$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa File: 3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa (raw, json) Hash identifier: kt7hFMr5W+EcnPY48tikgBHfKd/fHQbGzj9pYPmTOb4= Subject key identifier: F6:B8:2C:17:20:00:65:21:DC:B6:22:8D:F5:7E:E8:FF:52:BA:69:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77B9B591B9202DBE4FE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396572 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:9b:59:1b:92:02:db:e4:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=9f1618f1-a6a2-4f55-8d93-98072c540953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:17:8f:e7:22:8a:34:68:75:08:27:a7:7a: e4:28:2a:47:85:8b:d6:5b:79:52:62:32:5d:82:9b: 8e:36:50:03:98:01:3e:37:f4:ab:c1:f2:47:a2:65: af:0b:21:f3:a1:3f:2a:fb:04:58:31:25:2b:db:ea: 69:c2:ca:7d:96:8f:1d:38:68:47:0f:25:54:61:00: fa:f5:01:d9:34:87:17:e9:09:82:71:63:67:f3:70: 93:84:4e:a0:f1:b8:cb:96:61:56:ca:1b:ab:21:2a: ab:69:56:45:b0:74:de:60:f0:bb:c8:f9:30:34:35: 61:59:bf:94:d5:58:09:af:b5:a7:1c:be:79:64:18: c5:95:91:5b:35:a0:7d:59:e2:60:58:8e:97:1d:1b: 57:97:b9:8d:2f:2d:d9:7c:d6:db:21:b3:08:c4:ed: 6c:c5:0c:bb:6a:a7:68:ee:b6:23:a7:a0:6f:0c:d3: 63:0f:ca:32:cc:d1:c1:85:d7:38:7a:18:bd:6a:92: 8b:1d:b7:f6:50:43:2c:34:6f:9c:91:1d:e3:76:2c: 3a:68:1c:23:4e:1f:66:51:1a:41:e8:b6:65:d8:75: 4a:34:72:30:4d:d7:0b:b8:cf:f3:b0:7a:dc:97:43: d9:27:19:e9:86:19:11:d9:93:4d:f0:c9:3f:e9:ee: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:2C:17:20:00:65:21:DC:B6:22:8D:F5:7E:E8:FF:52:BA:69:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b1:46:7b:4b:20:18:d6:8a:d5:64:92:40:4d:c9:d2:40:9c: 8c:f3:5d:fe:ba:71:33:f4:8a:83:39:2a:fe:59:19:2d:7f:71: fc:d0:96:05:c9:fc:04:9d:c8:5f:c4:7f:47:d0:b5:0e:70:e1: 84:5b:c2:99:20:08:7a:73:d1:bf:98:da:66:ca:a0:8d:ef:33: 04:fe:49:55:0a:fd:33:76:eb:8c:23:3b:de:ce:17:97:94:e4: af:5a:82:42:db:fe:ad:23:b9:b3:ab:9e:4c:69:fe:0f:c5:f0: f8:83:bb:88:e9:42:a8:98:76:17:2b:33:b4:7d:d0:e3:1e:c8: 9b:37:b0:33:ad:45:ef:bc:cb:de:ce:2f:10:ce:27:99:e1:e8: 2f:a5:ce:cd:42:28:27:e2:85:4c:c4:7f:e8:bb:0b:82:80:32: 98:a6:63:33:e8:d6:e9:1c:ab:10:6e:00:cb:85:cb:7f:df:57: 11:4a:c4:96:5c:01:e7:de:0b:8b:14:8d:27:37:d7:ee:bb:e2: 06:75:85:7f:0c:18:cf:38:a5:65:1e:d0:16:ed:fe:df:3f:f5: 67:5f:d2:89:33:86:72:8c:71:a6:3d:3f:92:2f:ef:39:74:92: c7:f9:69:24:97:e2:6b:25:cc:d6:49:8d:db:d1:05:e9:19:9d: 50:fa:73:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3ubWRuSAtvk/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OWYxNjE4ZjEtYTZhMi00ZjU1LThkOTMtOTgwNzJjNTQwOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3cXj+ciijRodQgnp3rkKCpHhYvWW3lSYjJd gpuONlADmAE+N/SrwfJHomWvCyHzoT8q+wRYMSUr2+ppwsp9lo8dOGhHDyVUYQD6 9QHZNIcX6QmCcWNn83CThE6g8bjLlmFWyhurISqraVZFsHTeYPC7yPkwNDVhWb+U 1VgJr7WnHL55ZBjFlZFbNaB9WeJgWI6XHRtXl7mNLy3ZfNbbIbMIxO1sxQy7aqdo 7rYjp6BvDNNjD8oyzNHBhdc4ehi9apKLHbf2UEMsNG+ckR3jdiw6aBwjTh9mURpB 6LZl2HVKNHIwTdcLuM/zsHrcl0PZJxnphhkR2ZNN8Mk/6e6pmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa4LBcgAGUh3LYijfV+6P9Summ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2QwMTRkZjUtOGI1Zi0z NGMzLWE0YjYtNGZiZTViMjg3MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmxRntLIBjWitVkkkBNydJAnIzzXf66cTP0ioM5Kv5ZGS1/cfzQlgXJ /ASdyF/Ef0fQtQ5w4YRbwpkgCHpz0b+Y2mbKoI3vMwT+SVUK/TN264wjO97OF5eU 5K9agkLb/q0jubOrnkxp/g/F8PiDu4jpQqiYdhcrM7R90OMeyJs3sDOtRe+8y97O LxDOJ5nh6C+lzs1CKCfihUzEf+i7C4KAMpimYzPo1ukcqxBuAMuFy3/fVxFKxJZc AefeC4sUjSc31+674gZ1hX8MGM84pWUe0Bbt/t8/9Wdf0okzhnKMcaY9P5Iv7zl0 ksf5aSSX4mslzNZJjdvRBekZnVD6czU= -----END CERTIFICATE-----Generated at Wed Oct 29 20:05:58 2025 by rpki-client