$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eddc0e7c-9a75-3f86-a29f-fadf6ba7d3e5.roa File: eddc0e7c-9a75-3f86-a29f-fadf6ba7d3e5.roa (raw, json) Hash identifier: hh3u8POpSnET5biaqssie72QlNrRw/9a9XM2TMQfYvk= Subject key identifier: C4:8B:A0:5C:BC:20:AF:AD:3D:AC:13:F7:9C:CC:BC:48:DC:97:4A:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB2B71B0F004CB7909100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eddc0e7c-9a75-3f86-a29f-fadf6ba7d3e5.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397193 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b2:b7:1b:0f:00:4c:b7:90:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=f1de6c7a-b66c-4519-8183-611cc3194a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:52:81:15:eb:6f:84:01:a2:76:91:8b:6f: a8:80:65:a7:96:82:c7:22:f6:d2:f4:90:63:7e:17: f0:62:32:8e:22:76:96:8e:8a:65:23:d3:c1:da:5f: c5:59:66:60:cd:72:7b:39:39:46:81:5c:e7:10:59: ed:10:44:98:5a:d7:4e:9b:82:66:f9:cb:01:ef:9b: 48:73:ab:d7:c1:c8:3d:c7:9c:07:38:3f:98:6a:19: 57:ac:a8:e8:12:59:01:e7:3c:77:b8:7b:c3:2e:ad: ed:32:ac:23:3d:69:47:18:b4:88:2a:bb:14:79:f3: cb:b8:44:77:2a:5d:0e:e0:35:94:8e:07:95:1a:c3: 03:ac:00:eb:69:04:d0:fe:8a:0f:df:83:a7:72:2c: 4a:d1:ec:68:79:9d:2a:ed:87:4b:0f:0f:b6:8d:a5: cb:6c:3b:0c:e8:e0:22:2b:2c:aa:d5:b5:52:85:47: 6a:60:d6:32:df:93:4e:6a:30:20:0b:e8:2c:8c:b3: 99:dd:f5:42:2c:fa:69:e3:70:49:1b:a6:17:17:e9: 8b:70:8f:13:5a:0b:21:aa:23:23:b5:fa:96:95:ce: 08:74:1f:17:29:31:c5:e7:33:9f:57:64:b3:44:6f: a7:67:2f:2a:01:9e:4b:25:2b:9a:bb:9d:f7:dd:73: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8B:A0:5C:BC:20:AF:AD:3D:AC:13:F7:9C:CC:BC:48:DC:97:4A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eddc0e7c-9a75-3f86-a29f-fadf6ba7d3e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:20:15:07:dc:da:99:2b:d1:f2:e3:96:4e:40:b7:32:ad:ec: b5:23:12:56:ae:dc:89:60:46:63:ab:ae:c8:0c:53:de:3e:c6: 26:cf:e6:02:e9:d4:38:55:95:16:62:00:db:1b:b7:28:ce:25: a1:10:3e:b4:5f:eb:9a:66:67:d9:9d:e5:ca:1d:01:27:ac:af: d6:36:3f:28:14:e2:b4:5b:e7:61:22:79:92:70:d0:1d:0b:b8: e1:71:49:da:49:06:ba:36:14:db:df:e1:95:49:e1:7c:60:48: 02:34:0c:ac:de:4d:37:66:95:54:e3:2d:2a:60:76:f6:a0:f3: 36:21:44:d8:ca:45:eb:fc:11:5a:c9:58:89:ca:17:6f:5e:d6: fe:29:c7:36:ec:d1:18:7d:7d:be:45:af:97:58:85:18:a3:de: 3d:e5:d1:e8:2e:d5:5d:2c:34:bf:f6:34:cd:8d:3f:f1:08:15: b4:8f:89:98:a3:e0:30:46:8f:77:84:27:53:fb:8a:2f:68:34: 6f:5f:1a:a4:9f:86:6c:3b:f9:5c:bf:5f:43:06:91:b1:5e:6a: 64:82:f9:f0:c9:b5:1f:7e:ad:df:8a:15:72:38:98:45:57:46: d6:14:48:7f:d0:01:fe:d0:30:cf:61:73:57:a2:f7:53:64:42: 6a:13:61:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLK3Gw8ATLeQkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjFkZTZjN2EtYjY2Yy00NTE5LTgxODMtNjExY2MzMTk0YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim5SgRXrb4QBonaRi2+ogGWnloLHIvbS9JBj fhfwYjKOInaWjoplI9PB2l/FWWZgzXJ7OTlGgVznEFntEESYWtdOm4Jm+csB75tI c6vXwcg9x5wHOD+YahlXrKjoElkB5zx3uHvDLq3tMqwjPWlHGLSIKrsUefPLuER3 Kl0O4DWUjgeVGsMDrADraQTQ/ooP34OncixK0exoeZ0q7YdLDw+2jaXLbDsM6OAi Kyyq1bVShUdqYNYy35NOajAgC+gsjLOZ3fVCLPpp43BJG6YXF+mLcI8TWgshqiMj tfqWlc4IdB8XKTHF5zOfV2SzRG+nZy8qAZ5LJSuau5333XNVOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSLoFy8IK+tPawT95zMvEjcl0o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRkYzBlN2MtOWE3NS0z Zjg2LWEyOWYtZmFkZjZiYTdkM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBIBUH3NqZK9Hy45ZOQLcyrey1IxJWrtyJYEZjq67IDFPePsYmz+YC 6dQ4VZUWYgDbG7coziWhED60X+uaZmfZneXKHQEnrK/WNj8oFOK0W+dhInmScNAd C7jhcUnaSQa6NhTb3+GVSeF8YEgCNAys3k03ZpVU4y0qYHb2oPM2IUTYykXr/BFa yViJyhdvXtb+Kcc27NEYfX2+Ra+XWIUYo9495dHoLtVdLDS/9jTNjT/xCBW0j4mY o+AwRo93hCdT+4ovaDRvXxqkn4ZsO/lcv19DBpGxXmpkgvnwybUffq3fihVyOJhF V0bWFEh/0AH+0DDPYXNXovdTZEJqE2GZ -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:41 2025 by rpki-client