$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa File: eaa59a4e-100d-3652-9f53-d567b63eb683.roa (raw, json) Hash identifier: VgaBfUfj8sbW4y/Um4mRt3gC4e6mnAb0v59SQXekJ78= Subject key identifier: D3:00:68:DE:74:C2:83:75:01:4C:F4:89:30:3F:AD:74:70:CE:C8:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB34EDE96D79395CE7380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397208 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b3:4e:de:96:d7:93:95:ce:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=bb150084-06c5-419e-b3dc-ba036fee8bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:b8:e5:0e:67:7a:fd:9e:ff:9d:20:d9:c3: 38:cc:22:b5:3b:61:78:8e:e5:ec:15:6e:a7:a5:25: 04:00:5b:76:4d:14:d5:ec:f6:28:0e:c4:00:0f:77: f6:57:41:1f:7d:d9:14:60:3c:ee:d4:ac:20:10:a2: 68:8f:91:97:d3:4d:d0:38:47:5c:2a:04:69:29:10: ec:66:e2:c0:ba:09:51:e6:08:1d:11:aa:11:f7:19: e0:c8:d5:70:62:e9:0f:58:00:b0:0f:0b:34:66:aa: 14:6a:2d:ad:d3:b5:7a:12:4c:21:8c:c8:e6:0f:1c: 4e:a0:72:2d:28:f5:0c:21:61:62:dd:de:f0:a3:50: 36:98:b8:d1:75:ec:58:cc:4a:72:6c:18:a2:f5:1a: c8:11:23:f8:10:6c:3d:2f:c6:0a:6a:43:d0:4b:9d: 73:5a:69:93:e4:b1:d5:dd:6d:ba:ea:64:17:75:2e: ce:72:33:5d:ee:f9:76:49:58:3d:5e:4c:86:10:ae: 1e:6d:42:16:c0:5d:9e:1f:9b:6e:57:38:13:1c:69: 7c:cd:63:62:6e:eb:83:dd:56:9b:bb:72:09:0c:82: 0f:02:13:ea:97:37:95:ea:a9:52:0c:4b:52:6f:b7: 94:a1:94:ef:2c:3b:50:4d:5c:1a:0a:20:4e:65:7f: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:68:DE:74:C2:83:75:01:4C:F4:89:30:3F:AD:74:70:CE:C8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa59a4e-100d-3652-9f53-d567b63eb683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:34:12:0c:d5:b3:0d:6d:de:77:03:f0:50:2c:ce:2f:bd:9f: 91:17:da:43:c1:ee:f2:7e:b2:20:4d:75:9d:34:43:3c:92:b7: 8f:0b:28:3a:4f:cd:c4:8b:7c:81:71:3d:6b:1f:13:c4:62:c3: e7:57:5c:9c:96:4c:b9:ba:a5:b4:f6:a2:14:42:b3:f0:5e:b8: 38:86:1b:41:38:4a:7d:da:72:e3:1a:58:55:13:f1:76:50:e7: e6:83:26:85:af:0f:38:92:df:a7:2f:38:87:d8:1a:40:30:87: cf:4f:4a:71:d0:b4:04:a5:82:0a:bf:d3:2c:ac:88:8f:e9:14: 70:a7:18:f3:90:52:a9:f1:c4:87:1f:86:24:87:7c:93:07:75: c1:9c:f7:1e:58:70:96:5c:1d:c2:f7:76:84:93:4b:2f:3e:91: 6f:4c:b4:e8:91:fe:a7:75:5d:3c:b3:79:2a:76:10:38:86:da: 95:ec:6b:b4:88:84:6b:c8:f3:48:02:e1:20:8a:be:3d:68:47: 49:d5:00:ac:57:17:d4:6d:be:3a:ed:8f:8c:fd:71:0a:3b:61: 89:c4:1f:42:f9:3b:24:46:a5:f1:37:4a:9a:c7:75:a6:d6:05: 36:f3:3b:6a:37:33:79:f3:c3:76:44:81:c5:27:ad:7e:fb:d1: 16:e6:1f:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLNO3pbXk5XOc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmIxNTAwODQtMDZjNS00MTllLWIzZGMtYmEwMzZmZWU4YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOy45Q5nev2e/50g2cM4zCK1O2F4juXsFW6n pSUEAFt2TRTV7PYoDsQAD3f2V0EffdkUYDzu1KwgEKJoj5GX003QOEdcKgRpKRDs ZuLAuglR5ggdEaoR9xngyNVwYukPWACwDws0ZqoUai2t07V6EkwhjMjmDxxOoHIt KPUMIWFi3d7wo1A2mLjRdexYzEpybBii9RrIESP4EGw9L8YKakPQS51zWmmT5LHV 3W266mQXdS7OcjNd7vl2SVg9XkyGEK4ebUIWwF2eH5tuVzgTHGl8zWNibuuD3Vab u3IJDIIPAhPqlzeV6qlSDEtSb7eUoZTvLDtQTVwaCiBOZX+BXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMAaN50woN1AUz0iTA/rXRwzsiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhNTlhNGUtMTAwZC0z NjUyLTlmNTMtZDU2N2I2M2ViNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwNBIM1bMNbd53A/BQLM4vvZ+RF9pDwe7yfrIgTXWdNEM8krePCyg6 T83Ei3yBcT1rHxPEYsPnV1yclky5uqW09qIUQrPwXrg4hhtBOEp92nLjGlhVE/F2 UOfmgyaFrw84kt+nLziH2BpAMIfPT0px0LQEpYIKv9MsrIiP6RRwpxjzkFKp8cSH H4Ykh3yTB3XBnPceWHCWXB3C93aEk0svPpFvTLTokf6ndV08s3kqdhA4htqV7Gu0 iIRryPNIAuEgir49aEdJ1QCsVxfUbb467Y+M/XEKO2GJxB9C+TskRqXxN0qax3Wm 1gU28ztqNzN588N2RIHFJ61++9EW5h+8 -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:32 2025 by rpki-client