$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa File: 31ef6804-c222-38b5-9deb-838a0569e02a.roa (raw, json) Hash identifier: p/4H9a94c7BBTkdxxykDKXwGW62fdFOp2oIY/m/IwIY= Subject key identifier: 23:C0:EF:EF:39:99:72:46:F5:66:F3:45:E0:16:44:6A:7A:C2:CD:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77912FD77194FB761B480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396599 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:12:fd:77:19:4f:b7:61:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5f026222-6018-4a43-b1ff-25e1955a0cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:63:5d:6a:62:c1:57:c6:e3:7e:1e:a2:cb: 82:b4:34:9d:cf:91:56:09:57:f7:de:d7:70:b2:70: 09:04:e1:7e:cc:a0:36:8f:6a:98:48:e2:a4:ef:0c: ad:dc:18:eb:46:57:54:95:23:62:95:8a:4f:1a:04: cc:70:df:c1:18:28:48:00:4a:0c:23:36:c2:67:07: d6:13:58:85:4f:df:f7:e2:5c:39:63:40:5b:fc:e0: e5:56:c3:b8:5e:74:4e:41:cb:a2:0f:2c:1c:34:d4: 5b:0f:e7:6e:f0:0b:a7:c5:58:5c:7b:25:a1:49:5b: 41:13:42:95:63:68:38:65:23:09:e6:53:c1:55:98: c5:22:d7:c0:50:04:64:cc:7b:3b:1b:6b:d3:60:85: 0a:16:96:e8:49:bc:46:33:77:cd:bd:9b:e0:c5:52: 67:8f:76:46:89:6b:bb:df:53:3b:ac:a8:15:bd:f8: 0d:08:93:1e:8a:71:78:c8:b4:17:f4:ac:5c:dd:53: e7:24:f6:31:d5:8f:ba:bb:24:9b:77:bb:34:61:76: 4e:d5:2b:ea:41:b9:a3:f6:cb:65:6f:3c:b3:22:75: 94:e1:9d:9b:75:39:70:b5:2a:c9:35:03:5c:6e:00: da:c1:ae:b8:e7:a6:24:44:1c:fd:05:c9:90:52:52: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:EF:EF:39:99:72:46:F5:66:F3:45:E0:16:44:6A:7A:C2:CD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:38:7f:00:a9:d0:b7:83:7b:fd:4b:f3:83:1e:c9:ef:fc:e5: df:d5:1a:1e:71:73:00:a5:af:35:92:e5:0c:b8:e0:14:0a:f2: 30:bc:b0:bd:7b:08:a9:85:01:c8:1b:aa:79:3c:47:a5:bb:91: 5e:e9:47:ce:59:1d:94:46:31:7b:c9:2c:75:0d:32:5d:02:27: 49:04:0a:28:0c:a0:a9:8a:4d:01:e8:a4:a6:8c:ea:1b:b4:e2: a0:90:c4:74:2f:85:52:19:06:b0:8b:65:a3:73:64:57:91:31: 46:c7:fe:70:47:96:21:dc:6a:67:aa:73:1e:91:fd:4f:12:66: b1:4d:9d:f9:99:7c:68:29:2d:a9:7e:99:ff:ee:bb:d2:f5:0e: d0:50:ee:da:83:0f:75:8a:0c:0a:64:92:e6:8b:c0:eb:94:58: a8:00:11:21:55:28:21:0a:07:c1:47:1d:a8:5b:c2:1a:f0:36: 50:c5:2f:0f:b7:cd:b1:6e:81:40:9c:ef:18:1f:27:6d:fa:2b: 6d:f6:cd:15:4c:e1:26:68:9c:54:06:8e:9c:e9:3f:16:b8:c5: 09:4a:6c:6b:03:fd:dc:ca:4c:64:7f:5d:a5:3e:5b:b8:a7:b4: e3:b2:cc:5b:b1:7a:f0:cd:19:94:7d:50:19:a0:f6:77:65:5e: 2e:ff:eb:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3kS/XcZT7dhtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NWYwMjYyMjItNjAxOC00YTQzLWIxZmYtMjVlMTk1NWEwY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A1jXWpiwVfG434eosuCtDSdz5FWCVf33tdw snAJBOF+zKA2j2qYSOKk7wyt3BjrRldUlSNilYpPGgTMcN/BGChIAEoMIzbCZwfW E1iFT9/34lw5Y0Bb/ODlVsO4XnROQcuiDywcNNRbD+du8AunxVhceyWhSVtBE0KV Y2g4ZSMJ5lPBVZjFItfAUARkzHs7G2vTYIUKFpboSbxGM3fNvZvgxVJnj3ZGiWu7 31M7rKgVvfgNCJMeinF4yLQX9Kxc3VPnJPYx1Y+6uySbd7s0YXZO1SvqQbmj9stl bzyzInWU4Z2bdTlwtSrJNQNcbgDawa6456YkRBz9BcmQUlJLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPA7+85mXJG9WbzReAWRGp6ws0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFlZjY4MDQtYzIyMi0z OGI1LTlkZWItODM4YTA1NjllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB44fwCp0LeDe/1L84Meye/85d/VGh5xcwClrzWS5Qy44BQK8jC8sL17 CKmFAcgbqnk8R6W7kV7pR85ZHZRGMXvJLHUNMl0CJ0kECigMoKmKTQHopKaM6hu0 4qCQxHQvhVIZBrCLZaNzZFeRMUbH/nBHliHcameqcx6R/U8SZrFNnfmZfGgpLal+ mf/uu9L1DtBQ7tqDD3WKDApkkuaLwOuUWKgAESFVKCEKB8FHHahbwhrwNlDFLw+3 zbFugUCc7xgfJ236K232zRVM4SZonFQGjpzpPxa4xQlKbGsD/dzKTGR/XaU+W7in tOOyzFuxevDNGZR9UBmg9ndlXi7/618= -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:21 2025 by rpki-client