$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa File: 8cb806d6-7611-3785-9497-21625bf59c84.roa (raw, json) Hash identifier: HLNMAYSOjYlIOYG33bpzodaawEr0jqQjVxZDGacTMZM= Subject key identifier: 17:A7:09:30:AF:B7:F7:EE:C9:D9:14:13:41:97:18:6C:7A:D0:99:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB17511F673CF76D40360 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396573 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:75:11:f6:73:cf:76:d4:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=102e6a47-c122-4d17-b0f6-29b9111e592e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:b6:5d:79:30:4b:3f:da:74:d0:ad:69:57: bd:51:ec:a1:41:54:40:7d:46:03:da:12:96:36:83: 61:65:63:e1:cf:e6:bd:2b:75:17:83:ef:3e:f6:c8: c7:af:38:cc:ea:dd:74:aa:70:4e:92:d5:42:b4:61: 94:89:1b:12:22:a7:c2:68:5c:9b:c1:99:b2:fd:e2: ff:50:50:28:6a:98:81:f4:95:b3:4c:34:5c:ad:9c: 86:6e:76:9f:9c:46:fc:19:9e:62:30:67:c3:f8:c0: fb:08:16:41:01:09:fa:51:97:bc:0b:cb:88:2d:91: 72:b9:7e:6b:e4:ae:7e:c6:8a:85:3e:71:8c:aa:ff: 1d:72:1d:1d:9f:53:04:4a:dd:34:6b:b1:64:40:21: d3:68:48:03:de:7b:90:fe:8c:fe:2d:c4:2e:15:a4: db:2b:b1:c7:2b:4f:1a:8c:18:c0:ae:7d:2e:03:4b: c3:03:b7:0f:9e:65:85:32:42:18:71:fc:94:ac:28: 01:ee:11:2b:92:ed:c0:ca:16:91:4f:b2:03:fc:50: 31:88:3d:15:4e:a9:33:b2:fb:59:8a:48:8d:a3:75: 2b:58:fe:2f:b7:0f:4e:ba:80:ff:08:45:a1:e0:5c: 31:8d:f8:2f:a2:ee:eb:56:53:5b:fd:fa:82:df:a4: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:09:30:AF:B7:F7:EE:C9:D9:14:13:41:97:18:6C:7A:D0:99:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f2:c9:db:a9:79:32:79:31:8d:68:d2:9d:26:60:1b:ca:80: 72:41:de:89:be:fc:ee:b8:a5:60:84:71:95:7c:69:29:b3:18: ad:ff:83:e8:f3:e4:7c:d5:7b:c8:c9:90:3b:c5:0e:db:a1:75: 71:78:bd:13:66:b2:6e:c0:88:20:54:e4:da:59:8e:db:e2:b7: d0:81:5d:0b:52:8d:99:cb:c3:04:3e:7e:1a:de:02:03:ac:dc: c1:25:b0:4b:bc:b5:43:e7:50:d1:5d:ad:e2:7a:99:88:7d:cd: 9a:56:f1:7c:ac:fa:e1:91:3d:22:3f:48:33:12:2f:ed:a4:55: 55:33:ae:26:5c:48:81:26:90:55:8c:c8:b6:fa:51:db:98:30: df:78:0f:f5:3d:ac:b0:57:09:2f:81:cf:a2:e8:15:f7:3a:63: e5:40:ee:2d:92:8b:3b:36:02:1e:38:9a:87:fe:e0:7a:dd:b8: 4c:93:d2:ed:53:6d:af:06:12:d6:a2:99:84:d4:79:bb:08:db: 10:ed:ed:dc:c8:9f:5d:ca:45:97:2a:aa:25:ab:00:8d:67:3c: 20:1d:20:71:f8:27:89:2c:89:8f:c0:1e:bd:41:12:86:51:ec: fb:1b:b9:73:1a:1f:21:a5:dc:d5:40:35:7c:48:57:37:6c:c5: 7f:1d:37:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLF1EfZzz3bUA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTAyZTZhNDctYzEyMi00ZDE3LWIwZjYtMjliOTExMWU1OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFW2XXkwSz/adNCtaVe9UeyhQVRAfUYD2hKW NoNhZWPhz+a9K3UXg+8+9sjHrzjM6t10qnBOktVCtGGUiRsSIqfCaFybwZmy/eL/ UFAoapiB9JWzTDRcrZyGbnafnEb8GZ5iMGfD+MD7CBZBAQn6UZe8C8uILZFyuX5r 5K5+xoqFPnGMqv8dch0dn1MESt00a7FkQCHTaEgD3nuQ/oz+LcQuFaTbK7HHK08a jBjArn0uA0vDA7cPnmWFMkIYcfyUrCgB7hErku3AyhaRT7ID/FAxiD0VTqkzsvtZ ikiNo3UrWP4vtw9OuoD/CEWh4Fwxjfgvou7rVlNb/fqC36T+1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBenCTCvt/fuydkUE0GXGGx60JmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGNiODA2ZDYtNzYxMS0z Nzg1LTk0OTctMjE2MjViZjU5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAG8snbqXkyeTGNaNKdJmAbyoByQd6JvvzuuKVghHGVfGkpsxit/4Po 8+R81XvIyZA7xQ7boXVxeL0TZrJuwIggVOTaWY7b4rfQgV0LUo2Zy8MEPn4a3gID rNzBJbBLvLVD51DRXa3iepmIfc2aVvF8rPrhkT0iP0gzEi/tpFVVM64mXEiBJpBV jMi2+lHbmDDfeA/1PaywVwkvgc+i6BX3OmPlQO4tkos7NgIeOJqH/uB63bhMk9Lt U22vBhLWopmE1Hm7CNsQ7e3cyJ9dykWXKqolqwCNZzwgHSBx+CeJLImPwB69QRKG Uez7G7lzGh8hpdzVQDV8SFc3bMV/HTdF -----END CERTIFICATE-----Generated at Wed Oct 29 20:41:59 2025 by rpki-client