$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/636b2384-0abd-3c87-a599-db01d9b93714.roa File: 636b2384-0abd-3c87-a599-db01d9b93714.roa (raw, json) Hash identifier: BCRVBM32+YtcKo/dsSx0gEZ44hfJAxjFwVDX/st/IAM= Subject key identifier: 99:02:C3:1E:31:BF:44:C9:01:84:22:35:D9:1D:C1:F0:A0:F0:23:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77C7B3B47618D53094800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/636b2384-0abd-3c87-a599-db01d9b93714.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 19836 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:7b:3b:47:61:8d:53:09:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=272a64fa-ec4d-4558-9867-9799d99f05a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:b1:7e:e5:fc:6e:b3:00:8a:40:ae:f1:a4: 11:ba:bc:b2:fa:11:0b:ec:ff:66:8f:c0:87:b4:63: 44:85:3d:cc:e3:b9:7a:7c:d1:47:f0:d4:05:e3:84: 70:ff:43:a3:73:6c:c2:05:be:e1:d1:1f:b7:1a:5a: 41:5f:50:07:9c:ab:e0:d7:60:79:9a:77:fd:9f:d8: 79:21:76:41:b5:d1:94:f6:aa:35:d7:b3:be:38:2d: 98:4c:ff:93:01:69:71:25:fd:c3:85:80:17:ab:a0: c8:ae:b2:a0:e4:89:d1:3d:88:03:8e:20:08:59:02: b6:e9:4b:7f:61:22:36:59:74:2b:da:7d:d9:a8:10: be:d9:88:a1:f4:c8:e3:64:01:a3:93:38:4c:32:38: 1d:c4:44:d9:8a:05:8e:a0:8a:ba:c2:4f:1e:4f:b9: e6:d2:bc:95:33:5b:e0:aa:46:ca:26:98:9b:e8:1c: 87:be:a8:85:74:b4:11:ce:3d:f6:e4:64:b9:df:70: ba:56:94:f5:09:af:fc:1f:42:93:ce:af:73:e0:01: 50:d7:3b:af:7c:66:19:0b:b7:7f:12:29:79:85:91: 78:9f:2f:de:a7:80:84:62:df:31:d1:f3:97:52:ad: 6d:0f:a1:16:34:61:72:b1:af:bd:99:c9:e2:66:e3: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:C3:1E:31:BF:44:C9:01:84:22:35:D9:1D:C1:F0:A0:F0:23:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/636b2384-0abd-3c87-a599-db01d9b93714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cd:5c:20:28:d9:4c:24:53:32:aa:23:d1:0b:78:3b:9e:db: 57:7f:ed:62:d9:f9:92:66:cc:bc:79:4b:99:c6:e4:1d:14:e5: be:af:d9:6c:33:3d:85:43:53:ca:43:e2:c4:b2:20:a7:2d:91: 93:b1:f5:42:28:6f:d4:0e:a9:9d:76:14:b1:1b:c9:53:b3:45: b1:e9:0c:a1:c7:cb:5c:10:bb:34:b0:b5:e4:6e:8a:f6:75:32: 20:88:93:f4:be:1b:e8:f0:54:a4:39:00:3a:2e:33:ae:f5:97: bf:c9:a8:32:d2:2e:9c:38:d2:83:cc:76:a2:30:88:44:7a:ea: 37:16:52:ba:6e:60:61:df:a7:b2:02:a3:84:9e:69:44:8b:cc: a6:bd:5e:f3:b5:78:fd:fb:ac:93:f4:96:1e:0b:70:e9:d2:ff: 52:24:3a:ee:98:06:5e:07:49:5e:a3:2b:45:7f:5b:d4:6f:ef: 77:90:0a:f6:f9:36:f2:1c:2c:0b:f2:66:d9:d7:a9:bf:03:a2: 18:5f:f8:e1:29:29:4d:28:6e:20:93:a9:2f:8e:b4:53:e8:fb: ba:4c:3b:cc:05:a9:60:af:82:53:74:0d:41:ad:a0:64:aa:e2: 72:b7:dd:0c:4d:b3:c2:73:31:0e:67:a6:05:99:7f:bc:b6:3e: 72:d4:40:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3x7O0dhjVMJSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjcyYTY0ZmEtZWM0ZC00NTU4LTk4NjctOTc5OWQ5OWYwNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ixfuX8brMAikCu8aQRuryy+hEL7P9mj8CH tGNEhT3M47l6fNFH8NQF44Rw/0Ojc2zCBb7h0R+3GlpBX1AHnKvg12B5mnf9n9h5 IXZBtdGU9qo117O+OC2YTP+TAWlxJf3DhYAXq6DIrrKg5InRPYgDjiAIWQK26Ut/ YSI2WXQr2n3ZqBC+2Yih9MjjZAGjkzhMMjgdxETZigWOoIq6wk8eT7nm0ryVM1vg qkbKJpib6ByHvqiFdLQRzj325GS533C6VpT1Ca/8H0KTzq9z4AFQ1zuvfGYZC7d/ Eil5hZF4ny/ep4CEYt8x0fOXUq1tD6EWNGFysa+9mcniZuOAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkCwx4xv0TJAYQiNdkdwfCg8COdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjM2YjIzODQtMGFiZC0z Yzg3LWE1OTktZGIwMWQ5YjkzNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzNXCAo2UwkUzKqI9ELeDue21d/7WLZ+ZJmzLx5S5nG5B0U5b6v2Wwz PYVDU8pD4sSyIKctkZOx9UIob9QOqZ12FLEbyVOzRbHpDKHHy1wQuzSwteRuivZ1 MiCIk/S+G+jwVKQ5ADouM671l7/JqDLSLpw40oPMdqIwiER66jcWUrpuYGHfp7IC o4SeaUSLzKa9XvO1eP37rJP0lh4LcOnS/1IkOu6YBl4HSV6jK0V/W9Rv73eQCvb5 NvIcLAvyZtnXqb8Dohhf+OEpKU0obiCTqS+OtFPo+7pMO8wFqWCvglN0DUGtoGSq 4nK33QxNs8JzMQ5npgWZf7y2PnLUQLA= -----END CERTIFICATE-----Generated at Wed Oct 29 11:51:07 2025 by rpki-client