$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/834c46d8-a056-387c-ba69-5ae75022d6b3.roa File: 834c46d8-a056-387c-ba69-5ae75022d6b3.roa (raw, json) Hash identifier: GdZpNp108YAM7Y7vy8FIrWK9O9Gs/nyEO+cNVUQJPjc= Subject key identifier: 0E:A8:B9:C9:01:38:7D:8E:2A:7D:6C:A0:AF:2B:F1:96:04:95:35:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77AE4A4555230BBB7AD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/834c46d8-a056-387c-ba69-5ae75022d6b3.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396584 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:e4:a4:55:52:30:bb:b7:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=3bf27eeb-aac0-430d-9eb4-7723dc30a9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:a5:67:6a:9e:7d:24:b0:73:59:c2:b5:21: b2:f4:6d:fb:32:bd:62:5b:da:6e:5f:83:4c:03:02: db:f9:80:78:a6:8c:11:7e:79:45:71:8e:c2:1a:c6: e6:07:3a:71:8f:17:97:ce:e9:3f:eb:88:5a:ed:26: c0:14:a5:51:b7:15:65:4d:1a:2a:d9:56:71:02:a5: 93:4a:e3:54:82:51:37:5d:0c:e3:7f:61:8d:bc:4c: d8:52:72:3a:c0:3d:65:76:0e:f5:9c:40:a6:71:0f: 74:ad:05:20:2c:c1:f1:fb:cc:90:0e:1c:ee:23:f2: 30:52:d0:e8:48:c2:9a:f7:8c:40:94:70:2f:cc:d0: 76:5d:15:d6:df:78:4c:34:6b:70:6d:ce:5c:81:c5: 8e:d4:6c:96:ff:5a:2a:7c:79:13:37:c3:7f:a4:8d: d3:c0:e1:d7:45:74:9d:11:ba:65:6d:e9:71:76:bc: 19:20:20:58:de:be:86:1b:68:f9:e3:80:cb:c3:cb: a3:83:bf:ed:7b:3c:02:4d:ba:6e:91:87:78:7b:d1: 04:51:cc:07:01:5a:fa:85:1c:21:b5:c6:bd:d5:12: 42:d9:e8:44:5c:22:1e:5c:5b:89:98:b7:2f:6f:7c: 06:b5:1c:57:c4:a4:62:9f:f7:e1:87:17:c8:64:eb: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:B9:C9:01:38:7D:8E:2A:7D:6C:A0:AF:2B:F1:96:04:95:35:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/834c46d8-a056-387c-ba69-5ae75022d6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2b:e7:62:f1:0e:e1:01:19:3d:9b:d7:41:43:8d:20:0a:6b: 7b:a5:83:81:9e:d0:31:c3:89:f1:61:0e:52:fc:58:3d:95:46: 73:83:97:4a:ca:2f:b6:c2:f5:bc:20:64:37:0c:c2:46:2f:8a: 07:92:9a:d1:0d:cb:4d:3c:05:8f:d1:60:7d:0c:33:21:3b:dc: b4:ae:5c:57:cf:48:8a:66:7f:86:94:cb:4b:f6:e9:7b:ef:7b: 18:e4:e0:d9:d6:3b:4a:55:73:cc:c2:59:25:b4:84:7a:a5:6a: 58:5b:8d:8f:1e:fe:92:2c:b9:a0:c4:47:f4:5d:57:70:e9:a5: 70:c5:85:08:c2:bd:1a:a6:32:02:fc:d0:c8:3b:70:c4:9b:fb: 39:c8:6d:ba:97:00:b9:ea:48:21:9b:8e:13:1f:9a:49:90:ab: 13:f7:fc:e6:59:0f:81:fa:2b:bc:9c:bb:69:7c:97:08:ad:56: 74:90:ec:00:e3:17:fa:9a:25:c0:88:53:ac:96:26:fb:ea:1d: ed:55:9a:7a:7a:4b:a8:9c:15:07:76:d0:fa:ba:55:7d:c7:3d: ef:95:a9:19:b3:85:f6:60:dd:f8:49:9f:36:c6:95:0d:6c:ed: f0:45:0f:2f:f4:99:38:c9:1a:c5:5a:06:36:c0:30:17:c5:b5: c5:38:29:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3rkpFVSMLu3rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk M2JmMjdlZWItYWFjMC00MzBkLTllYjQtNzcyM2RjMzBhOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA6lZ2qefSSwc1nCtSGy9G37Mr1iW9puX4NM AwLb+YB4powRfnlFcY7CGsbmBzpxjxeXzuk/64ha7SbAFKVRtxVlTRoq2VZxAqWT SuNUglE3XQzjf2GNvEzYUnI6wD1ldg71nECmcQ90rQUgLMHx+8yQDhzuI/IwUtDo SMKa94xAlHAvzNB2XRXW33hMNGtwbc5cgcWO1GyW/1oqfHkTN8N/pI3TwOHXRXSd EbplbelxdrwZICBY3r6GG2j544DLw8ujg7/tezwCTbpukYd4e9EEUcwHAVr6hRwh tca91RJC2ehEXCIeXFuJmLcvb3wGtRxXxKRin/fhhxfIZOvYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6ouckBOH2OKn1soK8r8ZYElTUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODM0YzQ2ZDgtYTA1Ni0z ODdjLWJhNjktNWFlNzUwMjJkNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4r52LxDuEBGT2b10FDjSAKa3ulg4Ge0DHDifFhDlL8WD2VRnODl0rK L7bC9bwgZDcMwkYvigeSmtENy008BY/RYH0MMyE73LSuXFfPSIpmf4aUy0v26Xvv exjk4NnWO0pVc8zCWSW0hHqlalhbjY8e/pIsuaDER/RdV3DppXDFhQjCvRqmMgL8 0Mg7cMSb+znIbbqXALnqSCGbjhMfmkmQqxP3/OZZD4H6K7ycu2l8lwitVnSQ7ADj F/qaJcCIU6yWJvvqHe1Vmnp6S6icFQd20Pq6VX3HPe+VqRmzhfZg3fhJnzbGlQ1s 7fBFDy/0mTjJGsVaBjbAMBfFtcU4KXc= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:20 2025 by rpki-client