$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa File: 4af9227c-5b03-3294-9ff8-b4e25c39e237.roa (raw, json) Hash identifier: l2MEdX0HmsdIEOhIj/XiMrt6R/+4Hb2ef5Oh9mVZsK8= Subject key identifier: B0:B3:EA:4A:AA:D6:63:0F:98:E6:DC:74:8B:73:A6:6C:5A:B7:91:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAF3B538854E251643F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397205 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:3b:53:88:54:e2:51:64:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=8cc2b3b2-72a2-487e-b476-5d6b45c22cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:71:eb:03:b5:8e:94:5c:18:38:99:fc:83: f0:95:62:2c:4e:57:9e:0f:e4:16:29:d9:fd:a8:5a: 8a:15:c7:1c:62:ba:96:c0:72:6e:4d:ee:cf:9e:91: c3:1e:8f:5d:67:ce:af:df:7e:f1:69:99:e7:8e:4a: 78:bd:53:03:ec:2d:8a:d2:9b:e0:f7:78:2e:89:64: f2:d0:83:68:71:9c:e5:a2:d5:22:f5:2a:f7:ef:5d: 0a:22:a6:67:8b:b4:c0:ec:94:25:86:40:2c:1d:e1: 41:ab:40:a7:b3:a9:6b:f9:2c:08:a1:e0:fb:29:66: 52:5d:c7:db:ca:6b:61:90:80:d3:a6:19:f1:81:b3: 9b:91:fd:fe:c6:b5:9a:f6:9d:ef:44:92:48:2f:97: 9d:fd:47:56:31:c8:82:d6:8b:2d:be:03:0b:2b:a1: ad:56:5c:41:b8:c6:69:15:22:f2:b3:fa:4f:af:90: bd:7e:82:de:82:8c:61:9e:52:65:50:7a:ad:d9:cd: 3d:60:b0:fc:33:cf:88:20:f7:73:72:df:0a:ae:55: 02:a0:71:2d:fc:ac:71:70:20:84:99:5f:50:e0:ec: f9:4b:7c:f3:37:99:16:15:bb:a7:93:56:c6:4f:4a: a0:fd:2f:6a:f6:c6:1c:29:99:67:4e:86:f5:78:2f: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B3:EA:4A:AA:D6:63:0F:98:E6:DC:74:8B:73:A6:6C:5A:B7:91:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c8:95:2d:c3:63:40:22:4f:b2:80:8c:0f:cd:04:e4:77:5d: b5:99:4e:54:50:cb:8a:e1:d3:84:9c:18:77:c3:8b:0b:42:65: 16:1c:19:ba:51:fd:e4:86:b0:50:9d:6c:a9:d3:41:52:e3:82: 4e:de:42:bb:66:f4:a6:35:47:00:f5:e2:e4:46:d3:a3:27:9b: 71:01:95:f7:97:e7:2b:bf:2e:6b:33:1c:e7:a5:9b:c1:77:da: 1d:e9:10:b3:48:3f:35:c2:f8:8a:62:a2:8e:66:15:65:1a:1c: eb:98:9b:14:ae:45:3c:bc:13:ba:16:4b:1b:a0:3b:95:ca:8d: cf:e6:4e:c0:ed:1f:96:cd:cc:12:a5:f1:8b:25:4b:18:f8:7a: 0b:e4:b7:ca:cd:12:23:97:a9:8c:61:17:d9:48:84:8e:bb:f7: d7:0a:ef:4a:55:e2:83:61:b3:64:bc:d2:0e:46:6a:0d:d2:4c: 4a:90:84:65:e6:73:2a:50:9f:71:de:96:75:a1:c0:e4:3c:c8: 47:61:05:6a:d5:5a:05:53:e3:67:f0:64:fd:44:33:47:d2:26: 76:12:01:5f:6b:5e:0b:74:5e:7f:96:d8:77:51:5f:5d:8f:b9: 13:17:fd:08:07:7d:81:e2:2e:f6:d7:f2:6f:e4:9b:52:ca:07: 2c:d6:e8:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK87U4hU4lFkPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGNjMmIzYjItNzJhMi00ODdlLWI0NzYtNWQ2YjQ1YzIyY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GVx6wO1jpRcGDiZ/IPwlWIsTleeD+QWKdn9 qFqKFcccYrqWwHJuTe7PnpHDHo9dZ86v337xaZnnjkp4vVMD7C2K0pvg93guiWTy 0INocZzlotUi9Sr3710KIqZni7TA7JQlhkAsHeFBq0Cns6lr+SwIoeD7KWZSXcfb ymthkIDTphnxgbObkf3+xrWa9p3vRJJIL5ed/UdWMciC1ostvgMLK6GtVlxBuMZp FSLys/pPr5C9foLegoxhnlJlUHqt2c09YLD8M8+IIPdzct8KrlUCoHEt/KxxcCCE mV9Q4Oz5S3zzN5kWFbunk1bGT0qg/S9q9sYcKZlnTob1eC9N4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLCz6kqq1mMPmObcdItzpmxat5G2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFmOTIyN2MtNWIwMy0z Mjk0LTlmZjgtYjRlMjVjMzllMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1yJUtw2NAIk+ygIwPzQTkd121mU5UUMuK4dOEnBh3w4sLQmUWHBm6 Uf3khrBQnWyp00FS44JO3kK7ZvSmNUcA9eLkRtOjJ5txAZX3l+crvy5rMxznpZvB d9od6RCzSD81wviKYqKOZhVlGhzrmJsUrkU8vBO6FksboDuVyo3P5k7A7R+WzcwS pfGLJUsY+HoL5LfKzRIjl6mMYRfZSISOu/fXCu9KVeKDYbNkvNIORmoN0kxKkIRl 5nMqUJ9x3pZ1ocDkPMhHYQVq1VoFU+Nn8GT9RDNH0iZ2EgFfa14LdF5/lth3UV9d j7kTF/0IB32B4i721/Jv5JtSygcs1ug1 -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:27 2025 by rpki-client