$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa File: 6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa (raw, json) Hash identifier: iuGcBA3+MGGdaxvl4zuna5tv9Z+sO7DOhxHhv52pvQg= Subject key identifier: 06:33:00:1E:59:BE:E9:0C:03:26:B4:14:37:30:24:FE:80:C0:FA:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB0FA054EBEA0FD720580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396591 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:fa:05:4e:be:a0:fd:72:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=aeaaed51-b55f-4548-98f0-f7b3f8fd2589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:c0:ab:61:60:35:fb:15:1e:65:38:9a:b5: a1:c7:c4:ce:ab:05:9e:8e:7d:0c:7c:7f:7d:47:00: 74:ab:d0:25:fc:95:00:07:4f:2e:d7:9a:29:1c:03: 9e:db:8e:b9:d1:27:12:6b:50:db:01:25:c9:23:e3: 14:8f:8e:35:75:c2:7e:ac:e0:bc:e1:eb:21:3d:32: c9:3f:db:39:c3:0c:f8:b4:b9:b6:60:9f:ec:a6:6c: fa:d2:5c:fb:61:47:5b:b0:12:e5:04:8f:b4:a4:c2: ab:2b:85:a7:a5:7d:06:5f:8a:67:52:62:74:1e:81: 99:f4:78:db:52:d8:10:c6:06:b2:99:12:88:e3:f3: 19:ed:1d:d3:6a:ba:20:e3:71:3a:9a:89:4e:97:df: 35:65:70:14:9e:16:a4:e4:95:3a:ee:ec:37:40:00: e0:5d:8f:d0:23:fb:cd:8e:60:cd:ef:3e:ab:56:62: 65:0f:c3:7b:bd:e6:e5:93:e6:00:d2:c3:95:8a:37: 1d:c3:13:20:d0:ef:a2:40:fa:08:89:5c:7e:6c:cd: f2:1c:b8:4e:04:a0:11:41:99:98:e5:8a:5b:98:db: b5:a6:6b:df:83:44:a1:32:c7:5e:90:ec:44:eb:07: b9:58:7e:e1:6c:59:a6:9d:e0:fe:7f:42:06:f2:f9: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:33:00:1E:59:BE:E9:0C:03:26:B4:14:37:30:24:FE:80:C0:FA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b1:34:e9:b5:5f:27:78:67:f4:cf:7d:2c:28:09:c2:cd:e8: 37:2b:b7:cf:2d:d0:7f:09:29:d8:f4:50:55:c8:d3:ee:b6:eb: e5:0f:bb:5e:b2:e6:e0:cb:20:50:ce:8a:26:14:a7:50:cf:19: ed:cf:43:f7:ea:f2:88:98:fc:48:45:c9:de:c4:0a:de:8b:6d: 95:25:d5:23:ee:03:ce:d5:55:4d:e4:60:9c:c8:07:2a:47:06: ee:00:f0:fd:87:34:2a:24:29:00:31:02:2d:f4:ac:cc:c7:9a: 2c:6c:d3:70:9b:66:ea:eb:b8:b8:2d:b7:7f:31:8b:db:86:3a: 7d:b1:48:d0:b1:cc:de:8e:62:c3:36:26:0c:16:17:34:99:56: 40:1b:8f:3c:0f:9d:c7:f8:06:f8:2d:b7:77:8c:4c:e4:8a:51: 56:21:20:3e:dc:e0:65:32:7e:77:d0:5b:79:d3:84:8c:e9:74: 59:59:f5:48:6b:d4:05:b7:75:43:71:d1:e9:74:45:f0:09:39: 64:54:8f:34:f7:65:37:57:6e:1e:c5:c4:7f:60:a5:97:0a:9d: be:e0:53:07:b5:ce:14:aa:d0:42:d1:ba:97:30:60:1f:d0:07: 2c:55:8c:4b:63:14:52:06:c2:5a:90:9b:17:5a:df:58:ef:5e: 20:49:33:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLD6BU6+oP1yBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWVhYWVkNTEtYjU1Zi00NTQ4LTk4ZjAtZjdiM2Y4ZmQyNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvXAq2FgNfsVHmU4mrWhx8TOqwWejn0MfH99 RwB0q9Al/JUAB08u15opHAOe24650ScSa1DbASXJI+MUj441dcJ+rOC84eshPTLJ P9s5wwz4tLm2YJ/spmz60lz7YUdbsBLlBI+0pMKrK4WnpX0GX4pnUmJ0HoGZ9Hjb UtgQxgaymRKI4/MZ7R3Tarog43E6molOl981ZXAUnhak5JU67uw3QADgXY/QI/vN jmDN7z6rVmJlD8N7veblk+YA0sOVijcdwxMg0O+iQPoIiVx+bM3yHLhOBKARQZmY 5YpbmNu1pmvfg0ShMsdekOxE6we5WH7hbFmmneD+f0IG8vkgBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAYzAB5ZvukMAya0FDcwJP6AwPpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmU5N2E2OTEtN2EwOS0z ZWU0LWFhM2UtNDYyMmJmMDg1YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjsTTptV8neGf0z30sKAnCzeg3K7fPLdB/CSnY9FBVyNPutuvlD7te subgyyBQzoomFKdQzxntz0P36vKImPxIRcnexArei22VJdUj7gPO1VVN5GCcyAcq RwbuAPD9hzQqJCkAMQIt9KzMx5osbNNwm2bq67i4Lbd/MYvbhjp9sUjQsczejmLD NiYMFhc0mVZAG488D53H+Ab4Lbd3jEzkilFWISA+3OBlMn530Ft504SM6XRZWfVI a9QFt3VDcdHpdEXwCTlkVI8092U3V24excR/YKWXCp2+4FMHtc4UqtBC0bqXMGAf 0AcsVYxLYxRSBsJakJsXWt9Y714gSTMN -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:21 2025 by rpki-client