$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa File: 0b838612-a7c4-34ed-8d9a-26249548b1f1.roa (raw, json) Hash identifier: uY/wl3mkQBRgMDK/qNl/fmoapvGLZg5lHEq0Zmr40yc= Subject key identifier: 1A:28:FF:B1:5B:37:B7:84:1D:DC:0E:9B:AE:7B:75:DB:8F:B0:9F:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC779B40036BB9175BA5B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396543 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:b4:00:36:bb:91:75:ba:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5820ce1d-faf9-4ff5-b595-c36b9ae836a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:cb:f6:7d:0e:03:3a:f7:66:16:98:8f:1a: 76:4c:e0:e5:5a:6f:3c:7e:54:97:18:46:a3:d2:09: 94:f4:8a:12:fe:13:66:21:28:1b:ea:29:a1:d1:88: b7:5f:2e:47:45:99:79:1b:4f:2d:03:0f:7c:6d:87: a4:d9:f2:1f:2c:bc:f3:cd:ca:6a:4c:9d:88:61:78: a4:3d:b6:05:69:6e:f9:d5:58:16:b1:68:c5:db:ca: d3:66:7d:ae:2b:21:b4:5b:6f:05:04:1a:93:5a:55: 0a:df:74:da:a5:3d:78:f1:a5:96:a9:b0:fe:18:be: 2a:29:d0:89:08:d9:f1:7e:f1:a9:7b:78:6b:b7:38: e5:72:9c:4c:45:23:c0:b2:a4:8e:95:9f:39:cd:6f: 72:80:44:b1:f8:c3:6b:14:73:7e:95:d0:b4:f1:63: 02:f2:f0:1d:3a:62:de:27:4d:db:07:4e:8c:1c:a0: 15:21:c7:55:0f:33:50:17:40:6c:fe:28:9d:08:27: d0:52:ca:b8:8b:37:39:cb:0b:0a:9a:d9:62:32:5f: 13:bc:5d:c0:74:17:08:cd:71:a2:69:95:18:f6:8d: 6c:ba:09:87:bf:c5:54:78:a0:52:e1:ed:aa:21:4f: c2:39:cd:01:b4:83:7b:1d:c8:bf:10:ad:ce:7e:58: d4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:FF:B1:5B:37:B7:84:1D:DC:0E:9B:AE:7B:75:DB:8F:B0:9F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:94:00:92:f7:f3:91:eb:15:e1:62:05:a2:61:39:28:9f:1b: 60:08:98:29:e7:da:04:8f:75:e3:df:6c:6b:63:e0:53:5b:5c: 92:86:09:a8:26:38:84:e7:8d:29:f8:b6:e4:3a:0d:ee:e6:0e: d5:ff:e3:5e:d4:ce:95:17:13:d1:ba:92:25:1b:0c:66:93:b0: 06:6f:cc:d5:b8:6e:56:55:3a:47:0d:8c:06:4f:f7:7e:c6:71: 10:ed:83:9c:e0:ad:91:bf:44:b6:71:ec:83:a7:85:78:06:86: 1e:cb:ed:cc:f8:75:d5:16:3c:29:2a:37:bc:2f:0b:3c:40:6a: 9c:71:a8:e2:a7:b1:dc:ca:ff:00:38:9d:f0:08:e8:12:08:e8: 70:d3:26:4e:e5:95:95:b1:a1:90:80:32:6d:63:9b:f8:a2:72: ca:75:0c:1c:ef:1f:47:bd:77:16:07:cc:1d:2f:46:ae:dd:4e: c1:7c:50:02:f8:4c:ea:82:7f:16:a9:92:74:4b:56:4b:55:26: a5:96:55:54:d4:aa:29:07:29:0d:52:c8:3e:1e:18:42:a6:5f: 99:85:58:16:45:ad:0d:15:07:77:79:b9:b4:e2:10:7c:7a:5f: 81:3c:0c:51:db:73:f9:45:27:54:83:e2:e9:0e:df:7b:89:b7: 9d:ac:2e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3m0ADa7kXW6W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTgyMGNlMWQtZmFmOS00ZmY1LWI1OTUtYzM2YjlhZTgzNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FrL9n0OAzr3ZhaYjxp2TODlWm88flSXGEaj 0gmU9IoS/hNmISgb6imh0Yi3Xy5HRZl5G08tAw98bYek2fIfLLzzzcpqTJ2IYXik PbYFaW751VgWsWjF28rTZn2uKyG0W28FBBqTWlUK33TapT148aWWqbD+GL4qKdCJ CNnxfvGpe3hrtzjlcpxMRSPAsqSOlZ85zW9ygESx+MNrFHN+ldC08WMC8vAdOmLe J03bB06MHKAVIcdVDzNQF0Bs/iidCCfQUsq4izc5ywsKmtliMl8TvF3AdBcIzXGi aZUY9o1sugmHv8VUeKBS4e2qIU/COc0BtIN7Hci/EK3OfljUqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoo/7FbN7eEHdwOm657dduPsJ8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI4Mzg2MTItYTdjNC0z NGVkLThkOWEtMjYyNDk1NDhiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqUAJL385HrFeFiBaJhOSifG2AImCnn2gSPdePfbGtj4FNbXJKGCagm OITnjSn4tuQ6De7mDtX/417UzpUXE9G6kiUbDGaTsAZvzNW4blZVOkcNjAZP937G cRDtg5zgrZG/RLZx7IOnhXgGhh7L7cz4ddUWPCkqN7wvCzxAapxxqOKnsdzK/wA4 nfAI6BII6HDTJk7llZWxoZCAMm1jm/iicsp1DBzvH0e9dxYHzB0vRq7dTsF8UAL4 TOqCfxapknRLVktVJqWWVVTUqikHKQ1SyD4eGEKmX5mFWBZFrQ0VB3d5ubTiEHx6 X4E8DFHbc/lFJ1SD4ukO33uJt52sLpM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:10 2025 by rpki-client