$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa File: fcad40e4-1236-30d7-8551-ef510c4fd729.roa (raw, json) Hash identifier: wxC+iYrbfz8cJhkim4knDgPMz8FQ/UaFRhBtGFLPY2U= Subject key identifier: 3D:49:22:1B:03:EC:27:BF:C1:BC:24:15:2A:1D:FE:51:11:A7:BD:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAF1A404B2C4A4CF81120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 36618 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:1a:40:4b:2c:4a:4c:f8:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=63b46954-9af8-4ee5-b702-07aac369eb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:78:e8:a7:af:10:5b:9c:23:bf:35:a2:e5: 81:f1:ad:07:e7:1d:1e:49:d0:da:ef:10:70:a4:d5: ba:6f:33:f3:5d:18:50:b2:03:e9:e3:b6:2b:c9:45: b2:b8:9d:a2:82:69:0b:32:59:cf:00:f0:c1:6d:b6: 64:09:23:a3:9d:9b:40:fa:2e:4a:e1:21:87:1f:09: dc:57:44:27:ad:7e:79:d6:99:31:80:53:04:1e:e1: e5:fc:cc:6d:ee:da:93:a8:ac:a9:d7:1d:d0:49:a0: 45:ab:6d:60:56:58:31:a2:d4:a9:ad:b5:ae:9d:9f: 0d:b4:6d:fb:c8:7d:df:a4:d5:09:55:6c:2c:8a:fe: fc:16:87:d3:b8:f5:a8:bb:ab:12:b5:0b:ee:7a:e1: 45:0c:27:16:94:76:78:43:94:21:4d:58:df:86:8c: 65:c4:06:91:66:84:8e:6d:12:5b:9a:28:0d:3c:45: b3:a4:86:d4:4e:c2:ec:1c:f0:ea:a0:97:2a:85:8c: 2e:51:30:cf:a3:4b:c6:e4:36:7c:69:ca:51:4d:59: ee:44:d5:3f:30:ae:3e:fc:02:87:4c:4d:73:02:e4: fb:78:7a:b8:d8:fe:90:b7:19:7b:f3:c4:be:60:5c: c4:a8:1b:f2:17:5e:18:94:90:de:0e:b3:27:9b:d7: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:22:1B:03:EC:27:BF:C1:BC:24:15:2A:1D:FE:51:11:A7:BD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9a:7f:97:41:c1:b8:d9:b1:87:d1:ae:6a:0d:e5:5c:e7:2c: b7:a1:af:6e:f8:10:23:dd:dd:f1:50:bd:3d:4c:e4:d3:45:de: 8a:9f:f4:a9:61:98:03:09:1c:06:44:63:cb:00:df:0b:23:b1: c4:f2:42:e8:31:ca:a7:5e:64:cc:a9:9d:ce:e9:32:d1:80:7c: e0:8e:b4:06:b8:c8:27:40:6c:56:9e:37:fa:6c:4b:41:e1:f2: 81:ea:e4:71:d6:8c:5b:77:92:c2:0a:84:c1:a4:1e:e8:5a:f3: 1e:4e:52:85:99:8e:b1:67:66:ca:4b:b3:02:39:1e:2e:1c:fd: 7a:ee:b3:e0:9d:2d:f8:fc:a7:bb:b3:4d:9f:4c:0a:da:3f:5e: 76:a6:4c:41:9e:ad:ea:68:a8:3e:c3:dc:1d:cc:76:74:c0:6c: a6:b5:12:0d:f4:73:1d:fd:8f:52:cc:b5:5d:88:c9:5c:6a:f7: 55:da:9a:63:e6:a1:91:d6:ce:10:c0:70:58:75:48:84:50:f4: 89:b3:df:19:ca:d4:12:0c:81:54:0f:49:c8:ff:e1:6b:f5:5a: 2c:ef:ba:8e:83:e6:15:6a:1d:b6:7e:b8:9f:df:ab:1e:67:6b: 76:cd:6a:2f:1e:6f:a0:af:86:f4:6e:13:d4:c8:36:8d:c5:c3: bf:bb:c6:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK8aQEssSkz4ESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjNiNDY5NTQtOWFmOC00ZWU1LWI3MDItMDdhYWMzNjllYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaV46KevEFucI781ouWB8a0H5x0eSdDa7xBw pNW6bzPzXRhQsgPp47YryUWyuJ2igmkLMlnPAPDBbbZkCSOjnZtA+i5K4SGHHwnc V0QnrX551pkxgFMEHuHl/Mxt7tqTqKyp1x3QSaBFq21gVlgxotSprbWunZ8NtG37 yH3fpNUJVWwsiv78FofTuPWou6sStQvueuFFDCcWlHZ4Q5QhTVjfhoxlxAaRZoSO bRJbmigNPEWzpIbUTsLsHPDqoJcqhYwuUTDPo0vG5DZ8acpRTVnuRNU/MK4+/AKH TE1zAuT7eHq42P6Qtxl788S+YFzEqBvyF14YlJDeDrMnm9diiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD1JIhsD7Ce/wbwkFSod/lERp71OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNhZDQwZTQtMTIzNi0z MGQ3LTg1NTEtZWY1MTBjNGZkNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBymn+XQcG42bGH0a5qDeVc5yy3oa9u+BAj3d3xUL09TOTTRd6Kn/Sp YZgDCRwGRGPLAN8LI7HE8kLoMcqnXmTMqZ3O6TLRgHzgjrQGuMgnQGxWnjf6bEtB 4fKB6uRx1oxbd5LCCoTBpB7oWvMeTlKFmY6xZ2bKS7MCOR4uHP167rPgnS34/Ke7 s02fTAraP152pkxBnq3qaKg+w9wdzHZ0wGymtRIN9HMd/Y9SzLVdiMlcavdV2ppj 5qGR1s4QwHBYdUiEUPSJs98ZytQSDIFUD0nI/+Fr9Vos77qOg+YVah22frif36se Z2t2zWovHm+gr4b0bhPUyDaNxcO/u8be -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:30 2025 by rpki-client