$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa File: 1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa (raw, json) Hash identifier: QEJtmF4UZtgh5D34uBPszm18Xg/RenYykd0ge/pqWzY= Subject key identifier: 3B:21:9A:E3:A6:C1:F0:20:04:2D:56:BD:69:29:0A:05:82:93:D7:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAF766B256B152D01E400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396599 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:76:6b:25:6b:15:2d:01:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=9934f61f-1e16-4ea9-b1f0-53a9673effee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:0d:79:9a:f3:b9:0a:1f:a3:98:10:92:60: 73:35:66:54:f3:f0:48:93:9c:b5:36:dc:ae:88:6c: f5:63:ee:2d:2c:51:1a:65:e6:04:33:34:5a:75:50: b6:91:a5:26:79:58:34:93:d7:94:d4:76:78:38:59: b7:ec:75:09:a1:e6:01:da:30:a9:e7:48:e6:45:7c: 4b:94:32:57:ae:91:67:d9:d6:cd:48:3a:17:0b:7d: 6a:d8:44:91:9d:67:ee:11:a7:e0:ae:7d:65:e0:89: 9d:55:d4:fb:8f:67:a4:46:e7:b2:45:f1:3f:bf:f5: 46:a7:88:f0:f4:84:66:8b:c5:a7:89:72:5c:10:bd: b1:36:36:62:16:cc:b4:bd:2c:ed:1c:7b:e2:92:90: 58:39:13:cc:a0:25:2d:37:a4:17:bf:01:8c:c7:02: 8f:63:5a:5e:82:bd:65:63:b8:ff:6b:7c:a2:38:c5: a0:44:6f:60:9f:48:85:30:61:e2:dd:89:4b:d0:c4: b0:d6:ef:2c:57:49:9b:48:db:50:ff:e5:1b:4b:05: f8:f8:31:42:76:35:e7:1f:52:a7:3c:53:b3:11:b2: 03:98:93:b4:92:82:77:38:e1:20:60:7e:70:de:d5: a2:df:f6:07:c9:93:ab:30:d2:71:fe:98:e2:f6:33: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:9A:E3:A6:C1:F0:20:04:2D:56:BD:69:29:0A:05:82:93:D7:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a6:a2:54:d1:44:99:30:dc:51:43:1e:12:a2:da:9c:2a:e7: a0:be:b0:99:b0:ee:a8:44:b1:ef:24:06:a0:c7:48:60:20:36: 4c:e5:d9:a9:24:14:e2:e7:5f:01:8d:4c:bd:e4:88:95:17:b1: a9:fd:26:59:1a:92:03:11:81:c9:4f:5d:5d:80:43:5d:e7:87: 57:f1:95:f4:27:a0:57:2e:ae:c2:74:23:97:54:c2:1b:15:5c: b0:df:9b:36:54:98:12:ca:38:78:66:4d:63:9b:df:83:73:65: 52:50:d4:25:04:62:08:4f:b2:8a:32:54:c0:f3:03:56:2c:71: 99:56:d2:1d:ec:5f:53:3d:b9:05:0d:13:62:63:24:0b:63:d5: 01:85:13:bb:d6:2d:d8:57:ca:d5:c8:9c:c9:43:ae:48:bc:a8: 79:d1:0f:8f:be:ff:f6:d6:52:ea:46:cb:1d:cb:ba:e4:83:e7: 8a:eb:b3:d4:7f:ed:0f:f5:47:47:a5:80:73:87:d1:1c:c4:0c: 50:4d:19:4f:fd:18:4c:c0:d8:c8:6d:f8:af:af:e1:a7:f4:b9: 89:37:6e:2d:8b:da:aa:4e:35:ff:39:d4:17:06:6d:ec:6f:e3: 13:f9:4e:d1:fa:b9:e5:8f:27:3b:eb:64:ab:30:b9:41:0c:bb: 16:93:69:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK92ayVrFS0B5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTkzNGY2MWYtMWUxNi00ZWE5LWIxZjAtNTNhOTY3M2VmZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo14NeZrzuQofo5gQkmBzNWZU8/BIk5y1Ntyu iGz1Y+4tLFEaZeYEMzRadVC2kaUmeVg0k9eU1HZ4OFm37HUJoeYB2jCp50jmRXxL lDJXrpFn2dbNSDoXC31q2ESRnWfuEafgrn1l4ImdVdT7j2ekRueyRfE/v/VGp4jw 9IRmi8WniXJcEL2xNjZiFsy0vSztHHvikpBYORPMoCUtN6QXvwGMxwKPY1pegr1l Y7j/a3yiOMWgRG9gn0iFMGHi3YlL0MSw1u8sV0mbSNtQ/+UbSwX4+DFCdjXnH1Kn PFOzEbIDmJO0koJ3OOEgYH5w3tWi3/YHyZOrMNJx/pji9jNiywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDshmuOmwfAgBC1WvWkpCgWCk9fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ2Yzc4MGEtODkzZC0z M2E3LThjZmEtNDgzZWQ0ZjY0MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjpqJU0USZMNxRQx4SotqcKuegvrCZsO6oRLHvJAagx0hgIDZM5dmp JBTi518BjUy95IiVF7Gp/SZZGpIDEYHJT11dgENd54dX8ZX0J6BXLq7CdCOXVMIb FVyw35s2VJgSyjh4Zk1jm9+Dc2VSUNQlBGIIT7KKMlTA8wNWLHGZVtId7F9TPbkF DRNiYyQLY9UBhRO71i3YV8rVyJzJQ65IvKh50Q+Pvv/21lLqRssdy7rkg+eK67PU f+0P9UdHpYBzh9EcxAxQTRlP/RhMwNjIbfivr+Gn9LmJN24ti9qqTjX/OdQXBm3s b+MT+U7R+rnljyc762SrMLlBDLsWk2kC -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:55 2025 by rpki-client