$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa File: 9035d4c8-95b3-3585-a347-c57425b9f39a.roa (raw, json) Hash identifier: P9yx34ao5eUR4+/LGPj0PTDAZ2rQitcHEPx3JVgByqk= Subject key identifier: 83:5E:28:E6:AA:34:18:57:AF:52:92:11:35:8A:59:0A:B6:0F:E0:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77BCB043831B0FBBA7540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396562 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:cb:04:38:31:b0:fb:ba:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=e82021f9-eb00-4001-bf1d-ecf90af81470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:e9:b1:35:a1:e3:eb:2d:4f:a6:a8:16:28: 40:c6:ab:f8:89:07:80:ef:30:f9:6c:fe:35:e6:78: 7c:d9:16:41:a4:c9:45:f5:5b:9e:1d:1b:7e:a9:e4: 78:34:b9:1a:4b:ab:76:63:4b:e2:b2:9c:30:d1:81: 07:59:45:6b:a3:a0:f3:32:21:4e:f4:19:1c:48:6d: c5:b1:62:73:66:eb:17:98:58:be:5c:84:95:b1:2d: 93:51:65:cb:e4:7a:75:3e:f1:3a:c3:7e:6e:4d:42: 99:e4:bc:90:ee:1f:8f:f1:dc:57:a4:22:9a:a0:9a: ee:f0:f9:25:c2:15:ea:d3:5b:e8:de:06:6c:1c:f6: 9e:88:66:eb:63:b1:24:7e:2d:17:c4:f1:5d:79:b8: db:b9:d5:31:1b:51:9c:d3:6c:1c:95:d3:1b:cc:94: df:1c:aa:b3:5e:2d:1f:65:fd:0c:ec:4c:34:fb:52: b9:f6:3a:4f:9d:db:f7:b5:a0:bb:13:1c:7b:86:bc: b7:aa:da:3d:fb:15:8f:5d:6b:3d:de:81:3b:f9:5b: 16:02:09:a6:42:5d:a8:c4:8c:d0:d6:14:ff:0e:f2: a8:56:19:1e:dd:e7:40:d7:f7:f6:99:30:56:42:91: d2:a6:12:99:78:db:c1:6d:ca:33:f9:b8:ab:74:f6: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:28:E6:AA:34:18:57:AF:52:92:11:35:8A:59:0A:B6:0F:E0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5f:d6:92:ac:a8:eb:24:67:33:a1:38:a9:93:16:b6:99:c0: 4d:05:5d:d2:5f:93:0d:db:04:cc:5f:b8:eb:1d:81:1a:81:9d: bd:3d:2b:c6:15:84:d4:68:9e:e3:2d:cd:82:9f:85:e5:99:c0: d6:cc:46:19:a4:2f:a3:18:2b:b9:b5:d4:1a:2b:82:71:b0:de: 18:a3:d6:95:f8:11:a5:8e:63:f5:c8:8c:76:fe:ab:a8:1a:16: 88:1a:0f:e6:af:69:75:82:e0:ad:59:e3:7a:e4:ba:3e:23:36: 00:a8:fd:de:a3:1b:d8:16:50:72:ea:11:fa:14:79:42:3a:0b: b2:80:9b:ad:34:4d:7a:4f:a1:7b:78:26:b2:4b:fa:f0:c9:ec: 07:91:65:c0:32:bb:bd:73:75:86:9e:d5:4b:cc:c9:e5:3e:4f: 4c:66:ad:93:0e:10:59:e4:65:4d:ef:ec:ae:45:00:1d:6f:fc: f4:78:f8:03:54:8d:ed:74:f4:75:64:9d:0b:f8:f4:14:f1:2b: b9:a1:60:45:8e:ea:34:03:66:09:c5:99:02:6c:bf:d0:dd:29: d5:e1:29:09:fc:1a:58:24:d1:8a:8d:b5:ff:e5:94:32:92:7a: 7c:aa:08:c5:9a:71:ef:c5:6c:53:b2:89:dc:b0:f8:ef:1f:c2: bf:30:16:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3vLBDgxsPu6dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZTgyMDIxZjktZWIwMC00MDAxLWJmMWQtZWNmOTBhZjgxNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5LpsTWh4+stT6aoFihAxqv4iQeA7zD5bP41 5nh82RZBpMlF9VueHRt+qeR4NLkaS6t2Y0vispww0YEHWUVro6DzMiFO9BkcSG3F sWJzZusXmFi+XISVsS2TUWXL5Hp1PvE6w35uTUKZ5LyQ7h+P8dxXpCKaoJru8Pkl whXq01vo3gZsHPaeiGbrY7Ekfi0XxPFdebjbudUxG1Gc02wcldMbzJTfHKqzXi0f Zf0M7Ew0+1K59jpPndv3taC7Exx7hry3qto9+xWPXWs93oE7+VsWAgmmQl2oxIzQ 1hT/DvKoVhke3edA1/f2mTBWQpHSphKZeNvBbcoz+birdPYhRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINeKOaqNBhXr1KSETWKWQq2D+B7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTAzNWQ0YzgtOTViMy0z NTg1LWEzNDctYzU3NDI1YjlmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZf1pKsqOskZzOhOKmTFraZwE0FXdJfkw3bBMxfuOsdgRqBnb09K8YV hNRonuMtzYKfheWZwNbMRhmkL6MYK7m11BorgnGw3hij1pX4EaWOY/XIjHb+q6ga FogaD+avaXWC4K1Z43rkuj4jNgCo/d6jG9gWUHLqEfoUeUI6C7KAm600TXpPoXt4 JrJL+vDJ7AeRZcAyu71zdYae1UvMyeU+T0xmrZMOEFnkZU3v7K5FAB1v/PR4+ANU je109HVknQv49BTxK7mhYEWO6jQDZgnFmQJsv9DdKdXhKQn8Glgk0YqNtf/llDKS enyqCMWace/FbFOyidyw+O8fwr8wFlA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:16 2025 by rpki-client