$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa File: 849f041b-2e30-30e5-b488-bf73e770191d.roa (raw, json) Hash identifier: OSm7frhFYDwspp06ZB78jlNW6WjQanCVdQj9d5HjvMk= Subject key identifier: 3A:20:0F:10:BA:AD:8A:7C:93:F7:11:AB:B0:43:09:D8:CF:C3:51:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C9129745B9D74B9AD800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 216.168.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:12:97:45:b9:d7:4b:9a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=991f9efc-6759-4bb8-8812-3a585ec6d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:13:0a:73:1b:73:b6:3f:14:1a:83:6f:2b: c3:1e:3f:6e:a0:d2:26:f1:2f:98:24:69:4c:07:25: c3:eb:17:7c:17:1c:95:dd:1d:53:b5:8b:3f:8b:fb: b3:74:03:c1:f0:1b:a5:ce:96:9d:92:74:e9:61:69: 38:80:12:62:a9:ae:84:c9:24:5e:e2:00:81:ee:38: 9d:4e:5b:c3:44:39:ca:e4:26:c8:05:a1:16:d0:af: 13:3f:2d:ba:1b:4c:ad:99:2d:3c:5c:c5:01:46:55: 40:98:2b:82:fb:74:23:7b:2f:c5:37:61:3a:6b:fe: e7:b7:2a:f6:02:91:21:08:3d:bd:2c:d4:63:7a:e7: 9c:57:65:30:a1:2e:6c:0c:ad:f1:52:42:60:08:62: 7e:c5:54:a9:68:76:db:ba:82:4f:55:f6:e0:f0:79: 5d:31:2c:a2:40:03:8d:4d:7a:49:5f:b8:04:26:0f: 76:6a:6e:34:bd:4a:c4:f9:55:07:82:3f:89:fd:99: d7:5b:cd:a2:7f:67:66:ed:c9:a5:58:23:0b:66:c6: 01:31:3b:66:12:0a:3a:bf:1b:2e:4f:34:96:5d:2f: c8:f3:85:69:9c:95:c2:6b:d9:b2:5f:19:5f:c0:ad: 23:72:8a:0f:b1:5d:87:70:1a:24:23:78:dc:b7:06: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:20:0F:10:BA:AD:8A:7C:93:F7:11:AB:B0:43:09:D8:CF:C3:51:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/849f041b-2e30-30e5-b488-bf73e770191d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:15:93:45:93:ac:db:8e:49:97:48:ff:0a:73:b2:97:be:a8: 3a:28:cd:4b:c9:4a:e1:b9:f9:d6:c9:11:03:21:a4:7f:3b:7d: d2:37:c6:39:17:23:f7:84:03:91:ab:1d:b8:aa:9f:6f:58:a3: 95:1b:ac:da:e6:15:00:ab:66:51:fa:8b:06:71:a3:0d:26:d1: 9f:9e:6a:00:16:9a:5c:5a:0d:14:50:7e:f5:f8:9b:ed:d8:3f: 29:d2:87:57:aa:c2:5d:dc:64:4d:dc:14:a2:7f:f9:67:e4:df: d9:68:1f:dc:eb:7a:34:fc:2e:9f:c9:74:42:07:0f:f3:e6:74: 77:5a:7f:e5:6a:6e:70:aa:89:61:c8:4f:86:e3:36:de:88:af: 32:66:8f:10:ae:0a:6b:a1:0b:52:3f:0b:37:d4:3f:08:2b:b5: a3:e2:df:52:42:14:31:3a:1a:25:28:83:ce:b9:5f:60:c6:ae: 1d:91:7b:5b:6c:0c:6a:1e:53:1b:16:2d:1e:ee:81:fe:8b:87: cb:3a:af:a7:e0:c3:cc:61:05:5e:b8:d8:a0:6c:ee:ec:f2:e0: c8:44:c7:bf:59:db:08:52:3c:fa:c8:60:de:9d:b8:1d:d4:9a: 87:33:cc:ff:35:d6:d9:3c:66:7d:1d:c4:b6:d1:40:ea:04:9b: e7:09:0c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8kSl0W510ua2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk OTkxZjllZmMtNjc1OS00YmI4LTg4MTItM2E1ODVlYzZkNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi28TCnMbc7Y/FBqDbyvDHj9uoNIm8S+YJGlM ByXD6xd8FxyV3R1TtYs/i/uzdAPB8BulzpadknTpYWk4gBJiqa6EySRe4gCB7jid TlvDRDnK5CbIBaEW0K8TPy26G0ytmS08XMUBRlVAmCuC+3Qjey/FN2E6a/7ntyr2 ApEhCD29LNRjeuecV2UwoS5sDK3xUkJgCGJ+xVSpaHbbuoJPVfbg8HldMSyiQAON TXpJX7gEJg92am40vUrE+VUHgj+J/ZnXW82if2dm7cmlWCMLZsYBMTtmEgo6vxsu TzSWXS/I84VpnJXCa9myXxlfwK0jcooPsV2HcBokI3jctwa3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDogDxC6rYp8k/cRq7BDCdjPw1HhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQ5ZjA0MWItMmUzMC0z MGU1LWI0ODgtYmY3M2U3NzAxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwVk0WTrNuOSZdI/wpzspe+qDoozUvJSuG5+dbJEQMhpH87fdI3xjkX I/eEA5GrHbiqn29Yo5UbrNrmFQCrZlH6iwZxow0m0Z+eagAWmlxaDRRQfvX4m+3Y PynSh1eqwl3cZE3cFKJ/+Wfk39loH9zrejT8Lp/JdEIHD/PmdHdaf+VqbnCqiWHI T4bjNt6IrzJmjxCuCmuhC1I/CzfUPwgrtaPi31JCFDE6GiUog865X2DGrh2Re1ts DGoeUxsWLR7ugf6Lh8s6r6fgw8xhBV642KBs7uzy4MhEx79Z2whSPPrIYN6duB3U moczzP811tk8Zn0dxLbRQOoEm+cJDIw= -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:09 2025 by rpki-client