$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa File: 5aa49181-7067-32b3-a458-81e58ac1d399.roa (raw, json) Hash identifier: L8RZTS/Jx3whxQ0c3C8QTxGrp049atYFB+iMUSkCE2w= Subject key identifier: 23:42:4B:E1:D2:AF:60:15:0D:D5:9F:44:41:33:3B:90:19:90:4A:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAE86D27227BD5BB69100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396554 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ae:86:d2:72:27:bd:5b:b6:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=c61b4d7c-e137-4291-89f8-7b2aa123c999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:39:ef:3a:f5:92:39:b0:0e:16:8d:cc:de: b4:bd:82:1b:fd:41:7f:83:f9:62:66:39:6d:2a:bb: 8d:40:14:f5:77:1d:e0:d9:70:59:58:dc:81:4e:82: 9f:c6:ed:0c:0c:e7:6b:16:23:a5:6c:c1:8c:54:8f: 69:d4:37:f9:93:f8:5d:59:2a:20:44:ef:c6:1d:19: fe:f8:83:93:22:65:54:97:e6:34:26:1f:4d:9b:26: 35:08:6f:fc:64:b4:7d:67:53:10:39:a7:ad:b4:40: db:b7:ac:e4:f4:e9:d2:c8:62:51:eb:63:8e:b9:04: 0d:f4:eb:7c:76:79:2c:86:17:e9:53:96:2c:83:ec: 40:e0:38:f2:67:dc:8c:a7:81:4f:1b:d5:5b:0c:a3: d0:1a:d9:4d:54:d0:a9:d1:d4:3e:e9:bf:52:83:44: 46:d6:1a:5a:bc:d3:93:f7:fe:77:d5:1f:c4:49:66: bf:99:99:1d:af:42:26:32:92:cb:89:ad:72:51:3e: 4a:cb:80:1c:3c:fd:4a:bd:a3:48:5a:86:a6:d6:e3: f0:68:c5:d8:c9:bf:63:e7:54:9d:35:62:72:c2:90: 2e:37:02:8a:c5:35:38:5e:c4:eb:cf:c5:56:3b:8e: 92:6f:6d:94:7e:99:18:ca:e3:a4:95:ee:2b:5e:22: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:4B:E1:D2:AF:60:15:0D:D5:9F:44:41:33:3B:90:19:90:4A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa49181-7067-32b3-a458-81e58ac1d399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:77:d8:53:46:ec:08:d4:78:b5:69:7f:58:45:a8:0a:4f:8f: 07:df:1e:3a:a3:35:4f:d3:8a:ff:30:c5:e2:3e:62:f4:1c:3a: 37:c4:82:be:0d:a5:a5:e9:67:d1:84:40:86:b0:75:d7:64:82: a9:78:7d:c4:93:75:76:34:26:cf:6c:b1:e5:b8:ef:12:d8:5d: 71:7d:92:ad:1c:a2:9e:ae:60:2a:48:b8:cf:9c:55:a0:e4:fc: 52:91:a7:6a:ef:fc:75:ee:08:b7:87:fa:da:d4:4f:83:dc:f9: e2:81:e2:8d:f2:b1:7c:6a:6b:ab:81:00:9a:a9:71:b3:b0:a5: 97:f8:b4:b3:d9:71:39:94:f0:f3:07:01:09:bb:2d:69:b8:bc: de:df:9d:a1:c0:ca:67:2e:12:f9:64:4c:d7:88:80:c8:61:33: 87:f3:66:b5:8a:ea:a1:17:86:79:2d:e5:a5:0e:5f:c6:a3:0a: f0:40:04:29:de:eb:62:63:20:a5:31:0e:31:df:a5:8b:9d:ef: 6c:3a:5d:31:03:02:3f:fb:ca:8a:76:76:78:83:36:54:b6:75: 9b:67:91:45:5b:f2:50:73:1f:a0:ae:e3:8f:fa:2c:59:f5:2b: 34:04:78:5b:39:51:21:c2:73:42:6e:37:0a:55:fe:96:9b:70: a0:f7:df:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK6G0nInvVu2kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzYxYjRkN2MtZTEzNy00MjkxLTg5ZjgtN2IyYWExMjNjOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1M57zr1kjmwDhaNzN60vYIb/UF/g/liZjlt KruNQBT1dx3g2XBZWNyBToKfxu0MDOdrFiOlbMGMVI9p1Df5k/hdWSogRO/GHRn+ +IOTImVUl+Y0Jh9NmyY1CG/8ZLR9Z1MQOaettEDbt6zk9OnSyGJR62OOuQQN9Ot8 dnkshhfpU5Ysg+xA4DjyZ9yMp4FPG9VbDKPQGtlNVNCp0dQ+6b9Sg0RG1hpavNOT 9/531R/ESWa/mZkdr0ImMpLLia1yUT5Ky4AcPP1KvaNIWoam1uPwaMXYyb9j51Sd NWJywpAuNwKKxTU4XsTrz8VWO46Sb22UfpkYyuOkle4rXiKVzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCNCS+HSr2AVDdWfREEzO5AZkEo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDkxODEtNzA2Ny0z MmIzLWE0NTgtODFlNThhYzFkMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLd9hTRuwI1Hi1aX9YRagKT48H3x46ozVP04r/MMXiPmL0HDo3xIK+ DaWl6WfRhECGsHXXZIKpeH3Ek3V2NCbPbLHluO8S2F1xfZKtHKKermAqSLjPnFWg 5PxSkadq7/x17gi3h/ra1E+D3PnigeKN8rF8amurgQCaqXGzsKWX+LSz2XE5lPDz BwEJuy1puLze352hwMpnLhL5ZEzXiIDIYTOH82a1iuqhF4Z5LeWlDl/GowrwQAQp 3utiYyClMQ4x36WLne9sOl0xAwI/+8qKdnZ4gzZUtnWbZ5FFW/JQcx+gruOP+ixZ 9Ss0BHhbOVEhwnNCbjcKVf6Wm3Cg99// -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:10 2025 by rpki-client