$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa File: 62a8da01-aa05-39dc-b60f-99811a175a77.roa (raw, json) Hash identifier: 64j1Bwvg/g2vgwPgdeTqFApF+T3tIbxWWQ0nsO9zJ0U= Subject key identifier: 21:4F:BF:2D:C4:56:17:FA:44:A1:36:6B:E7:17:CE:D1:FB:40:5D:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77BD92331BA273E0E2880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397200 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:d9:23:31:ba:27:3e:0e:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=fc826634-6dec-483f-a733-217d40ecd3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:a1:4c:bd:d0:1c:bc:be:6f:3a:b3:63:e6: 17:7f:67:37:3f:5f:b1:01:15:b4:ec:13:db:ec:15: 6d:6e:01:3d:f2:cc:0f:04:c5:7b:53:4a:b2:79:c3: 07:95:e6:d6:ae:d0:88:04:cc:32:62:4d:31:d8:83: 11:e2:13:42:7d:29:b3:de:33:80:a3:ca:d8:7d:50: fa:02:54:b2:f8:27:88:7f:d6:b6:2f:49:57:5b:ee: de:5e:02:52:b8:84:97:33:51:6c:33:16:d7:c6:e3: 4e:04:cf:da:1e:4a:81:a3:31:22:ee:c8:7d:76:6c: ef:e8:46:46:42:db:dd:03:d5:9a:dd:61:2d:f2:aa: a2:ba:5f:b9:a2:91:c2:ef:d1:d6:1a:38:13:15:1b: 7a:f2:18:37:87:87:ef:ac:8f:b1:f7:ab:82:72:4b: 3b:74:f0:6b:13:57:4a:86:60:7f:4d:c9:dd:44:fe: ec:98:4d:4d:33:0e:e4:73:19:8b:e3:34:67:78:45: bf:ab:e0:6f:07:b2:3d:a0:f3:52:21:b0:59:38:d3: 3a:7b:57:9a:cc:dc:09:ce:53:70:8a:f0:5b:f4:3c: ad:13:f0:b1:f7:d9:73:d3:4b:97:69:d3:6e:2d:80: 67:61:e3:0c:d8:1b:61:d4:7d:f0:a4:12:62:58:ee: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:BF:2D:C4:56:17:FA:44:A1:36:6B:E7:17:CE:D1:FB:40:5D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a1:67:9c:40:80:f7:41:f7:89:c1:0f:fc:13:5a:52:14:ef: 6c:8d:23:ed:96:a3:7e:02:bf:4e:62:87:66:f9:51:0a:c5:6b: ee:a2:25:ee:c8:8c:0d:65:11:5a:02:1b:68:27:66:b6:33:d8: 20:07:d4:54:83:5a:07:33:0e:03:40:b2:a4:7f:76:5f:63:95: 6f:65:f1:32:f6:34:b2:62:7c:47:71:36:2f:fd:51:36:ea:d4: 4f:b0:26:e0:a3:7c:7a:a4:fc:5f:06:84:73:18:80:78:eb:12: fc:8e:ef:95:84:9c:5d:41:69:75:16:5b:58:64:d4:3a:99:33: c9:9b:69:d7:3a:f4:50:b4:fd:a6:69:88:3f:05:6d:71:a2:a2: 76:17:2f:06:a0:47:02:cc:01:0a:19:47:95:3f:ba:31:70:09: cc:90:85:84:b6:01:42:1e:6d:33:bb:d0:44:0b:42:ee:25:2e: c7:3c:ca:b4:c8:24:77:43:48:a9:ca:d0:23:5e:62:de:ad:48: ad:17:30:47:cc:cc:8f:58:18:6d:2e:e9:ac:9d:ad:6d:a7:b2: 6e:db:f4:21:c5:04:37:e3:c8:d2:8f:1a:5c:95:c6:02:ed:a0: 13:7c:c4:88:2a:01:5c:66:fb:35:ca:0a:00:22:d3:22:f5:e2: c4:93:ab:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3vZIzG6Jz4OKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZmM4MjY2MzQtNmRlYy00ODNmLWE3MzMtMjE3ZDQwZWNkM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlyhTL3QHLy+bzqzY+YXf2c3P1+xARW07BPb 7BVtbgE98swPBMV7U0qyecMHlebWrtCIBMwyYk0x2IMR4hNCfSmz3jOAo8rYfVD6 AlSy+CeIf9a2L0lXW+7eXgJSuISXM1FsMxbXxuNOBM/aHkqBozEi7sh9dmzv6EZG QtvdA9Wa3WEt8qqiul+5opHC79HWGjgTFRt68hg3h4fvrI+x96uCcks7dPBrE1dK hmB/TcndRP7smE1NMw7kcxmL4zRneEW/q+BvB7I9oPNSIbBZONM6e1eazNwJzlNw ivBb9DytE/Cx99lz00uXadNuLYBnYeMM2Bth1H3wpBJiWO4iPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFPvy3EVhf6RKE2a+cXztH7QF1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjJhOGRhMDEtYWEwNS0z OWRjLWI2MGYtOTk4MTFhMTc1YTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAahZ5xAgPdB94nBD/wTWlIU72yNI+2Wo34Cv05ih2b5UQrFa+6iJe7I jA1lEVoCG2gnZrYz2CAH1FSDWgczDgNAsqR/dl9jlW9l8TL2NLJifEdxNi/9UTbq 1E+wJuCjfHqk/F8GhHMYgHjrEvyO75WEnF1BaXUWW1hk1DqZM8mbadc69FC0/aZp iD8FbXGionYXLwagRwLMAQoZR5U/ujFwCcyQhYS2AUIebTO70EQLQu4lLsc8yrTI JHdDSKnK0CNeYt6tSK0XMEfMzI9YGG0u6aydrW2nsm7b9CHFBDfjyNKPGlyVxgLt oBN8xIgqAVxm+zXKCgAi0yL14sSTq9c= -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:49 2025 by rpki-client