$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa File: 856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa (raw, json) Hash identifier: EFAtXp6Rzu3DjESBAWmYxXPIXaoNbNdD2yxZOSRCgGw= Subject key identifier: 8D:8F:92:3E:0D:2B:AB:1E:1C:6E:D4:A2:29:21:8F:C1:47:B8:59:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC779948485039EEEE0C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397195 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:94:84:85:03:9e:ee:e0:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=84bc8088-dbcf-4ea7-8bef-9b27751c2925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:85:8a:68:2a:47:42:f3:1d:52:17:41:37: ab:24:07:a7:7d:1c:a5:c3:14:62:84:28:f5:03:a8: 2b:c5:dc:46:12:f9:65:72:06:c4:00:7f:62:cd:59: f5:0e:79:80:67:61:24:3c:22:55:7d:81:1e:9c:cd: 20:bc:b5:54:67:43:76:ce:83:b9:03:c3:7e:43:55: bf:fd:a3:10:a3:cc:f6:fe:bc:16:75:47:59:20:3c: e6:85:71:e3:02:b6:e8:30:ec:66:2f:1d:a7:ac:ee: e9:23:8c:eb:03:a0:14:29:2e:4c:bf:9d:ef:d7:db: 72:1a:6d:88:f9:74:a7:e5:b1:9b:e0:5f:aa:a1:80: f1:4e:83:63:c4:11:c9:9f:ff:4f:a9:aa:92:0c:ae: b8:66:55:0a:12:ad:35:ba:36:b3:11:dc:15:e6:25: 03:5e:a3:78:0e:c4:55:2d:98:57:eb:56:ad:57:12: ad:0f:4b:cf:e1:ef:be:c9:3c:e5:48:f9:00:e5:91: 56:76:ca:f5:6f:e2:26:7a:17:d6:aa:97:94:b8:36: 3d:af:53:62:03:96:0d:d6:14:98:9a:38:d6:89:74: 33:87:d9:59:3e:9b:47:6a:d0:2c:dc:a7:3a:5c:85: 2a:6c:7e:0d:12:42:49:d8:10:65:1e:56:d1:77:fb: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8F:92:3E:0D:2B:AB:1E:1C:6E:D4:A2:29:21:8F:C1:47:B8:59:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5e:a9:f9:65:cc:9c:ff:85:af:dc:c5:f1:59:53:d6:68:55: 83:03:34:d4:ca:09:c1:f9:8b:60:37:4a:e2:af:98:32:fc:6f: a0:47:a6:f7:4e:b0:d0:a5:9d:00:16:80:f0:bd:2f:ec:59:56: 69:ae:59:e4:db:46:ea:3e:99:5f:c9:76:b0:b2:e6:96:6d:de: 7e:12:f4:ab:d4:97:68:fc:0a:8d:84:79:25:72:7b:e1:d9:53: ab:b6:38:6f:30:12:3b:7e:c1:79:47:35:57:83:68:cb:d0:f5: c6:f7:b6:f2:81:af:9e:34:6a:dc:38:6c:a7:f3:c4:08:12:84: 6b:66:01:af:5b:93:7f:d6:17:94:e4:8c:8d:67:68:53:1b:f0: 4f:88:84:bd:59:f9:93:0e:16:f4:16:b5:0e:84:af:56:2b:84: d2:b6:d7:c4:91:e8:9a:95:10:1b:17:89:2c:6f:62:2b:e5:89: b2:76:d2:4c:14:9c:42:29:ff:41:1b:da:4d:7e:51:5d:11:52: 46:1b:db:49:24:a0:ba:46:00:3a:04:ac:9d:99:86:34:e5:12: dd:a1:53:0e:84:f5:1c:fe:0c:37:6c:6f:f0:f5:0f:44:44:9f: f4:ce:fa:2f:f5:f8:62:11:26:b9:69:d0:b7:30:18:8d:58:47: bf:d3:d2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3mUhIUDnu7gyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ODRiYzgwODgtZGJjZi00ZWE3LThiZWYtOWIyNzc1MWMyOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiOFimgqR0LzHVIXQTerJAenfRylwxRihCj1 A6grxdxGEvllcgbEAH9izVn1DnmAZ2EkPCJVfYEenM0gvLVUZ0N2zoO5A8N+Q1W/ /aMQo8z2/rwWdUdZIDzmhXHjArboMOxmLx2nrO7pI4zrA6AUKS5Mv53v19tyGm2I +XSn5bGb4F+qoYDxToNjxBHJn/9PqaqSDK64ZlUKEq01ujazEdwV5iUDXqN4DsRV LZhX61atVxKtD0vP4e++yTzlSPkA5ZFWdsr1b+ImehfWqpeUuDY9r1NiA5YN1hSY mjjWiXQzh9lZPptHatAs3Kc6XIUqbH4NEkJJ2BBlHlbRd/v0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2Pkj4NK6seHG7Uoikhj8FHuFkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2ZjU2OTMtYzRkMy0z MmFkLWE5ZmYtZjhhMGYwOTIyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9eqfllzJz/ha/cxfFZU9ZoVYMDNNTKCcH5i2A3SuKvmDL8b6BHpvdO sNClnQAWgPC9L+xZVmmuWeTbRuo+mV/JdrCy5pZt3n4S9KvUl2j8Co2EeSVye+HZ U6u2OG8wEjt+wXlHNVeDaMvQ9cb3tvKBr540atw4bKfzxAgShGtmAa9bk3/WF5Tk jI1naFMb8E+IhL1Z+ZMOFvQWtQ6Er1YrhNK218SR6JqVEBsXiSxvYivlibJ20kwU nEIp/0Eb2k1+UV0RUkYb20kkoLpGADoErJ2ZhjTlEt2hUw6E9Rz+DDdsb/D1D0RE n/TO+i/1+GIRJrlp0LcwGI1YR7/T0v8= -----END CERTIFICATE-----Generated at Wed Oct 29 13:44:41 2025 by rpki-client