$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa File: 5b8b2999-e481-3499-95c4-43200cd0febc.roa (raw, json) Hash identifier: qIFWtpdg7TXvgF6Z17mtt2snJOwC+V2CsZ0zhfD/Mfo= Subject key identifier: 67:89:0B:93:B6:C7:0E:D1:ED:4A:67:2F:50:00:DC:57:A5:E0:B1:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAEBD98020755262B9E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396600 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ae:bd:98:02:07:55:26:2b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=e6bb6de4-9d2b-4ffa-b155-2ea7e6f3b316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:76:38:b8:80:34:33:a3:db:5e:86:eb:f4: 2a:ed:13:19:cf:2d:76:80:ce:ce:44:01:08:9e:97: 21:dd:5b:e3:16:9a:28:4b:61:6e:91:ff:30:07:68: 40:75:f2:ea:4b:22:0e:99:19:e7:6b:1e:2f:ec:67: bc:4c:5e:6d:44:98:20:50:ac:56:f0:dd:b0:12:fb: b8:17:dd:0d:ea:ed:5d:9a:b1:10:e2:71:6b:36:4d: eb:30:29:3d:2f:24:a5:93:02:1e:3a:34:8d:ee:58: c9:4e:20:5b:ac:21:22:7b:9f:4f:3d:f8:d6:c9:7a: d9:7f:73:b6:d7:ab:1d:6e:2b:21:32:43:c0:df:47: da:63:d9:94:64:23:ac:e3:92:37:70:10:e6:55:e5: 6f:03:e0:3a:9a:c6:0d:d2:5a:52:62:26:06:85:39: 8a:92:df:fb:33:4c:dd:1d:f1:04:a1:ca:f8:a6:c4: 5a:ea:76:f1:9f:48:2b:eb:83:e9:4c:27:f7:5a:3f: e0:70:9d:a9:d9:f2:57:87:40:3b:5e:53:41:68:9d: d5:c8:29:51:eb:f2:df:06:95:da:e8:32:6e:87:ff: 55:f5:28:aa:63:d4:cb:59:43:e6:f1:51:d8:91:c6: ca:c4:a8:38:69:a6:e4:70:5e:55:33:92:62:18:02: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:0B:93:B6:C7:0E:D1:ED:4A:67:2F:50:00:DC:57:A5:E0:B1:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a5:a6:1e:32:a1:6b:68:c8:9a:f2:69:31:fb:ea:e2:27:05: ca:ec:48:7b:4e:90:d2:81:e7:c7:e7:b0:6d:e2:29:d3:32:2c: d7:64:44:8c:f4:e0:9b:41:51:8d:da:a4:c4:f3:2b:91:cd:d6: 04:01:75:8e:64:6f:c9:16:e6:99:dc:88:b2:64:23:b0:e8:a8: 1a:15:13:f6:fa:86:a3:bd:9e:28:10:31:62:52:f5:c5:04:66: 33:2b:5c:6a:d7:a1:71:ff:74:36:b0:6c:4c:d3:9f:f7:7a:ab: d5:2b:0f:97:69:f2:7d:10:b8:08:91:ed:2d:8e:eb:5b:36:78: bc:df:22:81:e6:f8:9b:aa:60:0a:0c:c3:cb:66:21:5d:41:94: 58:ab:88:d5:2a:0b:33:e7:5a:b4:8b:da:3a:b5:6c:9c:f1:4b: c8:a3:c0:45:dd:bf:e8:63:38:ab:aa:0d:1b:21:b7:87:de:17: 51:83:0d:cd:cb:fb:e5:db:e5:29:20:5a:af:d1:92:cd:ca:c4: 15:4b:bb:b0:a2:ab:43:76:c8:2a:e9:64:f2:60:1a:04:f1:34: e9:4c:77:98:e3:8f:38:ae:b5:ef:99:d4:e3:97:9d:00:13:95: 71:2a:bb:a2:4e:09:a5:3d:72:35:45:3c:cb:f0:ef:f9:8d:0c: 97:b2:cb:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK69mAIHVSYrngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTZiYjZkZTQtOWQyYi00ZmZhLWIxNTUtMmVhN2U2ZjNiMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1et2OLiANDOj216G6/Qq7RMZzy12gM7ORAEI npch3VvjFpooS2Fukf8wB2hAdfLqSyIOmRnnax4v7Ge8TF5tRJggUKxW8N2wEvu4 F90N6u1dmrEQ4nFrNk3rMCk9LySlkwIeOjSN7ljJTiBbrCEie59PPfjWyXrZf3O2 16sdbishMkPA30faY9mUZCOs45I3cBDmVeVvA+A6msYN0lpSYiYGhTmKkt/7M0zd HfEEocr4psRa6nbxn0gr64PpTCf3Wj/gcJ2p2fJXh0A7XlNBaJ3VyClR6/LfBpXa 6DJuh/9V9SiqY9TLWUPm8VHYkcbKxKg4aabkcF5VM5JiGAIU6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGeJC5O2xw7R7UpnL1AA3Fel4LGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI4YjI5OTktZTQ4MS0z NDk5LTk1YzQtNDMyMDBjZDBmZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXpaYeMqFraMia8mkx++riJwXK7Eh7TpDSgefH57Bt4inTMizXZESM 9OCbQVGN2qTE8yuRzdYEAXWOZG/JFuaZ3IiyZCOw6KgaFRP2+oajvZ4oEDFiUvXF BGYzK1xq16Fx/3Q2sGxM05/3eqvVKw+XafJ9ELgIke0tjutbNni83yKB5vibqmAK DMPLZiFdQZRYq4jVKgsz51q0i9o6tWyc8UvIo8BF3b/oYzirqg0bIbeH3hdRgw3N y/vl2+UpIFqv0ZLNysQVS7uwoqtDdsgq6WTyYBoE8TTpTHeY4484rrXvmdTjl50A E5VxKruiTgmlPXI1RTzL8O/5jQyXssvu -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:47 2025 by rpki-client