$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa File: 40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa (raw, json) Hash identifier: mSgV7gi9m3+VSsAhWtHarR3DzB1r1vCdgOo/stde1TM= Subject key identifier: 18:B8:B7:55:74:6A:1E:31:7D:89:ED:E5:60:82:90:DF:A0:FC:B6:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC7785D59C644C8324A2BE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 36621 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:78:5d:59:c6:44:c8:32:4a:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f0cc95d7-062b-42ad-bb93-c69b84ca5e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:31:bc:ea:85:2e:91:0a:02:93:70:13:6c: cd:b7:90:f2:60:d6:d2:a7:09:81:61:c3:51:5e:39: 1d:39:2e:70:87:bf:ab:77:c6:b3:e9:e0:8c:be:d1: 01:2d:77:66:f4:5a:3b:a7:25:52:39:c0:7f:48:26: cc:09:e5:bf:ad:6b:32:55:52:32:93:4e:2b:4b:0d: 53:3f:79:44:04:79:8b:4f:3a:bb:a6:96:e2:09:2c: 84:8e:ab:a2:71:1c:2a:eb:91:83:91:7b:d9:03:1d: c8:22:c2:2e:d9:02:b7:87:03:15:2e:a4:c3:33:70: d2:b9:e4:e1:67:06:d0:6c:47:9d:4e:1f:8e:b4:2b: fa:b2:a3:1b:b3:4f:08:39:48:ee:b2:5a:16:a0:43: dd:66:a2:12:b4:7e:fd:f7:32:3d:33:e1:44:ec:59: 44:6a:ed:38:d6:6f:4d:dc:79:e0:22:da:a6:83:67: 60:19:45:3b:71:ce:5b:a3:99:8b:cc:b7:b8:f7:22: a3:eb:92:a2:04:44:2b:7e:3d:26:3d:c3:8d:1e:0c: be:77:cc:1a:b2:64:0f:92:39:6a:f4:94:95:b4:60: 4a:41:b8:2a:eb:f1:68:4f:c3:b4:af:33:48:f3:6f: 48:b9:c4:34:32:6c:b0:70:56:93:3a:50:74:45:ec: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:B7:55:74:6A:1E:31:7D:89:ED:E5:60:82:90:DF:A0:FC:B6:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1e:05:59:94:d9:61:a0:0b:f3:f5:e6:bd:65:80:fe:81:15: 1b:40:6f:72:2c:81:71:19:da:f3:a1:37:c1:e3:9d:07:b5:cc: e8:4a:74:ba:fe:16:f2:b2:ca:d1:77:ef:cb:fd:8d:23:49:91: 07:00:de:94:a1:be:8e:7b:d3:31:7c:84:45:7e:e9:70:f4:50: 09:af:6c:41:da:50:f0:e0:db:50:01:1a:4d:8a:77:9f:95:8b: d4:10:ce:31:fc:af:73:42:95:94:df:9a:84:7c:7e:0c:4a:89: c8:5a:c3:1f:1a:96:dc:1b:f4:c8:d3:39:5b:a6:ec:13:6a:98: 74:4b:db:4b:d1:b3:cc:52:e1:f5:51:6b:79:89:a7:23:75:b6: 85:17:38:f1:ab:30:a1:33:d9:0d:4f:09:88:8d:42:ca:43:2f: 21:be:94:1b:d3:95:af:b7:db:c4:40:05:18:7b:16:05:fb:40: 3b:d7:9c:7e:c8:b6:38:c3:46:68:67:3e:ff:ac:00:11:6c:e8: 9d:51:67:14:10:5f:ab:64:3f:83:20:16:63:d5:14:2a:25:64: dc:95:c0:3e:af:0a:a0:76:0d:8f:62:b7:64:70:fa:dd:9c:ec: 3f:40:e5:34:cb:0e:3d:fa:76:53:66:72:c4:56:91:67:f8:ea: 62:3f:45:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3hdWcZEyDJKK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjBjYzk1ZDctMDYyYi00MmFkLWJiOTMtYzY5Yjg0Y2E1ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyUxvOqFLpEKApNwE2zNt5DyYNbSpwmBYcNR XjkdOS5wh7+rd8az6eCMvtEBLXdm9Fo7pyVSOcB/SCbMCeW/rWsyVVIyk04rSw1T P3lEBHmLTzq7ppbiCSyEjquicRwq65GDkXvZAx3IIsIu2QK3hwMVLqTDM3DSueTh ZwbQbEedTh+OtCv6sqMbs08IOUjusloWoEPdZqIStH799zI9M+FE7FlEau041m9N 3HngItqmg2dgGUU7cc5bo5mLzLe49yKj65KiBEQrfj0mPcONHgy+d8wasmQPkjlq 9JSVtGBKQbgq6/FoT8O0rzNI829IucQ0MmywcFaTOlB0Rey7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi4t1V0ah4xfYnt5WCCkN+g/LZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA4NjdiOGItYzMyNC0z YmRlLWI3ZjUtZDZmMjRjM2Y5ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAweBVmU2WGgC/P15r1lgP6BFRtAb3IsgXEZ2vOhN8HjnQe1zOhKdLr+ FvKyytF378v9jSNJkQcA3pShvo570zF8hEV+6XD0UAmvbEHaUPDg21ABGk2Kd5+V i9QQzjH8r3NClZTfmoR8fgxKichawx8altwb9MjTOVum7BNqmHRL20vRs8xS4fVR a3mJpyN1toUXOPGrMKEz2Q1PCYiNQspDLyG+lBvTla+328RABRh7FgX7QDvXnH7I tjjDRmhnPv+sABFs6J1RZxQQX6tkP4MgFmPVFColZNyVwD6vCqB2DY9it2Rw+t2c 7D9A5TTLDj36dlNmcsRWkWf46mI/RX0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:23 2025 by rpki-client