$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa File: 77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa (raw, json) Hash identifier: SE1UGQ3k8GV5rorGvmDRVVLYM3n38x9VJ3wP2sxKCqk= Subject key identifier: 00:1C:0E:5B:31:15:A2:56:BD:75:A5:BB:76:59:D7:76:5F:E0:FD:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77A6D654820D3807B1180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 36630 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:6d:65:48:20:d3:80:7b:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=527e4aed-4f25-46f2-84cc-93cc68cfffbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:a3:24:bc:fe:82:89:ac:bc:a1:38:d1:46: e0:de:c3:f7:21:7f:55:7f:13:2b:54:b8:8e:e9:ef: b9:7e:0a:00:99:40:e3:ff:05:9c:2d:4a:89:53:03: e1:c2:9c:90:4c:ea:81:68:3c:73:bd:5d:c8:4c:cb: c3:89:23:49:61:68:0f:b1:44:a8:bd:be:00:c4:1a: e5:99:13:aa:5f:68:a3:31:29:22:e7:eb:a6:52:cf: 1d:9b:c0:ae:aa:90:78:86:5d:04:c5:ac:97:d2:3f: 60:4b:35:39:e5:ad:33:99:be:f3:95:55:a7:7e:b7: a7:a9:ad:88:37:3c:48:a5:5d:ee:b5:b2:70:f0:30: ee:1c:bc:1f:44:db:c7:2b:4e:f8:51:c4:37:2f:bf: 86:a2:d8:79:0e:00:0a:c9:19:cd:13:34:5c:66:6b: f1:ef:00:5d:61:a3:0c:2f:03:15:9d:ba:50:d2:36: 29:e1:b1:fb:07:dd:3a:f9:e4:f7:e9:a3:31:fd:12: 87:4b:50:f9:b2:37:2c:38:1b:ca:8c:c5:df:ac:8c: b8:d0:52:09:86:53:55:1f:6c:e9:c4:62:b8:e0:f5: 2c:bb:fe:c5:e6:c6:aa:61:0d:77:49:e4:7b:1c:f4: ee:f3:36:ee:bc:ea:9d:01:53:8d:f1:83:44:ae:74: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:0E:5B:31:15:A2:56:BD:75:A5:BB:76:59:D7:76:5F:E0:FD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:27:c4:6b:4a:67:fc:19:0b:3f:f5:f5:6a:17:aa:19:ba:ad: 54:99:da:f1:18:a2:bf:9f:dd:e0:45:8f:97:62:d1:b5:c5:a8: 6d:b7:0d:21:fd:50:97:9a:c3:1a:4c:7b:35:07:6b:8e:ba:0a: 1c:e7:6f:1a:a6:66:26:ef:a6:6f:6e:09:c8:14:74:2d:e8:aa: 32:43:7f:a8:67:59:67:bd:fc:5c:df:ee:15:21:26:81:89:a3: 9d:74:75:d6:8e:1a:ba:3f:d3:71:50:a4:7a:65:64:0e:c0:d3: 06:e6:0d:aa:e6:07:2c:11:34:9d:d1:67:e8:68:e8:53:25:6e: 4a:27:4c:92:af:c0:48:a4:10:64:74:ca:97:ad:a8:6e:0c:3a: 41:37:95:cd:61:a7:26:21:22:5e:6f:c7:7a:5c:48:d9:1c:b2: 0b:e7:6a:c2:9d:71:14:e0:ec:e8:5e:5b:f9:23:8c:d4:f3:55: 2d:cd:b9:aa:65:3b:03:05:59:cf:6d:5e:7f:43:7f:7e:6a:c1: 26:13:fb:ad:c5:5d:65:0f:8b:c3:7e:30:02:29:2b:5e:a9:0f: 4d:fb:d9:a1:e0:14:0b:80:49:64:3c:d2:0b:4d:02:cd:5f:21: c0:f7:28:33:02:e2:51:90:fe:9e:13:6b:8f:c2:45:7a:af:21: 21:06:d6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3ptZUgg04B7EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTI3ZTRhZWQtNGYyNS00NmYyLTg0Y2MtOTNjYzY4Y2ZmZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwijJLz+gomsvKE40Ubg3sP3IX9VfxMrVLiO 6e+5fgoAmUDj/wWcLUqJUwPhwpyQTOqBaDxzvV3ITMvDiSNJYWgPsUSovb4AxBrl mROqX2ijMSki5+umUs8dm8CuqpB4hl0ExayX0j9gSzU55a0zmb7zlVWnfrenqa2I NzxIpV3utbJw8DDuHLwfRNvHK074UcQ3L7+Goth5DgAKyRnNEzRcZmvx7wBdYaMM LwMVnbpQ0jYp4bH7B906+eT36aMx/RKHS1D5sjcsOBvKjMXfrIy40FIJhlNVH2zp xGK44PUsu/7F5saqYQ13SeR7HPTu8zbuvOqdAVON8YNErnSWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAcDlsxFaJWvXWlu3ZZ13Zf4P39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzdhMGJiMGQtNTFmYS0z M2U3LWJhNjMtNzdmY2UzZjM1MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8nxGtKZ/wZCz/19WoXqhm6rVSZ2vEYor+f3eBFj5di0bXFqG23DSH9 UJeawxpMezUHa466ChznbxqmZibvpm9uCcgUdC3oqjJDf6hnWWe9/Fzf7hUhJoGJ o510ddaOGro/03FQpHplZA7A0wbmDarmBywRNJ3RZ+ho6FMlbkonTJKvwEikEGR0 ypetqG4MOkE3lc1hpyYhIl5vx3pcSNkcsgvnasKdcRTg7OheW/kjjNTzVS3Nuapl OwMFWc9tXn9Df35qwSYT+63FXWUPi8N+MAIpK16pD0372aHgFAuASWQ80gtNAs1f IcD3KDMC4lGQ/p4Ta4/CRXqvISEG1jM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:33 2025 by rpki-client