:26:d4:a0:c5:64:b4:7f:35:9d:e2:61:57:b7:72:2f: 24:7e:4a:e7:e1:cd:09:60:60:22:a5:8a:a2:e9:d2:e5:12:f0: ec:dc:cb:f1:5f:e6:5b:75:c7:3c:b8:7c:64:93:1e:f5:04:dd: d7:4c:2a:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLSyhFVyexKGU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDAzNDJiOGEtODJjYi00N2M2LTgzZWEtZjg2MGQ3NjM5NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+8zc+kBXZo2GmB2XZnh96P+3RaA+vNI8tt SlzCKu1QgDs+pOBPd0UWNuVwu37AwuKoEWeNpmcIlnbK6F2HIleMwmAUOb2HPq/M 4lv8YLxxbFY6chKrVf4ufUWWxktmBowJIE/Fsgv0wthXsKvdOVRXlRMcQgkLsUvk sNy9gIWeUUSNiakomaV7rVZXnB/tkl3kXjidZyYTbH1F8ozMgpcmr4qxSihaCr+I Rnb7QoZ9zeuogfELh+vYmbnXcCMhaQC2+wiC30H7Pct42OefObRbeUwdrGmSAstC Ckj17p/7hSU9GUWNGoEgy8fPkd9pC+OoKqiN9AcqjDRy3PoWdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIOBan94nZhQhsTPulh7cYak6k/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTk1NjRmNTktZjE3Yy0z ODQwLTljZmItMTM2NzcyY2U4NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDbQ7a9JOp0VHRzSlX0LeSDw+eGhhKi7vz1wgrIfPqgiyZ2YMi5h/S qcLrfADLj3HSS7Y6AkvkV9oFzASQ6e7tEfwHgFibpNhb+UE9gEZlPoSirNYedelk rsEnNiAourjlbZ3D2z6Vcag4u9Z8JaqDMLZaYoZ8gi9FHfozUa4K1eNUFvLrm1v0 CZ2arwwb+Rz78yqegaq9mTuLAONoz9pOoifXqX4mpR2C3PZOEPFweUD4sU6OJcsB KkLlRMymhq9yqFfRRabuzTsm1KDFZLR/NZ3iYVe3ci8kfkrn4c0JYGAipYqi6dLl EvDs3MvxX+Zbdcc8uHxkkx71BN3XTCr8 -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:39 2025 by rpki-client