$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa File: 68a20c58-9a80-3699-b583-558702d23887.roa (raw, json) Hash identifier: MLrhDnBesJ6XdY7z822lgRflRgbrL+X4HDhxbS9Qra8= Subject key identifier: B6:E3:99:EA:7C:98:B4:16:EE:13:34:2C:38:BA:CC:0C:E0:8A:60:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77D76C2971977F1599380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20431 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7d:76:c2:97:19:77:f1:59:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=2a0652da-0531-46ee-9323-40aa982302b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:51:82:6d:72:76:2e:13:2f:25:7c:58:55: ad:32:4a:ca:53:84:0a:db:5f:59:81:5b:8c:ce:27: 1e:8d:2d:7e:82:8b:e1:56:03:f1:b3:f6:ff:61:a5: bb:91:71:e3:fe:71:e6:a3:b1:c3:3f:a9:09:5d:37: 83:70:f9:1c:75:62:80:77:e7:9f:4a:24:3c:bf:49: fc:0c:6b:f1:ca:c3:47:67:fd:d3:2e:99:8d:47:bd: ec:45:9a:c1:12:bf:c0:04:29:cf:75:0b:ed:83:45: e8:09:eb:3d:21:b9:2b:42:00:b1:3e:66:ef:46:14: 5e:db:0a:0f:51:00:16:70:d8:be:83:51:b3:ae:db: 09:61:a4:2f:90:62:7f:ab:94:4e:97:d6:7a:c2:4e: 1d:88:39:84:11:02:03:68:be:4f:54:2c:48:b2:86: 1f:a3:d0:9d:14:74:da:2d:d7:c6:71:ec:cd:19:ec: ba:49:24:2e:f2:ab:10:bf:99:fd:56:19:40:68:52: a4:6d:9e:78:5b:6d:05:3d:dd:7a:45:e3:13:24:17: 77:df:7d:54:f1:8d:ca:13:3b:7c:f3:ca:ff:6f:a9: c1:b8:e5:c3:0f:fb:bb:be:37:9b:2f:80:85:20:2f: 83:b7:2c:b5:2e:81:7c:2e:02:b1:07:c7:18:72:12: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:99:EA:7C:98:B4:16:EE:13:34:2C:38:BA:CC:0C:E0:8A:60:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c3:7d:44:50:47:2c:87:ec:2c:fe:30:60:85:27:3b:ca:66: 82:53:ac:24:c8:ef:31:1e:d8:4d:3e:13:4d:bd:e2:63:b2:f7: be:01:0c:78:12:44:81:3c:86:5b:31:01:76:07:bd:b4:98:0a: e9:1d:7d:06:59:81:5a:a8:fe:b8:62:45:1e:59:03:78:f7:31: 2d:57:68:8e:04:06:b7:63:0b:cd:46:f5:55:17:0d:79:9c:2f: df:c8:e2:0f:ae:e7:6a:4a:3a:0a:d3:98:0f:ba:bc:38:62:3e: b6:c4:d6:4d:63:59:37:1a:98:34:77:32:94:66:8d:d0:ee:e5: 42:b4:d3:90:12:8f:46:f5:5c:f1:45:f3:42:b4:c5:50:5a:23: 6f:b9:ef:e4:94:40:59:90:f4:08:cb:17:0e:1e:84:7c:db:80: 13:fe:f7:48:91:6c:9e:e9:d5:2f:30:a2:e5:0c:f2:a9:f4:30: de:4d:1e:af:c4:f9:6f:78:cf:ef:f3:9f:19:48:1e:57:d2:e0: 71:8c:06:26:68:e3:d6:1b:3b:e2:34:1e:a0:82:3c:8d:bb:e3: 4b:61:ae:6d:31:a9:45:e7:63:3f:ed:1d:28:eb:58:b5:cd:c6: 68:dd:f7:cc:47:5c:b1:5b:6a:8a:55:0c:ba:bd:61:29:21:b3: a0:e2:5c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx312wpcZd/FZk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MmEwNjUyZGEtMDUzMS00NmVlLTkzMjMtNDBhYTk4MjMwMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFRgm1ydi4TLyV8WFWtMkrKU4QK219ZgVuM zicejS1+govhVgPxs/b/YaW7kXHj/nHmo7HDP6kJXTeDcPkcdWKAd+efSiQ8v0n8 DGvxysNHZ/3TLpmNR73sRZrBEr/ABCnPdQvtg0XoCes9IbkrQgCxPmbvRhRe2woP UQAWcNi+g1GzrtsJYaQvkGJ/q5ROl9Z6wk4diDmEEQIDaL5PVCxIsoYfo9CdFHTa LdfGcezNGey6SSQu8qsQv5n9VhlAaFKkbZ54W20FPd16ReMTJBd3331U8Y3KEzt8 88r/b6nBuOXDD/u7vjebL4CFIC+Dtyy1LoF8LgKxB8cYchIdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbjmep8mLQW7hM0LDi6zAzgimAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhhMjBjNTgtOWE4MC0z Njk5LWI1ODMtNTU4NzAyZDIzODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjDfURQRyyH7Cz+MGCFJzvKZoJTrCTI7zEe2E0+E0294mOy974BDHgS RIE8hlsxAXYHvbSYCukdfQZZgVqo/rhiRR5ZA3j3MS1XaI4EBrdjC81G9VUXDXmc L9/I4g+u52pKOgrTmA+6vDhiPrbE1k1jWTcamDR3MpRmjdDu5UK005ASj0b1XPFF 80K0xVBaI2+57+SUQFmQ9AjLFw4ehHzbgBP+90iRbJ7p1S8wouUM8qn0MN5NHq/E +W94z+/znxlIHlfS4HGMBiZo49YbO+I0HqCCPI2740thrm0xqUXnYz/tHSjrWLXN xmjd98xHXLFbaopVDLq9YSkhs6DiXE0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:05 2025 by rpki-client