$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: Ow6IGuTBiAVA3m6s2fHPqEQz2hKEwHgwV56Zwo/RmWE= Subject key identifier: 34:60:B3:1D:34:DC:D6:E4:4B:3E:A5:3B:96:79:76:6A:EE:52:7F:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB360BE84684882F3BF58 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b3:60:be:84:68:48:82:f3:bf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=fd43416d-6fab-478c-808f-38c043142fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:67:1f:3c:42:6a:8c:9d:6b:ba:48:dd:b1: 8a:f7:0c:fb:4c:75:81:bf:c4:7e:6f:29:5a:cb:6e: 77:c4:2f:ab:ea:8e:50:df:1d:46:95:c1:0f:ee:cc: 81:1d:88:31:ab:29:93:5c:4d:56:ef:27:f3:ce:69: 0a:bd:d3:67:b4:1f:a2:88:2c:0c:d3:58:25:36:2c: ca:0b:16:92:ef:92:d7:d2:81:d9:45:94:fa:23:cb: 97:dd:c5:e9:f9:77:c8:65:0e:73:a2:ad:ac:e9:90: 82:19:3c:7b:d7:ad:50:55:43:ee:23:83:d9:ab:be: 6c:00:bb:65:01:d4:2c:43:03:bc:4f:39:7a:4a:af: fe:9c:4f:75:10:c3:0d:f3:f7:34:89:22:33:a1:df: 11:3a:c1:43:3b:2b:ff:53:83:f7:ce:be:b4:87:58: ed:c9:2d:6e:85:ce:13:c9:02:26:f4:6c:8d:d3:20: 57:0e:18:54:b0:c0:48:5b:ed:dd:60:bb:20:ab:30: 63:bc:8f:80:d8:63:60:0b:2f:e7:00:21:e5:55:fc: 4b:51:f1:aa:9f:49:80:f7:53:7d:ed:81:f2:c0:e8: 55:57:6e:ed:63:14:00:bc:59:ef:79:ea:c9:74:cf: ba:b7:75:3a:f3:d4:9d:58:00:9c:0b:58:8e:c5:d7: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:B3:1D:34:DC:D6:E4:4B:3E:A5:3B:96:79:76:6A:EE:52:7F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:2d:b8:60:0a:78:57:b9:b2:d0:55:26:85:f4:28:97:21: 66:83:6f:92:64:69:b9:10:d6:ad:ec:20:8e:5c:64:eb:f8:a4: ee:b7:bd:0e:24:22:bd:86:55:71:4d:94:75:20:f5:fa:69:26: cf:d0:5d:94:cc:df:0b:e5:18:b3:23:44:20:fd:b7:89:17:f9: 8c:34:fa:fb:ff:2d:cd:53:8f:9c:b5:f5:cf:34:ec:3d:05:96: 29:94:cb:25:65:49:0a:84:1b:5b:a5:0e:ed:4c:1a:61:e7:9c: d4:0d:d7:08:22:79:a7:16:63:17:39:f6:58:17:42:2f:dd:05: bf:26:d7:dd:01:bb:49:21:65:a2:03:49:ff:2a:47:02:66:63: c4:36:fc:26:c9:73:9f:58:aa:15:64:e4:46:44:a3:fd:1a:53: eb:22:86:3e:d0:3f:4d:e7:eb:e1:58:e4:00:a8:51:58:bc:c7: fd:44:e5:e6:74:2f:c7:ff:04:d0:52:99:8e:4c:90:9a:61:dc: f6:c3:ca:c7:26:6a:ac:f9:c7:44:12:42:34:c9:d2:bd:16:96: 65:1d:14:13:86:93:51:63:dd:d8:0a:57:0e:1c:b8:19:98:9c: 21:25:10:7a:96:02:34:1f:f2:fd:69:73:c7:f3:97:a0:91:d7: 4f:40:dc:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLNgvoRoSILzv1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ0MzQxNmQtNmZhYi00NzhjLTgwOGYtMzhjMDQzMTQyZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk9nHzxCaoyda7pI3bGK9wz7THWBv8R+byla y253xC+r6o5Q3x1GlcEP7syBHYgxqymTXE1W7yfzzmkKvdNntB+iiCwM01glNizK CxaS75LX0oHZRZT6I8uX3cXp+XfIZQ5zoq2s6ZCCGTx7161QVUPuI4PZq75sALtl AdQsQwO8Tzl6Sq/+nE91EMMN8/c0iSIzod8ROsFDOyv/U4P3zr60h1jtyS1uhc4T yQIm9GyN0yBXDhhUsMBIW+3dYLsgqzBjvI+A2GNgCy/nACHlVfxLUfGqn0mA91N9 7YHywOhVV27tYxQAvFnveerJdM+6t3U689SdWACcC1iOxdfdUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDRgsx003NbkSz6lO5Z5dmruUn/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApzi24YAp4V7my0FUmhfQolyFmg2+SZGm5ENat7CCOXGTr+KTut70O JCK9hlVxTZR1IPX6aSbP0F2UzN8L5RizI0Qg/beJF/mMNPr7/y3NU4+ctfXPNOw9 BZYplMslZUkKhBtbpQ7tTBph55zUDdcIInmnFmMXOfZYF0Iv3QW/JtfdAbtJIWWi A0n/KkcCZmPENvwmyXOfWKoVZORGRKP9GlPrIoY+0D9N5+vhWOQAqFFYvMf9ROXm dC/H/wTQUpmOTJCaYdz2w8rHJmqs+cdEEkI0ydK9FpZlHRQThpNRY93YClcOHLgZ mJwhJRB6lgI0H/L9aXPH85egkddPQNzY -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:12 2025 by rpki-client