$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa File: 43e4df47-4969-3a04-8e97-881b8f84f808.roa (raw, json) Hash identifier: a8eSiZw8ig8cxBXVGB2yj5GK+57BgCRZURdwSbMgVII= Subject key identifier: ED:91:F3:3A:8E:0C:81:B7:FA:E8:F7:55:8B:F3:76:0A:34:56:F7:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB5948FB62043143FDB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396562 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b5:94:8f:b6:20:43:14:3f:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=eda99d40-60a4-4d28-b06a-a001e80cf860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:4e:7e:7f:d6:6e:b7:0c:f2:60:1f:bf:20: c5:1f:77:fc:dd:3d:70:e5:97:2b:96:4f:b4:2e:8f: e2:a6:5c:1a:a2:7b:9b:d9:2a:34:c2:a0:1d:45:fe: 7d:63:f6:d9:4f:c6:f3:75:7c:d9:fe:81:c7:b6:14: 3f:7c:6e:b1:d5:59:e1:7b:7d:c2:64:36:12:e1:db: a4:f3:24:39:e1:99:1d:5d:63:11:e8:b0:2e:c7:d2: 9e:b6:b0:a4:77:86:b0:8e:e6:89:1f:4d:cc:85:c3: 90:3f:1c:d8:3f:22:d7:ed:a3:7b:39:11:20:f5:d1: 06:38:3b:33:02:f2:07:ea:aa:e2:ce:08:90:50:75: 0e:2f:52:72:13:be:0c:c4:e0:e9:78:c6:5f:44:09: de:b6:7f:3d:76:29:cc:46:0e:34:de:c5:ba:05:bb: ba:41:e6:79:a5:9a:8e:b4:aa:c1:24:e3:7f:5c:5b: dd:25:5a:ce:74:34:c6:3a:9a:67:f2:3b:02:ec:99: c3:52:bb:f0:0b:16:88:24:2b:6f:b0:a5:50:57:3f: 3e:7d:c2:59:00:46:0d:be:bd:a9:f7:ce:e8:1d:53: bd:c2:13:32:81:73:65:16:6d:f9:2b:56:cd:50:74: 11:bc:79:21:c9:cb:20:d8:e5:17:79:97:ae:db:62: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:91:F3:3A:8E:0C:81:B7:FA:E8:F7:55:8B:F3:76:0A:34:56:F7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:53:f6:16:be:79:75:69:ce:dc:07:57:ed:2d:80:ac:61:e9: d5:35:a2:21:54:20:bb:34:25:d4:2e:9d:5b:ad:cf:9d:dd:9a: e9:77:90:15:93:28:b9:a4:1b:09:34:11:d8:79:0f:37:dc:57: 35:fc:ec:87:ba:cc:0a:41:4f:db:89:ba:84:b2:89:cb:c0:b7: 9f:5c:bb:52:e9:44:22:7d:24:71:c9:93:59:0e:d2:cf:15:ae: 17:0a:d3:e3:d0:3b:4d:ec:c9:97:65:ac:43:43:56:ef:72:6e: 59:86:11:08:17:0f:e2:98:13:40:4f:93:47:ac:ab:dc:e5:e6: c2:56:b6:c4:f5:15:09:78:9b:b6:e0:e5:4d:3a:e7:f4:6e:f5: 5a:16:8a:b3:ac:f0:56:3d:8d:63:e4:88:98:15:fc:fc:57:d9: c3:d4:9d:e2:21:fe:25:c3:0d:e0:44:ac:f8:73:ac:9a:b1:e3: ea:57:8f:aa:43:6a:18:fa:17:af:cd:7c:63:38:bb:61:e7:2b: b7:f4:df:e4:0e:08:3d:55:b3:73:3a:87:47:84:4e:4c:2c:e8: 64:c7:60:2c:d1:d7:c1:f9:70:ba:67:ff:87:c7:7e:71:f8:fe: b8:a8:44:0e:6a:7d:6c:0c:69:95:a5:4c:af:b1:af:08:d6:f0: ea:95:12:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLWUj7YgQxQ/24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWRhOTlkNDAtNjBhNC00ZDI4LWIwNmEtYTAwMWU4MGNmODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfROfn/WbrcM8mAfvyDFH3f83T1w5Zcrlk+0 Lo/iplwaonub2So0wqAdRf59Y/bZT8bzdXzZ/oHHthQ/fG6x1Vnhe33CZDYS4duk 8yQ54ZkdXWMR6LAux9KetrCkd4awjuaJH03MhcOQPxzYPyLX7aN7OREg9dEGODsz AvIH6qrizgiQUHUOL1JyE74MxODpeMZfRAnetn89dinMRg403sW6Bbu6QeZ5pZqO tKrBJON/XFvdJVrOdDTGOppn8jsC7JnDUrvwCxaIJCtvsKVQVz8+fcJZAEYNvr2p 987oHVO9whMygXNlFm35K1bNUHQRvHkhycsg2OUXeZeu22IqzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO2R8zqODIG3+uj3VYvzdgo0VvceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNGRmNDctNDk2OS0z YTA0LThlOTctODgxYjhmODRmODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHU/YWvnl1ac7cB1ftLYCsYenVNaIhVCC7NCXULp1brc+d3Zrpd5AV kyi5pBsJNBHYeQ833Fc1/OyHuswKQU/bibqEsonLwLefXLtS6UQifSRxyZNZDtLP Fa4XCtPj0DtN7MmXZaxDQ1bvcm5ZhhEIFw/imBNAT5NHrKvc5ebCVrbE9RUJeJu2 4OVNOuf0bvVaFoqzrPBWPY1j5IiYFfz8V9nD1J3iIf4lww3gRKz4c6yasePqV4+q Q2oY+hevzXxjOLth5yu39N/kDgg9VbNzOodHhE5MLOhkx2As0dfB+XC6Z/+Hx35x +P64qEQOan1sDGmVpUyvsa8I1vDqlRI0 -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:23 2025 by rpki-client