$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa File: 828d3702-9200-3171-a758-4dc6a2b37597.roa (raw, json) Hash identifier: Mpco6YVbgR5icXJKCWc3nJCnYc9s5g5yGgfbePi/RSA= Subject key identifier: 6E:9B:2C:E3:72:07:46:E3:FA:05:58:3A:DC:E6:12:EE:34:8C:67:32 Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Certificate serial: 010D0C9F4328584B434C56E935700571568FEF80 Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 395810 IP address blocks: 216.47.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:56:e9:35:70:05:71:56:8f:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=03cd15e3-5e32-4642-b27e-09f66019464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e2:b0:db:9d:c9:d7:a6:97:e3:41:6d:f3:1e: 34:02:73:86:07:b3:65:b2:32:ae:0b:a0:e8:0a:f4: 94:8a:46:d3:d8:ea:5a:aa:31:a7:42:e2:a3:2d:84: 25:92:06:07:62:39:0d:4a:68:10:cd:ac:8f:54:b0: 98:33:67:e2:e8:81:59:4c:71:9b:2f:6b:77:d3:ad: 54:15:0c:1b:a0:aa:46:5c:2a:1d:77:7f:a8:b4:d0: 94:6e:5b:b8:1d:10:6d:a7:cb:77:34:b6:b3:a7:ba: 81:1f:46:a4:a5:6f:04:c8:10:79:9c:b7:73:21:d4: 91:10:10:dc:c1:0c:15:d3:e2:81:7f:cf:0e:57:3a: 92:a7:24:b1:41:c4:14:c8:19:ab:7f:7f:bc:e2:8a: b6:e7:40:df:74:e3:1c:d4:62:18:d6:01:be:7f:66: 6e:d0:11:cb:bf:5b:4f:4f:8d:d0:0d:04:5e:d5:fe: 86:6d:6a:b4:86:3c:06:73:8d:a3:8f:01:16:cc:0a: 42:da:74:08:eb:7c:21:48:22:06:c0:56:6d:30:0c: dc:57:76:38:ac:fb:4e:ac:b0:ef:9f:51:13:36:6f: 00:76:5e:d2:2d:c2:5a:54:eb:29:56:2b:85:6c:48: 69:a0:05:5f:53:43:74:ac:a1:ee:0a:01:30:fe:3c: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:2C:E3:72:07:46:E3:FA:05:58:3A:DC:E6:12:EE:34:8C:67:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl X509v3 Authority Key Identifier: keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer sbgp-ipAddrBlock: critical IPv4: 216.47.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7c:38:0f:02:07:98:10:d4:64:f0:ad:2b:08:d9:1f:78:93: ba:96:67:8b:e7:a0:56:dc:f1:d4:6c:b5:01:c5:1f:dd:48:b3: 24:14:91:2a:e2:41:87:cc:12:cd:c1:ee:f2:7b:62:e1:93:ce: 8c:25:d0:f9:56:1a:72:fc:df:37:b5:2e:2a:d7:7e:7c:dc:43: ba:b8:fc:55:a3:9e:67:bf:2c:d7:e4:70:a6:3c:c4:b9:33:35: d1:d6:50:00:f3:33:6c:78:e3:6f:79:fb:b8:b5:3a:ed:2f:91: ff:a0:16:32:ce:b6:e1:5c:c5:20:9e:42:83:d8:90:af:03:08: 3d:ad:70:44:74:30:77:48:e5:79:6b:30:e8:f4:5c:a2:db:d9: 8c:04:90:be:12:79:28:49:b1:b0:7f:fa:70:ed:f1:84:1e:ad: 3b:12:27:9e:51:7e:e3:45:ba:5e:9f:42:a6:08:dd:c7:3d:36: 39:95:e0:51:51:7a:08:43:cf:07:8e:37:65:2f:53:dc:92:c3: 55:ea:51:e1:3f:51:f0:56:db:59:73:fc:c3:67:b2:db:19:68: c7:37:a2:d3:af:61:20:d3:db:18:c2:69:29:50:7d:e9:56:9f: bb:ac:39:ba:b5:35:c3:43:aa:c5:f9:60:b5:2e:b0:50:01:88: 01:e2:3c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFbpNXAFcVaP74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3 NzNhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MDNjZDE1ZTMtNWUzMi00NjQyLWIyN2UtMDlmNjYwMTk0NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheKw253J16aX40Ft8x40AnOGB7NlsjKuC6Do CvSUikbT2OpaqjGnQuKjLYQlkgYHYjkNSmgQzayPVLCYM2fi6IFZTHGbL2t3061U FQwboKpGXCodd3+otNCUblu4HRBtp8t3NLazp7qBH0akpW8EyBB5nLdzIdSREBDc wQwV0+KBf88OVzqSpySxQcQUyBmrf3+84oq250DfdOMc1GIY1gG+f2Zu0BHLv1tP T43QDQRe1f6GbWq0hjwGc42jjwEWzApC2nQI63whSCIGwFZtMAzcV3Y4rPtOrLDv n1ETNm8Adl7SLcJaVOspViuFbEhpoAVfU0N0rKHuCgEw/jz04QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6bLONyB0bj+gVYOtzmEu40jGcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvODI4ZDM3MDItOTIwMC0z MTcxLWE3NTgtNGRjNmEyYjM3NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5 NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4 ZTFmOTc3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2C8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ8OA8CB5gQ1GTwrSsI2R94k7qWZ4vnoFbc8dRstQHFH91IsyQUkSri QYfMEs3B7vJ7YuGTzowl0PlWGnL83ze1LirXfnzcQ7q4/FWjnme/LNfkcKY8xLkz NdHWUADzM2x44295+7i1Ou0vkf+gFjLOtuFcxSCeQoPYkK8DCD2tcER0MHdI5Xlr MOj0XKLb2YwEkL4SeShJsbB/+nDt8YQerTsSJ55RfuNFul6fQqYI3cc9NjmV4FFR eghDzweON2UvU9ySw1XqUeE/UfBW21lz/MNnstsZaMc3otOvYSDT2xjCaSlQfelW n7usObq1NcNDqsX5YLUusFABiAHiPD0= -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:56 2025 by rpki-client