$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa File: 710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa (raw, json) Hash identifier: Goy0w4LSEjSNjuFe9Np2WQq4A4q6bwsf3Jd5b+0TyKk= Subject key identifier: 4E:B1:00:A3:5F:40:2C:E1:C5:71:18:2F:9A:1D:98:12:B3:70:BC:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77A00FA6D587553DA0A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397209 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:00:fa:6d:58:75:53:da:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=63dadca0-450d-4410-b51e-06910354245e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:e8:22:d1:c1:64:dc:23:7b:ce:c8:8a:33: 24:c1:65:6d:8b:fb:f2:1c:e7:e9:6b:cd:6a:38:b4: 24:c4:ed:ec:b1:b0:48:e8:f8:b7:13:99:b9:4a:58: cb:c8:7c:ae:3f:5f:18:6c:ee:c4:0e:ca:0d:31:41: 17:56:98:68:a2:96:7f:ad:68:88:28:5b:81:39:1b: 07:02:53:9b:39:03:54:20:1c:64:61:05:63:57:2d: c9:d8:ba:32:27:ba:81:eb:21:5b:47:e4:98:81:ed: 03:5b:a4:7c:8b:49:18:a9:9a:7d:f5:c8:65:1c:b8: 96:3e:70:f4:d2:59:38:3f:29:2c:f7:e4:82:54:25: f0:cf:56:0c:ff:25:e1:f3:e4:4d:41:0c:29:b6:d0: d7:9b:95:24:10:75:e5:89:3f:30:31:4b:60:0c:43: 22:fb:73:2a:e6:69:2b:f8:41:59:33:be:2f:45:72: 76:0b:e2:4d:c0:b9:d2:6a:47:ea:bc:c1:d2:99:04: 26:ee:be:d6:46:81:87:0d:42:ca:d8:75:63:80:f1: 29:f8:8e:86:6d:f5:3d:15:ce:ef:91:77:fc:c2:59: af:9d:6f:b1:a2:9c:c0:62:72:26:e7:99:d8:49:ef: 47:29:69:74:f5:8a:90:14:cd:af:56:84:3f:77:be: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B1:00:A3:5F:40:2C:E1:C5:71:18:2F:9A:1D:98:12:B3:70:BC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/710980b6-603d-3f9c-89bb-eb7cb9f223f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1a:ba:b8:7d:e8:9d:b0:5f:6a:71:46:52:30:c0:51:7d:e8: c2:e1:ef:f8:0c:e7:ce:ee:48:1a:47:f4:4a:89:91:c2:91:6d: 3d:6b:e9:36:f0:52:94:66:bf:8f:5d:ca:d3:5b:c6:87:ba:e5: 9e:56:1c:6a:c4:8f:03:8c:01:34:2e:86:22:1b:d3:cd:11:b3: d4:c4:d6:8e:d1:e9:fe:d8:29:a8:d2:fa:31:ad:21:c6:89:89: 64:78:18:d0:78:c1:68:90:87:63:7e:99:95:1f:2c:3a:f1:d7: 9d:d6:a0:f3:a6:5b:b3:2e:9a:05:df:6f:9d:e0:cd:98:44:c3: a4:7f:e8:64:3a:a7:1d:ce:b5:50:39:7e:0d:a0:c0:13:1f:64: ff:2b:18:0a:81:23:37:58:5a:03:2f:d1:4d:2f:8d:c1:4a:68: 3d:bf:76:1b:fc:5c:72:9b:ec:c6:32:fa:92:fe:e7:ef:f1:6b: 47:6a:91:b8:c7:5a:36:68:b3:79:1b:eb:a6:d4:6a:d6:17:12: 50:6f:a0:6d:26:a4:11:8c:ac:83:64:03:1c:a3:ab:6b:c0:d0: 10:f0:c5:e6:8a:77:19:e3:40:64:3f:19:5b:38:b9:9e:55:69: ca:72:69:07:46:64:fe:7e:a9:a7:67:03:39:56:91:1c:6f:28: af:96:68:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3oA+m1YdVPaCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjNkYWRjYTAtNDUwZC00NDEwLWI1MWUtMDY5MTAzNTQyNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld/oItHBZNwje87IijMkwWVti/vyHOfpa81q OLQkxO3ssbBI6Pi3E5m5SljLyHyuP18YbO7EDsoNMUEXVphoopZ/rWiIKFuBORsH AlObOQNUIBxkYQVjVy3J2LoyJ7qB6yFbR+SYge0DW6R8i0kYqZp99chlHLiWPnD0 0lk4Pyks9+SCVCXwz1YM/yXh8+RNQQwpttDXm5UkEHXliT8wMUtgDEMi+3Mq5mkr +EFZM74vRXJ2C+JNwLnSakfqvMHSmQQm7r7WRoGHDULK2HVjgPEp+I6GbfU9Fc7v kXf8wlmvnW+xopzAYnIm55nYSe9HKWl09YqQFM2vVoQ/d75iAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6xAKNfQCzhxXEYL5odmBKzcLyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzEwOTgwYjYtNjAzZC0z ZjljLTg5YmItZWI3Y2I5ZjIyM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0aurh96J2wX2pxRlIwwFF96MLh7/gM587uSBpH9EqJkcKRbT1r6Tbw UpRmv49dytNbxoe65Z5WHGrEjwOMATQuhiIb080Rs9TE1o7R6f7YKajS+jGtIcaJ iWR4GNB4wWiQh2N+mZUfLDrx153WoPOmW7MumgXfb53gzZhEw6R/6GQ6px3OtVA5 fg2gwBMfZP8rGAqBIzdYWgMv0U0vjcFKaD2/dhv8XHKb7MYy+pL+5+/xa0dqkbjH WjZos3kb66bUatYXElBvoG0mpBGMrINkAxyjq2vA0BDwxeaKdxnjQGQ/GVs4uZ5V acpyaQdGZP5+qadnAzlWkRxvKK+WaAo= -----END CERTIFICATE-----Generated at Wed Oct 29 20:29:25 2025 by rpki-client