$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0357e084-04f0-36db-a935-ea1bd2c02ecd.roa File: 0357e084-04f0-36db-a935-ea1bd2c02ecd.roa (raw, json) Hash identifier: 3SFlZ8IVtMZgC/2lUuIrLDp9KMj7bEHE1KAKn4gPmiM= Subject key identifier: 89:22:E0:BC:CA:08:30:E8:75:B5:3E:40:0A:64:AD:4B:F2:D6:C3:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77D667C6F83B99E6E46C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0357e084-04f0-36db-a935-ea1bd2c02ecd.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397204 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:66:7c:6f:83:b9:9e:6e:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ab85d0c8-5b04-4f94-b64d-5bb6f8d31184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:db:03:d3:65:74:1c:f4:4f:eb:df:be:66: 5a:9b:d8:53:0c:bc:04:c7:03:72:9e:78:1a:14:53: 49:d5:d6:3a:cb:eb:87:4e:fd:77:ea:d1:0a:45:a7: c9:80:e9:cb:0e:18:f7:62:07:17:ee:09:7b:52:72: 66:ff:fa:e8:ca:bd:7b:99:e2:09:e1:bb:20:7c:b0: 4a:34:76:2c:a7:a4:3c:59:23:06:3b:84:00:70:54: f7:aa:4c:7a:9c:be:54:d2:0f:0b:d8:b3:e2:61:60: 9e:ae:73:4d:ce:5b:dc:7c:26:52:5d:d9:2c:1c:b8: e7:e1:eb:38:15:8e:ff:1e:4d:1c:3d:12:0d:51:e8: 18:7f:7b:d1:fc:7b:da:ee:ff:65:10:e0:84:4e:5a: d5:47:0f:3a:1d:99:9e:69:45:d2:5a:30:42:53:d8: 81:a9:b7:4f:4d:e8:d5:c9:ab:07:26:38:c5:41:02: 93:b0:00:37:0b:e9:2b:bc:30:8d:1c:1f:33:16:62: 31:5b:f9:8a:8f:ec:90:1b:c7:a9:24:08:fc:4e:18: a0:c5:b9:e9:46:25:80:a4:35:d7:e4:6e:5a:7a:c2: 74:0b:84:01:d1:7a:c6:99:54:df:c5:22:42:b2:69: 59:68:4d:46:a7:be:14:7a:fc:09:e3:65:bf:80:59: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:22:E0:BC:CA:08:30:E8:75:B5:3E:40:0A:64:AD:4B:F2:D6:C3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0357e084-04f0-36db-a935-ea1bd2c02ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6c:49:75:aa:2f:75:56:bd:87:55:43:ee:ad:c6:14:4c:14: d2:b5:55:92:03:61:cf:20:48:07:2b:bd:f2:1c:8e:c4:97:89: da:18:6c:45:d7:37:b2:63:d2:10:8b:41:d9:17:6b:94:0b:f0: 65:29:6b:77:aa:e8:80:80:a4:8c:43:6f:30:58:8c:62:7d:b4: e9:4d:a7:46:58:8c:fd:9f:38:57:27:90:9a:db:0f:dc:19:1c: a6:a5:b7:9c:23:5e:9f:26:85:9c:ee:ba:fc:d2:13:8c:5c:8f: de:d8:f4:75:94:e6:41:36:bc:57:26:07:b9:2f:fa:48:26:9e: d3:10:2f:01:25:a4:57:8c:f0:20:35:9d:f7:be:80:1b:35:83: 85:bf:50:eb:ae:55:93:87:07:ae:3a:52:cc:b2:83:e7:e2:d4: 30:a4:ec:fc:58:85:3a:06:88:23:45:62:8b:bc:6e:59:c5:3c: 50:50:28:91:d8:e6:65:54:a2:46:b9:cf:4a:ad:14:8a:30:3d: 3f:39:a5:87:5d:00:ab:53:33:51:d1:40:56:c5:c9:bf:d2:a9: 1a:10:73:3e:25:d3:c3:71:0a:42:9f:1e:b6:0a:0e:77:fe:fb: c1:f1:96:0f:c5:55:9e:75:5c:e4:31:bf:fb:e7:83:de:36:9b: 84:df:cd:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx31mfG+DuZ5uRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWI4NWQwYzgtNWIwNC00Zjk0LWI2NGQtNWJiNmY4ZDMxMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHXbA9NldBz0T+vfvmZam9hTDLwExwNynnga FFNJ1dY6y+uHTv136tEKRafJgOnLDhj3YgcX7gl7UnJm//royr17meIJ4bsgfLBK NHYsp6Q8WSMGO4QAcFT3qkx6nL5U0g8L2LPiYWCernNNzlvcfCZSXdksHLjn4es4 FY7/Hk0cPRINUegYf3vR/Hva7v9lEOCETlrVRw86HZmeaUXSWjBCU9iBqbdPTejV yasHJjjFQQKTsAA3C+krvDCNHB8zFmIxW/mKj+yQG8epJAj8ThigxbnpRiWApDXX 5G5aesJ0C4QB0XrGmVTfxSJCsmlZaE1Gp74UevwJ42W/gFnVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIki4LzKCDDodbU+QApkrUvy1sPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDM1N2UwODQtMDRmMC0z NmRiLWE5MzUtZWExYmQyYzAyZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlsSXWqL3VWvYdVQ+6txhRMFNK1VZIDYc8gSAcrvfIcjsSXidoYbEXX N7Jj0hCLQdkXa5QL8GUpa3eq6ICApIxDbzBYjGJ9tOlNp0ZYjP2fOFcnkJrbD9wZ HKalt5wjXp8mhZzuuvzSE4xcj97Y9HWU5kE2vFcmB7kv+kgmntMQLwElpFeM8CA1 nfe+gBs1g4W/UOuuVZOHB646Usyyg+fi1DCk7PxYhToGiCNFYou8blnFPFBQKJHY 5mVUoka5z0qtFIowPT85pYddAKtTM1HRQFbFyb/SqRoQcz4l08NxCkKfHrYKDnf+ +8Hxlg/FVZ51XOQxv/vng942m4TfzWQ= -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:10 2025 by rpki-client